You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by Vidar Ramdal <vi...@idium.no> on 2009/07/31 15:51:37 UTC

Bad checksums in LogService Implementation 2.0.6 [WAS: [VOTE] Release Sling OSGi LogService Implementation 2.0.6]

2009/7/31 Felix Meschberger <fm...@gmail.com>:

> We solved 5 issues in this release:
> https://issues.apache.org/jira/browse/SLING/fixforversion/12313975
>
> There are no outstanding known issues
>
> Staging repository:
> https://repository.apache.org/content/repositories/sling-staging-001/
>
> You can use this UNIX script to download the release and verify the
> signatures:
> http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
>
> Usage:
> sh check_staged_release.sh 001 /tmp/sling-staging

I get some bad gpg checksums - am I the only one?
Complete output:

################################################################################
                       USING EXISTING STAGED REPOSITORY
################################################################################
./sling-staging/001
################################################################################
                          CHECK SIGNATURES AND DIGESTS
################################################################################
./sling-staging/001/.index/nexus-maven-repository-index.gz
gpg:  ----
md5:  ----
sha1: GOOD
./sling-staging/001/.index/nexus-maven-repository-index.properties
gpg:  ----
md5:  GOOD
sha1: GOOD
./sling-staging/001/.index/nexus-maven-repository-index.zip
gpg:  ----
md5:  GOOD
sha1: GOOD
./sling-staging/001/.meta/p2-metadata.properties
gpg:  ----
md5:  ----
sha1: ----
./sling-staging/001/.meta/repository-metadata.xml
gpg:  ----
md5:  ----
sha1: ----
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6-project.tar.bz2
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6-project.tar.gz
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6-project.zip
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6-sources.jar
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6.jar
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/2.0.6/org.apache.sling.commons.log-2.0.6.pom
gpg:  BAD!!!!!!!!
md5:  GOOD
sha1: GOOD
./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/maven-metadata.xml
gpg:  ----
md5:  GOOD
sha1: GOOD
################################################################################

-- 
Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
Akersgata 16, N-0158 Oslo, Norway
+47 21 531941, ext 2070

Re: Bad checksums in LogService Implementation 2.0.6 [WAS: [VOTE] Release Sling OSGi LogService Implementation 2.0.6]

Posted by Vidar Ramdal <vi...@idium.no>.
2009/7/31 Ian Boston <ie...@tfd.co.uk>:
> you might need to import Felix's key into gpg (if you haven't already)
>
> I will sheepishly admit to using the OSX GPG gui which allowed me to pull
> the key from the server (search for fmeschbe@apache.org)

Thanks again, Ian!

> There is *probably* a simple command line operation to do this.

:)

-- 
Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
Akersgata 16, N-0158 Oslo, Norway
+47 21 531941, ext 2070

Re: Bad checksums in LogService Implementation 2.0.6 [WAS: [VOTE] Release Sling OSGi LogService Implementation 2.0.6]

Posted by Ian Boston <ie...@tfd.co.uk>.
you might need to import Felix's key into gpg (if you haven't already)

I will sheepishly admit to using the OSX GPG gui which allowed me to  
pull the key from the server (search for fmeschbe@apache.org)
There is *probably* a simple command line operation to do this.

Ian


On 31 Jul 2009, at 14:51, Vidar Ramdal wrote:

> 2009/7/31 Felix Meschberger <fm...@gmail.com>:
>
>> We solved 5 issues in this release:
>> https://issues.apache.org/jira/browse/SLING/fixforversion/12313975
>>
>> There are no outstanding known issues
>>
>> Staging repository:
>> https://repository.apache.org/content/repositories/sling-staging-001/
>>
>> You can use this UNIX script to download the release and verify the
>> signatures:
>> http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
>>
>> Usage:
>> sh check_staged_release.sh 001 /tmp/sling-staging
>
> I get some bad gpg checksums - am I the only one?
> Complete output:
>
> ################################################################################
>                       USING EXISTING STAGED REPOSITORY
> ################################################################################
> ./sling-staging/001
> ################################################################################
>                          CHECK SIGNATURES AND DIGESTS
> ################################################################################
> ./sling-staging/001/.index/nexus-maven-repository-index.gz
> gpg:  ----
> md5:  ----
> sha1: GOOD
> ./sling-staging/001/.index/nexus-maven-repository-index.properties
> gpg:  ----
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/.index/nexus-maven-repository-index.zip
> gpg:  ----
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/.meta/p2-metadata.properties
> gpg:  ----
> md5:  ----
> sha1: ----
> ./sling-staging/001/.meta/repository-metadata.xml
> gpg:  ----
> md5:  ----
> sha1: ----
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6-project.tar.bz2
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6-project.tar.gz
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6-project.zip
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6-sources.jar
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6.jar
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> 2.0.6/org.apache.sling.commons.log-2.0.6.pom
> gpg:  BAD!!!!!!!!
> md5:  GOOD
> sha1: GOOD
> ./sling-staging/001/org/apache/sling/org.apache.sling.commons.log/ 
> maven-metadata.xml
> gpg:  ----
> md5:  GOOD
> sha1: GOOD
> ################################################################################
>
> -- 
> Vidar S. Ramdal <vi...@idium.no> - http://www.idium.no
> Akersgata 16, N-0158 Oslo, Norway
> +47 21 531941, ext 2070