You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openjpa.apache.org by Enrico Olivelli <eo...@gmail.com> on 2022/03/19 12:10:25 UTC

KEYS Was: [VOTE] Apache OpenJPA 3.2.2

Francesco,
Thanks for driving this release.
I am sorry I missed the thread and I dis not participate.
I have one question, see below


Il Mer 16 Mar 2022, 10:32 Francesco Chicchiriccò <il...@apache.org> ha
scritto:

> I've created a 3.2.2 release, with the following artifacts up for a vote:
>
> GIT source tag (e5933d6aeed8463b01d1a075d611e336aacddc72):
>
> https://gitbox.apache.org/repos/asf?p=openjpa.git;a=commit;h=e5933d6aeed8463b01d1a075d611e336aacddc72
>
> Staging artifacts:
> https://dist.apache.org/repos/dist/dev/openjpa/3.2.2
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapacheopenjpa-1011/
>
> PGP release keys (signed using ABCDEFG):
> https://downloads.apache.org/syncope/KEYS


This looks like to be hosted not in the OpenJPA space but in Syncope

Is this a problem?
How can OpenJPA users validate the artifacts?

Maybe your KEY is already in the OpenJPA KEYS file, but I just wanted to
clarify

Enrico



>
> Vote will be open for 72 hours.
>
> [ ] +1  approve
> [ ] +0  no opinion
> [ ] -1  disapprove (and reason why)
>
> Here's my +1
> Regards.
>
> --
> Francesco Chicchiriccò
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Member at The Apache Software Foundation
> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
> http://home.apache.org/~ilgrosso/
>
>

Re: KEYS Was: [VOTE] Apache OpenJPA 3.2.2

Posted by Francesco Chicchiriccò <il...@apache.org>.
On 19/03/22 13:10, Enrico Olivelli wrote:
> Francesco,
> Thanks for driving this release.
> I am sorry I missed the thread and I dis not participate.
> I have one question, see below
>
>
> Il Mer 16 Mar 2022, 10:32 Francesco Chicchiriccò <il...@apache.org> ha
> scritto:
>
>> I've created a 3.2.2 release, with the following artifacts up for a vote:
>>
>> GIT source tag (e5933d6aeed8463b01d1a075d611e336aacddc72):
>>
>> https://gitbox.apache.org/repos/asf?p=openjpa.git;a=commit;h=e5933d6aeed8463b01d1a075d611e336aacddc72
>>
>> Staging artifacts:
>> https://dist.apache.org/repos/dist/dev/openjpa/3.2.2
>>
>> Maven staging repo:
>> https://repository.apache.org/content/repositories/orgapacheopenjpa-1011/
>>
>> PGP release keys (signed using ABCDEFG):
>> https://downloads.apache.org/syncope/KEYS
>
> This looks like to be hosted not in the OpenJPA space but in Syncope
>
> Is this a problem?
> How can OpenJPA users validate the artifacts?
>
> Maybe your KEY is already in the OpenJPA KEYS file, but I just wanted to
> clarify

My bad, Enrico, just a dumb copy / paste error, thanks for reporting.

My own key 273DF287 was used to sign the release artifacts and is actually reported by

https://downloads.apache.org/openjpa/KEYS

as well.

Regards.

>> Vote will be open for 72 hours.
>>
>> [ ] +1  approve
>> [ ] +0  no opinion
>> [ ] -1  disapprove (and reason why)
>>
>> Here's my +1
>> Regards.

-- 
Francesco Chicchiriccò

Tirasa - Open Source Excellence
http://www.tirasa.net/

Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/