You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by Justin Edelson <ju...@justinedelson.com> on 2014/11/24 23:36:36 UTC
[VOTE] Release Apache Sling Resource Merger version 1.2.0
Hi,
We solved 5 issues in this release:
https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-1153/
You can use this UNIX script to download the release and verify the signatures:
http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
Usage:
sh check_staged_release.sh 1153 /tmp/sling-staging
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This majority vote is open for at least 72 hours.
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Julian Sedding <js...@gmail.com>.
Signratures are good here as well after gpg --import KEYS.
+1 (non-binding)
Regards
Julian
On Tue, Nov 25, 2014 at 10:19 AM, Robert Munteanu <ro...@lmn.ro> wrote:
> On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso <as...@adobe.com> wrote:
>> hi justin,
>>
>> might be just me but
>>
>> /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
>> gpg: BAD!!!!!!!!
>> md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
>> sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
>>
>> it looks like there is some issue with the gpg … :S
>> It might be worth if other can also test…
>
> For me the GPG check passes.
>
> /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
> gpg: GOOD
> md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
> sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
>
> Can you check the result of running
>
> gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
>
> ?
>
> For me it's
>
> gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
> gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
> <ju...@apache.org>" [unknown]
> gpg: aka "Justin Edelson <ju...@helemus.com>" [unknown]
> gpg: aka "Justin Edelson <ju...@justinedelson.com>" [unknown]
> gpg: aka "Justin Edelson
> <ju...@mtvstaff.com>" [unknown]
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg: There is no indication that the signature belongs to the owner.
> Primary key fingerprint: A04B C4AD 3639 6AD5 A52C 8FE1 87DB F05A 134B 145C
>
> Robert
>
>
>>
>> regards
>>
>> antonio
>>
>>
>> On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
>>
>> Hi,
>>
>> We solved 5 issues in this release:
>> https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
>>
>> Staging repository:
>> https://repository.apache.org/content/repositories/orgapachesling-1153/
>>
>> You can use this UNIX script to download the release and verify the signatures:
>> http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
>>
>> Usage:
>> sh check_staged_release.sh 1153 /tmp/sling-staging
>>
>> Please vote to approve this release:
>>
>> [ ] +1 Approve the release
>> [ ] 0 Don't care
>> [ ] -1 Don't release, because ...
>>
>> This majority vote is open for at least 72 hours.
>>
>
>
>
> --
> Sent from my (old) computer
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Robert Munteanu <ro...@lmn.ro>.
Can you re-import the gpg keys and try again?
curl https://people.apache.org/keys/group/sling.asc | gpg --import -
Robert
On Tue, Nov 25, 2014 at 11:38 AM, Antonio Sanso <as...@adobe.com> wrote:
> thanks Robert,
> indeed I suspected was my own issue
>
> gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
> gpg: Signature made Mon Nov 24 23:19:19 2014 CET using DSA key ID 134B145C
> gpg: Can't check signature: public key not found
>
> On Nov 25, 2014, at 10:19 AM, Robert Munteanu <ro...@lmn.ro>> wrote:
>
> On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso <as...@adobe.com>> wrote:
> hi justin,
>
> might be just me but
>
> /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
> gpg: BAD!!!!!!!!
> md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
> sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
>
> it looks like there is some issue with the gpg … :S
> It might be worth if other can also test…
>
> For me the GPG check passes.
>
> /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
> gpg: GOOD
> md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
> sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
>
> Can you check the result of running
>
> gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
>
> ?
>
> For me it's
>
> gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
> gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
> <ju...@apache.org>>" [unknown]
> gpg: aka "Justin Edelson <ju...@helemus.com>>" [unknown]
> gpg: aka "Justin Edelson <ju...@justinedelson.com>>" [unknown]
> gpg: aka "Justin Edelson
> <ju...@mtvstaff.com>>" [unknown]
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg: There is no indication that the signature belongs to the owner.
> Primary key fingerprint: A04B C4AD 3639 6AD5 A52C 8FE1 87DB F05A 134B 145C
>
> Robert
>
>
>
> regards
>
> antonio
>
>
> On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
>
> Hi,
>
> We solved 5 issues in this release:
> https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachesling-1153/
>
> You can use this UNIX script to download the release and verify the signatures:
> http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
>
> Usage:
> sh check_staged_release.sh 1153 /tmp/sling-staging
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This majority vote is open for at least 72 hours.
>
>
>
>
> --
> Sent from my (old) computer
>
--
Sent from my (old) computer
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Antonio Sanso <as...@adobe.com>.
+1
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-source-release.zip
gpg: GOOD
md5 : GOOD (09d42740d2df286bec1b355ffb53f037)
sha1 : GOOD (29c42940afebb588520dcbe725caafc3210acdad)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-sources.jar
gpg: GOOD
md5 : GOOD (4b772ce5eb567cc0c0226785856ff679)
sha1 : GOOD (e9d306f41f500f2f630381a0710d235b7822c52b)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0.jar
gpg: GOOD
md5 : GOOD (e779f67ffc818e8c8f101563add5708f)
sha1 : GOOD (bdb7ded49e487fccecdf16dd62e334edd6c96fa3)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0.pom
gpg: GOOD
md5 : GOOD (fbbd9c458c89ed7b8938d7107293027b)
sha1 : GOOD (7b8b20308f34929cee200eee189a08fcf7520eb7)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/maven-metadata.xml
gpg: ----
md5 : GOOD (731cebc3aa99afa31271a91bcbe89f81)
sha1 : GOOD (b7b4ef2997ed576342b7ff6a2133a0e78631e87d)
################################################################################
and sorry for the noise
regards
antonio
On Nov 25, 2014, at 10:38 AM, Antonio Sanso <as...@adobe.com>> wrote:
thanks Robert,
indeed I suspected was my own issue
gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
gpg: Signature made Mon Nov 24 23:19:19 2014 CET using DSA key ID 134B145C
gpg: Can't check signature: public key not found
On Nov 25, 2014, at 10:19 AM, Robert Munteanu <ro...@lmn.ro>> wrote:
On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso <as...@adobe.com>> wrote:
hi justin,
might be just me but
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: BAD!!!!!!!!
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
it looks like there is some issue with the gpg … :S
It might be worth if other can also test…
For me the GPG check passes.
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
Can you check the result of running
gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
?
For me it's
gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
<ju...@apache.org>>" [unknown]
gpg: aka "Justin Edelson <ju...@helemus.com>>" [unknown]
gpg: aka "Justin Edelson <ju...@justinedelson.com>>" [unknown]
gpg: aka "Justin Edelson
<ju...@mtvstaff.com>>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: A04B C4AD 3639 6AD5 A52C 8FE1 87DB F05A 134B 145C
Robert
regards
antonio
On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
Hi,
We solved 5 issues in this release:
https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-1153/
You can use this UNIX script to download the release and verify the signatures:
http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
Usage:
sh check_staged_release.sh 1153 /tmp/sling-staging
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This majority vote is open for at least 72 hours.
--
Sent from my (old) computer
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Antonio Sanso <as...@adobe.com>.
thanks Robert,
indeed I suspected was my own issue
gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
gpg: Signature made Mon Nov 24 23:19:19 2014 CET using DSA key ID 134B145C
gpg: Can't check signature: public key not found
On Nov 25, 2014, at 10:19 AM, Robert Munteanu <ro...@lmn.ro>> wrote:
On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso <as...@adobe.com>> wrote:
hi justin,
might be just me but
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: BAD!!!!!!!!
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
it looks like there is some issue with the gpg … :S
It might be worth if other can also test…
For me the GPG check passes.
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
Can you check the result of running
gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
?
For me it's
gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
<ju...@apache.org>>" [unknown]
gpg: aka "Justin Edelson <ju...@helemus.com>>" [unknown]
gpg: aka "Justin Edelson <ju...@justinedelson.com>>" [unknown]
gpg: aka "Justin Edelson
<ju...@mtvstaff.com>>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: A04B C4AD 3639 6AD5 A52C 8FE1 87DB F05A 134B 145C
Robert
regards
antonio
On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
Hi,
We solved 5 issues in this release:
https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-1153/
You can use this UNIX script to download the release and verify the signatures:
http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
Usage:
sh check_staged_release.sh 1153 /tmp/sling-staging
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This majority vote is open for at least 72 hours.
--
Sent from my (old) computer
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Robert Munteanu <ro...@lmn.ro>.
On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso <as...@adobe.com> wrote:
> hi justin,
>
> might be just me but
>
> /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
> gpg: BAD!!!!!!!!
> md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
> sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
>
> it looks like there is some issue with the gpg … :S
> It might be worth if other can also test…
For me the GPG check passes.
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
Can you check the result of running
gpg --verify /tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
?
For me it's
gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
<ju...@apache.org>" [unknown]
gpg: aka "Justin Edelson <ju...@helemus.com>" [unknown]
gpg: aka "Justin Edelson <ju...@justinedelson.com>" [unknown]
gpg: aka "Justin Edelson
<ju...@mtvstaff.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: A04B C4AD 3639 6AD5 A52C 8FE1 87DB F05A 134B 145C
Robert
>
> regards
>
> antonio
>
>
> On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
>
> Hi,
>
> We solved 5 issues in this release:
> https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachesling-1153/
>
> You can use this UNIX script to download the release and verify the signatures:
> http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
>
> Usage:
> sh check_staged_release.sh 1153 /tmp/sling-staging
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This majority vote is open for at least 72 hours.
>
--
Sent from my (old) computer
Re: [VOTE] Release Apache Sling Resource Merger version 1.2.0
Posted by Antonio Sanso <as...@adobe.com>.
hi justin,
might be just me but
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg: BAD!!!!!!!!
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
it looks like there is some issue with the gpg … :S
It might be worth if other can also test…
regards
antonio
On Nov 24, 2014, at 11:36 PM, Justin Edelson <ju...@justinedelson.com>> wrote:
Hi,
We solved 5 issues in this release:
https://issues.apache.org/jira/browse/SLING/fixforversion/12326552
Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-1153/
You can use this UNIX script to download the release and verify the signatures:
http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
Usage:
sh check_staged_release.sh 1153 /tmp/sling-staging
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This majority vote is open for at least 72 hours.