Consistency of location of signing KEYS

[Simon Laws <si...@googlemail.com>]

I notice that the KEYS file we advertise on the 1.x and 2.x downloads
pages [1] does not match the KEYS file we have in svn [2]


[1] http://www.apache.org/dist/tuscany/KEYS

Jeremy Boynes
Kelvin Goodson
Andrew Borley
Raymond Feng
Ant Elder
S Venkatakrishnan
Luciano Resende
Simon Laws
Ramkumar Ramalingam

[2] http://svn.apache.org/repos/asf/tuscany/KEYS

Jeremy Boynes
Kelvin Goodson
Andrew Borley
Raymond Feng
Ant Elder
S Venkatakrishnan
Luciano Resende
Simon Laws
*Amita Vadhavkar
Ramkumar Ramalingam
*Simon Christopher Nash


There are two extra entries in [2] (marked *) when compared to [1].
The easy answer is to copy [2] to [1]. However if this is going to be
a problem in the future do we really need to maintain [1]?

Simon

-- 
Apache Tuscany committer: tuscany.apache.org
Co-author of a book about Tuscany and SCA: tuscanyinaction.com

Re: Consistency of location of signing KEYS

[Simon Laws <si...@googlemail.com>]

On Thu, Jun 3, 2010 at 11:15 AM, Simon Nash <na...@apache.org> wrote:
> Simon Nash wrote:
>>
>> Simon Nash wrote:
>>>
>>> Simon Laws wrote:
>>>>
>>>> On Tue, Jun 1, 2010 at 5:54 PM, Luciano Resende <lu...@gmail.com>
>>>> wrote:
>>>>>
>>>>> On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws <si...@googlemail.com>
>>>>> wrote:
>>>>>>
>>>>>> yep, I was looking at
>>>>>> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
>>>>>> that's the kind of thing that seems to do. Still needs to be run
>>>>>> regularly.
>>>>>>
>>>>>> Simon
>>>>>
>>>>> Ok, that sync is scheduled in my p.a.o account, so let me know if you
>>>>> make updates so I can do a svn up to it.
>>>>>
>>>>>
>>>>> --
>>>>> Luciano Resende
>>>>> http://people.apache.org/~lresende
>>>>> http://twitter.com/lresende1975
>>>>> http://lresende.blogspot.com/
>>>>>
>>>> Ah, ok, excellent
>>>>
>>>> Simon
>>>>
>>>>
>>> My key (actually keys) are in [2] but not in [1].  Do I need to do
>>> something to get them added to [1]?  If so, what is that something?
>>>
>>> I'm sorry if the answer to the above question should be obvious, but I
>>> haven't understood in which direction the "sync" will operate and when
>>> it will happen,  It doesn't seem to have happened yet as the files at
>>> [1] and [2] are still different at the present time.
>>>
>>> Also, I put my keys in [2] as a result of following the instructions
>>> at [3].  If [2] isn't the correct place, the instructions at [3] need
>>> to be updated.
>>>
>>>  Simon
>>>
>>> [1] http://www.apache.org/dist/tuscany/KEYS
>>> [2] http://svn.apache.org/repos/asf/tuscany/KEYS
>>> [3] http://tuscany.apache.org/create-signing-key.html
>>>
>>>
>>>
>> I have updated the file at [1] from the version at [2].
>>
>>  Simon
>>
>>
> For some reason I'm not seeing the updated copy when I browse to the
> URL in [1], even though the file on people.apache.org is correct.
> Is there some further step needed to get www.apache.org to refresh?
>
>  Simon
>
>

It's there now.  Some sync process going on behind the scenes.

Simon

-- 
Apache Tuscany committer: tuscany.apache.org
Co-author of a book about Tuscany and SCA: tuscanyinaction.com

Re: Consistency of location of signing KEYS

[Simon Nash <na...@apache.org>]

Simon Nash wrote:
> Simon Nash wrote:
>> Simon Laws wrote:
>>> On Tue, Jun 1, 2010 at 5:54 PM, Luciano Resende 
>>> <lu...@gmail.com> wrote:
>>>> On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws 
>>>> <si...@googlemail.com> wrote:
>>>>> yep, I was looking at
>>>>> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
>>>>> that's the kind of thing that seems to do. Still needs to be run
>>>>> regularly.
>>>>>
>>>>> Simon
>>>> Ok, that sync is scheduled in my p.a.o account, so let me know if you
>>>> make updates so I can do a svn up to it.
>>>>
>>>>
>>>> -- 
>>>> Luciano Resende
>>>> http://people.apache.org/~lresende
>>>> http://twitter.com/lresende1975
>>>> http://lresende.blogspot.com/
>>>>
>>> Ah, ok, excellent
>>>
>>> Simon
>>>
>>>
>> My key (actually keys) are in [2] but not in [1].  Do I need to do
>> something to get them added to [1]?  If so, what is that something?
>>
>> I'm sorry if the answer to the above question should be obvious, but I
>> haven't understood in which direction the "sync" will operate and when
>> it will happen,  It doesn't seem to have happened yet as the files at
>> [1] and [2] are still different at the present time.
>>
>> Also, I put my keys in [2] as a result of following the instructions
>> at [3].  If [2] isn't the correct place, the instructions at [3] need
>> to be updated.
>>
>>   Simon
>>
>> [1] http://www.apache.org/dist/tuscany/KEYS
>> [2] http://svn.apache.org/repos/asf/tuscany/KEYS
>> [3] http://tuscany.apache.org/create-signing-key.html
>>
>>
>>
> I have updated the file at [1] from the version at [2].
> 
>   Simon
> 
> 
For some reason I'm not seeing the updated copy when I browse to the
URL in [1], even though the file on people.apache.org is correct.
Is there some further step needed to get www.apache.org to refresh?

   Simon

Re: Consistency of location of signing KEYS

[Simon Nash <na...@apache.org>]

Simon Nash wrote:
> Simon Laws wrote:
>> On Tue, Jun 1, 2010 at 5:54 PM, Luciano Resende <lu...@gmail.com> 
>> wrote:
>>> On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws 
>>> <si...@googlemail.com> wrote:
>>>> yep, I was looking at
>>>> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
>>>> that's the kind of thing that seems to do. Still needs to be run
>>>> regularly.
>>>>
>>>> Simon
>>> Ok, that sync is scheduled in my p.a.o account, so let me know if you
>>> make updates so I can do a svn up to it.
>>>
>>>
>>> -- 
>>> Luciano Resende
>>> http://people.apache.org/~lresende
>>> http://twitter.com/lresende1975
>>> http://lresende.blogspot.com/
>>>
>> Ah, ok, excellent
>>
>> Simon
>>
>>
> My key (actually keys) are in [2] but not in [1].  Do I need to do
> something to get them added to [1]?  If so, what is that something?
> 
> I'm sorry if the answer to the above question should be obvious, but I
> haven't understood in which direction the "sync" will operate and when
> it will happen,  It doesn't seem to have happened yet as the files at
> [1] and [2] are still different at the present time.
> 
> Also, I put my keys in [2] as a result of following the instructions
> at [3].  If [2] isn't the correct place, the instructions at [3] need
> to be updated.
> 
>   Simon
> 
> [1] http://www.apache.org/dist/tuscany/KEYS
> [2] http://svn.apache.org/repos/asf/tuscany/KEYS
> [3] http://tuscany.apache.org/create-signing-key.html
> 
> 
> 
I have updated the file at [1] from the version at [2].

   Simon

Re: Consistency of location of signing KEYS

[Simon Nash <na...@apache.org>]

Simon Laws wrote:
> On Tue, Jun 1, 2010 at 5:54 PM, Luciano Resende <lu...@gmail.com> wrote:
>> On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws <si...@googlemail.com> wrote:
>>> yep, I was looking at
>>> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
>>> that's the kind of thing that seems to do. Still needs to be run
>>> regularly.
>>>
>>> Simon
>> Ok, that sync is scheduled in my p.a.o account, so let me know if you
>> make updates so I can do a svn up to it.
>>
>>
>> --
>> Luciano Resende
>> http://people.apache.org/~lresende
>> http://twitter.com/lresende1975
>> http://lresende.blogspot.com/
>>
> Ah, ok, excellent
> 
> Simon
> 
> 
My key (actually keys) are in [2] but not in [1].  Do I need to do
something to get them added to [1]?  If so, what is that something?

I'm sorry if the answer to the above question should be obvious, but I
haven't understood in which direction the "sync" will operate and when
it will happen,  It doesn't seem to have happened yet as the files at
[1] and [2] are still different at the present time.

Also, I put my keys in [2] as a result of following the instructions
at [3].  If [2] isn't the correct place, the instructions at [3] need
to be updated.

   Simon

[1] http://www.apache.org/dist/tuscany/KEYS
[2] http://svn.apache.org/repos/asf/tuscany/KEYS
[3] http://tuscany.apache.org/create-signing-key.html

Re: Consistency of location of signing KEYS

[Simon Laws <si...@googlemail.com>]

On Tue, Jun 1, 2010 at 5:54 PM, Luciano Resende <lu...@gmail.com> wrote:
> On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws <si...@googlemail.com> wrote:
>>
>> yep, I was looking at
>> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
>> that's the kind of thing that seems to do. Still needs to be run
>> regularly.
>>
>> Simon
>
> Ok, that sync is scheduled in my p.a.o account, so let me know if you
> make updates so I can do a svn up to it.
>
>
> --
> Luciano Resende
> http://people.apache.org/~lresende
> http://twitter.com/lresende1975
> http://lresende.blogspot.com/
>
Ah, ok, excellent

Simon


-- 
Apache Tuscany committer: tuscany.apache.org
Co-author of a book about Tuscany and SCA: tuscanyinaction.com

Re: Consistency of location of signing KEYS

[Luciano Resende <lu...@gmail.com>]

On Tue, Jun 1, 2010 at 9:50 AM, Simon Laws <si...@googlemail.com> wrote:
>
> yep, I was looking at
> (http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
> that's the kind of thing that seems to do. Still needs to be run
> regularly.
>
> Simon

Ok, that sync is scheduled in my p.a.o account, so let me know if you
make updates so I can do a svn up to it.


-- 
Luciano Resende
http://people.apache.org/~lresende
http://twitter.com/lresende1975
http://lresende.blogspot.com/

Re: Consistency of location of signing KEYS

[Simon Laws <si...@googlemail.com>]

On Tue, Jun 1, 2010 at 5:43 PM, Luciano Resende <lu...@gmail.com> wrote:
> On Tue, Jun 1, 2010 at 5:04 AM, Simon Laws <si...@googlemail.com> wrote:
>>>
>>> The file at [1] is required as there are automated scripts that
>>> regularly scan the distribution area to verify that all the
>>> distributed files are correctly signed.
>>
>> hmmm ok,
>>
>>> The copy at [2] could probably
>>> go, Amita never did end up doing a release so her key isn't really
>>> needed.
>>
>> I don't have a problem with leaving Amita's key there it just feels
>> awkward having the file in two places. Having said getting rid of the
>> change tracked version also doesn't seem ideal. Maybe I could create a
>> little synch script that runs now and again to keep the two in step
>> like we do with the web site Anyone think that sounds problematic?
>>
>
> Can't we have a checkout of KEYS file from SVN to dist ? Or a checkout
> somewhere, and make a link (ln -s) ?
>
>
> --
> Luciano Resende
> http://people.apache.org/~lresende
> http://twitter.com/lresende1975
> http://lresende.blogspot.com/
>

yep, I was looking at
(http://svn.apache.org/repos/asf/tuscany/site/trunk/bin/sync) and
that's the kind of thing that seems to do. Still needs to be run
regularly.

Simon


-- 
Apache Tuscany committer: tuscany.apache.org
Co-author of a book about Tuscany and SCA: tuscanyinaction.com

Re: Consistency of location of signing KEYS

[Luciano Resende <lu...@gmail.com>]

On Tue, Jun 1, 2010 at 5:04 AM, Simon Laws <si...@googlemail.com> wrote:
>>
>> The file at [1] is required as there are automated scripts that
>> regularly scan the distribution area to verify that all the
>> distributed files are correctly signed.
>
> hmmm ok,
>
>> The copy at [2] could probably
>> go, Amita never did end up doing a release so her key isn't really
>> needed.
>
> I don't have a problem with leaving Amita's key there it just feels
> awkward having the file in two places. Having said getting rid of the
> change tracked version also doesn't seem ideal. Maybe I could create a
> little synch script that runs now and again to keep the two in step
> like we do with the web site Anyone think that sounds problematic?
>

Can't we have a checkout of KEYS file from SVN to dist ? Or a checkout
somewhere, and make a link (ln -s) ?


-- 
Luciano Resende
http://people.apache.org/~lresende
http://twitter.com/lresende1975
http://lresende.blogspot.com/

Re: Consistency of location of signing KEYS

[Simon Laws <si...@googlemail.com>]

>
> The file at [1] is required as there are automated scripts that
> regularly scan the distribution area to verify that all the
> distributed files are correctly signed.

hmmm ok,

> The copy at [2] could probably
> go, Amita never did end up doing a release so her key isn't really
> needed.

I don't have a problem with leaving Amita's key there it just feels
awkward having the file in two places. Having said getting rid of the
change tracked version also doesn't seem ideal. Maybe I could create a
little synch script that runs now and again to keep the two in step
like we do with the web site Anyone think that sounds problematic?

>
>   ...ant
>

Simon

-- 
Apache Tuscany committer: tuscany.apache.org
Co-author of a book about Tuscany and SCA: tuscanyinaction.com

Re: Consistency of location of signing KEYS

[ant elder <an...@gmail.com>]

On Tue, Jun 1, 2010 at 10:56 AM, Simon Laws <si...@googlemail.com> wrote:
> I notice that the KEYS file we advertise on the 1.x and 2.x downloads
> pages [1] does not match the KEYS file we have in svn [2]
>
>
> [1] http://www.apache.org/dist/tuscany/KEYS
>
> Jeremy Boynes
> Kelvin Goodson
> Andrew Borley
> Raymond Feng
> Ant Elder
> S Venkatakrishnan
> Luciano Resende
> Simon Laws
> Ramkumar Ramalingam
>
> [2] http://svn.apache.org/repos/asf/tuscany/KEYS
>
> Jeremy Boynes
> Kelvin Goodson
> Andrew Borley
> Raymond Feng
> Ant Elder
> S Venkatakrishnan
> Luciano Resende
> Simon Laws
> *Amita Vadhavkar
> Ramkumar Ramalingam
> *Simon Christopher Nash
>
>
> There are two extra entries in [2] (marked *) when compared to [1].
> The easy answer is to copy [2] to [1]. However if this is going to be
> a problem in the future do we really need to maintain [1]?
>

The file at [1] is required as there are automated scripts that
regularly scan the distribution area to verify that all the
distributed files are correctly signed. The copy at [2] could probably
go, Amita never did end up doing a release so her key isn't really
needed.

   ...ant