>
> at least links to the keys used to sign releases on the
> download page


+1 for that.

On Mon, Jul 11, 2016 at 3:35 AM, Phil Steitz <phil.ste...@gmail.com> wrote:

> On 7/10/16 10:57 AM, Shuai Lin wrote:
> > Not sure where you see " 0x7C6C105FFC8ED089". I
>
> That's the key ID for the key below.
> > think the release is signed with the
> > key https://people.apache.org/keys/committer/pwendell.asc .
>
> Thanks!  That key matches.  The project should publish a KEYS file
> [1] or at least links to the keys used to sign releases on the
> download page.  Could be there is one somewhere and I just can't
> find it.
>
> Phil
>
> [1] http://www.apache.org/dev/release-signing.html#keys-policy
> >
> > I think this tutorial can be
> > helpful: http://www.apache.org/info/verification.html
> >
> > On Mon, Jul 11, 2016 at 12:57 AM, Phil Steitz
> > <phil.ste...@gmail.com <mailto:phil.ste...@gmail.com>> wrote:
> >
> >     I can't seem to find a link the the Spark KEYS file.  I am
> >     trying to
> >     validate the sigs on the 1.6.2 release artifacts and I need to
> >     import 0x7C6C105FFC8ED089.  Is there a KEYS file available for
> >     download somewhere?  Apologies if I am just missing an obvious
> >     link.
> >
> >     Phil
> >
> >
> >     ---------------------------------------------------------------------
> >     To unsubscribe e-mail: user-unsubscr...@spark.apache.org
> >     <mailto:user-unsubscr...@spark.apache.org>
> >
> >
>
>
>

Reply via email to