My +1

- Tested the sources
- Tested the dist packages
- Checked the signatures (ftr, the
fortress-realm-2.0.1-source-release.zip.asc file is missing)
- Tested against ApacheDS
- Checked the N&L files

Two last remarks:
* Shawn, your GPG Key is not trusted. It would be useful to have it
signed by trusted people.
* It would be a good idea to generate SHA 256 and SHA 512 signatures and
push them in dist. I have a script that does that if needed.

Many thanks !


Le 15/07/2018 à 23:08, Shawn McKinney a écrit :
> Hello,
> 
> This is an announcement to vote for the next release of Apache Directory 
> Fortress. 
> 
> The version, 2.0.1, has a tag created for git: ‘2.0.1’.
> 
> and the sources may be pulled using git commands:
> git clone --branch 2.0.1 
> https://git-wip-us.apache.org/repos/asf/directory-fortress-core.git
> git clone --branch 2.0.1 
> https://git-wip-us.apache.org/repos/asf/directory-fortress-realm.git
> git clone --branch 2.0.1 
> https://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse.git
> git clone --branch 2.0.1 
> https://git-wip-us.apache.org/repos/asf/directory-fortress-commander.git
>       
> with their associated checksums:
> - core:  073b97920a0f33db6053ad773d1ffcedf3f1bee2
> - realm: 8e9447739c97245cecccc9850066528c3e515c04
> - rest:  c4b601163360d93b83837110f806d81da3da5bff
> - web:   98976bd224a23a07415150787d9697cc73c6c1b7
> 
> Or, source distros may be downloaded from SVN:
> - https://dist.apache.org/repos/dist/dev/directory/fortress/2.0.1/
> 
> Or, source distros may be downloaded from this location:
> - http://home.apache.org/~smckinney/
> 
> The staging repo on Nexus:
> - https://repository.apache.org/content/repositories/orgapachedirectory-1170
> 
> Test using one of these:
>  * 
> https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-APACHEDS.md
>  * 
> https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-APACHEDS.md
>  * 
> https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-SLAPD.md
>  * 
> https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-SLAPD.md
> 
> - Choose one of the above.  Complete (only) the sections leading up to and 
> including the SECTION entitled: 'Apache Fortress Core Integration Test’
> - Choose the docker quickstart & save time.  Won't have to install an LDAP 
> server for the integration tests.
> 
> 2.0.1 includes:
> * Update to use Apache LDAP API v1.0.2
> * FC-235 Add support for runtime constraints to be placed on activated roles
> * FC-102 [fortress-web] fix problems with group page
> * FC-108 Add support for RFC2307 BIS
> * FC-217 Option to disable role occupants
> * FC-226 ehcache masking security exceptions
> * FC-227 Exclude xml-apis from LDAP api
> * FC-228 [fortress-rest] CVE-2017-12624: Apache CXF web services that process 
> attachments are vulnerable to Denial of Service (DoS) attacks
> * FC-233 [FORTRESS-REST] Upgrade to Spring 5 and latest CXF
> * FC-232 [fortress-web] to Spring 5 and Wicket 7.9
> 
> * The complete list from JIRA: 
> https://issues.apache.org/jira/browse/FC-232?jql=project%20%3D%2012315921%20AND%20fixVersion%20%3D%2012338782%20ORDER%20BY%20priority%20DESC%2C%20key%20ASC
> 
> Please vote:
> 
> [ ] +1 | Release Fortress core, realm, rest and web 2.0.1
> [ ] +/-0 | Abstain
> [ ] -1 | Do *NOT* Release Fortress core, realm, rest and web 2.0.1
> 
> 

-- 
Emmanuel Lecharny

Symas.com
directory.apache.org

Attachment: pEpkey.asc
Description: application/pgp-keys

Reply via email to