My +1 - Tested the sources - Tested the dist packages - Checked the signatures (ftr, the fortress-realm-2.0.1-source-release.zip.asc file is missing) - Tested against ApacheDS - Checked the N&L files
Two last remarks: * Shawn, your GPG Key is not trusted. It would be useful to have it signed by trusted people. * It would be a good idea to generate SHA 256 and SHA 512 signatures and push them in dist. I have a script that does that if needed. Many thanks ! Le 15/07/2018 à 23:08, Shawn McKinney a écrit : > Hello, > > This is an announcement to vote for the next release of Apache Directory > Fortress. > > The version, 2.0.1, has a tag created for git: ‘2.0.1’. > > and the sources may be pulled using git commands: > git clone --branch 2.0.1 > https://git-wip-us.apache.org/repos/asf/directory-fortress-core.git > git clone --branch 2.0.1 > https://git-wip-us.apache.org/repos/asf/directory-fortress-realm.git > git clone --branch 2.0.1 > https://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse.git > git clone --branch 2.0.1 > https://git-wip-us.apache.org/repos/asf/directory-fortress-commander.git > > with their associated checksums: > - core: 073b97920a0f33db6053ad773d1ffcedf3f1bee2 > - realm: 8e9447739c97245cecccc9850066528c3e515c04 > - rest: c4b601163360d93b83837110f806d81da3da5bff > - web: 98976bd224a23a07415150787d9697cc73c6c1b7 > > Or, source distros may be downloaded from SVN: > - https://dist.apache.org/repos/dist/dev/directory/fortress/2.0.1/ > > Or, source distros may be downloaded from this location: > - http://home.apache.org/~smckinney/ > > The staging repo on Nexus: > - https://repository.apache.org/content/repositories/orgapachedirectory-1170 > > Test using one of these: > * > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-APACHEDS.md > * > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-APACHEDS.md > * > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-SLAPD.md > * > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-SLAPD.md > > - Choose one of the above. Complete (only) the sections leading up to and > including the SECTION entitled: 'Apache Fortress Core Integration Test’ > - Choose the docker quickstart & save time. Won't have to install an LDAP > server for the integration tests. > > 2.0.1 includes: > * Update to use Apache LDAP API v1.0.2 > * FC-235 Add support for runtime constraints to be placed on activated roles > * FC-102 [fortress-web] fix problems with group page > * FC-108 Add support for RFC2307 BIS > * FC-217 Option to disable role occupants > * FC-226 ehcache masking security exceptions > * FC-227 Exclude xml-apis from LDAP api > * FC-228 [fortress-rest] CVE-2017-12624: Apache CXF web services that process > attachments are vulnerable to Denial of Service (DoS) attacks > * FC-233 [FORTRESS-REST] Upgrade to Spring 5 and latest CXF > * FC-232 [fortress-web] to Spring 5 and Wicket 7.9 > > * The complete list from JIRA: > https://issues.apache.org/jira/browse/FC-232?jql=project%20%3D%2012315921%20AND%20fixVersion%20%3D%2012338782%20ORDER%20BY%20priority%20DESC%2C%20key%20ASC > > Please vote: > > [ ] +1 | Release Fortress core, realm, rest and web 2.0.1 > [ ] +/-0 | Abstain > [ ] -1 | Do *NOT* Release Fortress core, realm, rest and web 2.0.1 > > -- Emmanuel Lecharny Symas.com directory.apache.org
pEpkey.asc
Description: application/pgp-keys