Hi Alex, I decided revoke my old key and created new one. I signed releases once, but now I cannot find myself with that. In the Apache resources there suggestion how to configure gpg in order to have SHA-512 [1]. I did it but I'm not sure if I do this archives will be signed appropriately.
gpg --armor --output myfile.zip.asc --detach-sig myfile.zip And later separately I should generate somehow SHA-512 hash ? [1] https://www.apache.org/dev/openpgp.html#sha-defaults Thanks, Piotr 2018-04-16 3:12 GMT+02:00 Alex Harui <aha...@adobe.com.invalid>: > Hi Piotr, > > I don't see any way to recover your passphrase. The advice I see is to > keep trying to remember what it was. > > Otherwise, the advice says to create a new key and revoke the old one. I > could sign this release, but you might as well take the time to either > remember the passphrase or create a new key. > > HTH, > -Alex > > On 4/15/18, 1:34 AM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com> wrote: > > >Unfortunately I did not remeber may passphrase for signing files. I have > >private key, revoking keys, but don't know how to actually use it to > >recover it. I did search some way, but cannot find straight instruction. > > > >Can someone sign for me that release or pass some help on that ? > > > >Thanks, > >Piotr > > > >2018-04-12 17:52 GMT+02:00 Piotr Zarzycki <piotrzarzyck...@gmail.com>: > > > >> Hi Alex, > >> > >> I think it is a good idea to have 3.3.1 instead 3.4. > >> > >> Thanks, > >> Piotr > >> > >> 2018-04-12 17:16 GMT+02:00 Alex Harui <aha...@adobe.com.invalid>: > >> > >>> Hi Piotr, > >>> > >>> I think I didn't use the right certificate for 3.2 so folks moving to > >>>3.3 > >>> had a problem. As long as you use the right certificates for 3.4 there > >>> shouldn't be a problem. > >>> > >>> It occurs to me that we might want to call this release 3.3.1 instead > >>>of > >>> 3.4 since it is a single bug fix release, but up to you. Is the only > >>> change the one fix you made? > >>> > >>> Thanks, > >>> -Alex > >>> > >>> On 4/12/18, 1:27 AM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com> > >>>wrote: > >>> > >>> >Hi Alex, > >>> > > >>> >IMO something rings into my head that we have had some problems with > >>>sign > >>> >certificates last time. Do you recall something ? > >>> > > >>> >Thanks, > >>> >Piotr > >>> > > >>> >2018-04-12 10:25 GMT+02:00 Alex Harui <aha...@adobe.com.invalid>: > >>> > > >>> >> I would skip last call and cut the RC. But yes, use SHA512 with a > >>> >>.sha512 > >>> >> suffix. > >>> >> > >>> >> My 2 cents, > >>> >> -Alex > >>> >> > >>> >> On 4/12/18, 12:48 AM, "Piotr Zarzycki" <piotrzarzyck...@gmail.com> > >>> >>wrote: > >>> >> > >>> >> >Hi Guys, > >>> >> > > >>> >> >Since I was able to fix issue with OSMF I would like to prepare > >>> release > >>> >> >candidate. Should I go through the LAST CALL ? Can I omit it and > >>>just > >>> >> >prepare RC1 ? > >>> >> > > >>> >> >I should also sign sources by SH1 yes ? > >>> >> > > >>> >> >Thanks, > >>> >> >-- > >>> >> > > >>> >> >Piotr Zarzycki > >>> >> > > >>> >> >Patreon: > >>> >> >*https://na01.safelinks.protection.outlook.com/?url= > >>> >> https%3A%2F%2Fwww.patr > >>> >> >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com% > >>> >> 7C9f32952e7b6d49 > >>> >> >3c7e1708d5a049d920%7Cfa7b1b5a7b34438794aed2c178de > >>> >> cee1%7C0%7C0%7C6365911614 > >>> >> >63234704&sdata=oyZAeVftnVBPZmKVyASyh4quCnDfOj > >>> >> c0%2FkX6RW2doJo%3D&reserved=0 > >>> >> ><https://na01.safelinks.protection.outlook.com/?url= > >>> >> https%3A%2F%2Fwww.patr > >>> >> >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com% > >>> >> 7C9f32952e7b6d49 > >>> >> >3c7e1708d5a049d920%7Cfa7b1b5a7b34438794aed2c178de > >>> >> cee1%7C0%7C0%7C6365911614 > >>> >> >63234704&sdata=oyZAeVftnVBPZmKVyASyh4quCnDfOj > >>> >> c0%2FkX6RW2doJo%3D&reserved=0 > >>> >> >>* > >>> >> > >>> >> > >>> > > >>> > > >>> >-- > >>> > > >>> >Piotr Zarzycki > >>> > > >>> >Patreon: > >>> >*https://na01.safelinks.protection.outlook.com/?url=https% > >>> 3A%2F%2Fwww.patr > >>> >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com%7 > >>> Cc66b636ca44d41 > >>> >a90d9608d5a04f4c24%7Cfa7b1b5a7b34438794aed2c178decee1%7C0% > >>> 7C0%7C6365911850 > >>> >76278362&sdata=ui83E66leJRPwW%2BWG6oseX3Y9EYL%2BNyQjwRFm6SQ > >>> OJA%3D&reserved > >>> >=0 > >>> ><https://na01.safelinks.protection.outlook.com/?url=https% > >>> 3A%2F%2Fwww.patr > >>> >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com%7 > >>> Cc66b636ca44d41 > >>> >a90d9608d5a04f4c24%7Cfa7b1b5a7b34438794aed2c178decee1%7C0% > >>> 7C0%7C6365911850 > >>> >76278362&sdata=ui83E66leJRPwW%2BWG6oseX3Y9EYL%2BNyQjwRFm6SQ > >>> OJA%3D&reserved > >>> >=0>* > >>> > >>> > >> > >> > >> -- > >> > >> Piotr Zarzycki > >> > >> Patreon: > >>*https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com > %7Cd7af70c9f1f1 > >>44ec8dce08d5a2abb667%7Cfa7b1b5a7b34438794aed2c178de > cee1%7C0%7C0%7C6365937 > >>80794811935&sdata=X7Koolzj3qpIJJi3OlMnM1FuuPOrBh > atrV%2B5o1zHTBw%3D&reserv > >>ed=0 > >> > >><https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.pat > >>reon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com > %7Cd7af70c9f1f1 > >>44ec8dce08d5a2abb667%7Cfa7b1b5a7b34438794aed2c178de > cee1%7C0%7C0%7C6365937 > >>80794811935&sdata=X7Koolzj3qpIJJi3OlMnM1FuuPOrBh > atrV%2B5o1zHTBw%3D&reserv > >>ed=0>* > >> > > > > > > > >-- > > > >Piotr Zarzycki > > > >Patreon: > >*https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.patr > >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com% > 7Cd7af70c9f1f144 > >ec8dce08d5a2abb667%7Cfa7b1b5a7b34438794aed2c178de > cee1%7C0%7C0%7C6365937807 > >94811935&sdata=X7Koolzj3qpIJJi3OlMnM1FuuPOrBh > atrV%2B5o1zHTBw%3D&reserved=0 > ><https://na01.safelinks.protection.outlook.com/?url= > https%3A%2F%2Fwww.patr > >eon.com%2Fpiotrzarzycki&data=02%7C01%7Caharui%40adobe.com% > 7Cd7af70c9f1f144 > >ec8dce08d5a2abb667%7Cfa7b1b5a7b34438794aed2c178de > cee1%7C0%7C0%7C6365937807 > >94811935&sdata=X7Koolzj3qpIJJi3OlMnM1FuuPOrBh > atrV%2B5o1zHTBw%3D&reserved=0 > >>* > > -- Piotr Zarzycki Patreon: *https://www.patreon.com/piotrzarzycki <https://www.patreon.com/piotrzarzycki>*
