The good thing is that the ASC files are in the proper format to verify with 'gpg --verify' :-) The bad thing is that 'shasum --check' does not understand our sha512 or sha256 files :-(
Gary On Tue, Dec 28, 2021 at 7:22 PM Gary Gregory <garydgreg...@gmail.com> wrote: > I think it is more interesting to download the dist archive instead of the > Maven repo because each PMC member is supposed to validate sigs, so: > > wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate > https://dist.apache.org/repos/dist/dev/logging/log4j/ > > ATM you get more than you need because old releases have not been removed. > > Gary > > On Tue, Dec 28, 2021 at 6:03 PM Ralph Goers <ralph.go...@dslextreme.com> > wrote: > >> This is a vote to release Log4j 2.12.4, a security release for Java 7 >> users. >> >> Please download, test, and cast your votes on the log4j developers list. >> [] +1, release the artifacts >> [] -1, don't release because… >> >> The vote will remain open for as short amount as time as required to vet >> the release. All votes are welcome and we encourage everyone to test the >> release, but only Logging PMC votes are “officially” counted. As always, at >> least 3 +1 votes and more positive than negative votes are required. >> >> Changes in this version include: >> >> Fixed Bugs >> >> • LOG4J2-3293: JdbcAppender now uses JndiManager to access JNDI >> resources. JNDI is only enabled when system property log4j2.enableJndiJdbc >> is set to true. >> >> Tag: >> a) for a new copy do "git clone >> https://github.com/apache/logging-log4j2.git"; and then "git checkout >> tags/log4j-2.12.4-rc1” or just "git clone -b log4j-2.12.4-rc1 >> https://github.com/apache/logging-log4j2.git"; >> b) for an existing working copy to “git pull” and then “git checkout >> tags/log4j-2.12.4-rc1” >> >> Web Site: >> https://logging.staged.apache.org/log4j/log4j-2.12.4/index.html >> >> Maven Artifacts: >> https://repository.apache.org/content/repositories/orgapachelogging-1080 >> >> Distribution archives: >> https://dist.apache.org/repos/dist/dev/logging/log4j/ >> >> You may download all the Maven artifacts by executing: >> wget -e robots=off --cut-dirs=7 -nH -r -p -np --no-check-certificate >> https://repository.apache.org/content/repositories/orgapachelogging-1080/org/apache/logging/log4j/ >> . >> >> Ralph > >
