Hi,

* checked that the code from the repo builds
* checked that the code from the distribution buildds

I havve a slight remark: the packages have been signed with a pgp key which is not preesent on apache servers:

gpg --verify apache-sshd-2.7.0-src.tar.gz.asc apache-sshd-2.7.0-src.tar.gz
gpg: Signature made Tue May 11 15:54:33 2021 CEST
gpg:                using RSA key DC98224C6421A7A5BB87F346ED2378CD09A08CDE
gpg: Good signature from "Guillaume Nodet (CODE SIGNING KEY) <gno...@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.

Guillaume's key on Apache LDAP server and on MINA KEYS file is:

https://people.apache.org/keys/committer/gnodet.asc :

ASF ID: gnodet
LDAP PGP key: EA23 DB13 60D9 0294 81E7 F2EF ECDF EA3C B449 3B94


https://people.apache.org/keys/group/mina.asc :

ASF ID: gnodet
LDAP PGP key: EA23 DB13 60D9 0294 81E7 F2EF ECDF EA3C B449 3B94


I strongly suggest to update the KEYS file at least.


On 11/05/2021 16:21, Guillaume Nodet wrote:
I've staged another release candidate built on JDK 1.8:
   * maven repo:
https://repository.apache.org/content/repositories/orgapachemina-1057
   * Distributions: https://dist.apache.org/repos/dist/dev/mina/sshd/2.7.0/
   * Git tag: https://github.com/apache/mina-sshd/releases/tag/sshd-2.7.0

This release contains a number of changes:
   https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md

Please review and vote !


--
*Emmanuel Lécharny - CTO* 205 Promenade des Anglais – 06200 NICE
T. +33 (0)4 89 97 36 50
P. +33 (0)6 08 33 32 61
emmanuel.lecha...@busit.com https://www.busit.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to