- signatures and checksums match - source builds - apache rat passes +1
Below are the linux commands I used to verify the release of the tobago-2.0.9 files: ============================================= wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago/2.0.9/tobago-2.0.9-source-release.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago/2.0.9/tobago-2.0.9-source-release.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago/2.0.9/tobago-2.0.9-source-release.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago/2.0.9/tobago-2.0.9-source-release.zip.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.tar.gz wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.tar.gz.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.tar.gz.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.tar.gz.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-assembly/2.0.9/tobago-assembly-2.0.9-dist.zip.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.tar.gz wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.tar.gz.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.tar.gz.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.tar.gz.sha1 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.zip wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.zip.asc wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.zip.md5 wget https://repository.apache.org/content/repositories/orgapachemyfaces-1061/org/apache/myfaces/tobago/tobago-example-assembly/2.0.9/tobago-example-assembly-2.0.9-example.zip.sha1 # check checksums find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed 's|\.md5$||' | md5sum -c find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed 's|\.sha1$||' | sha1sum -c # check signatures wget http://www.apache.org/dist/myfaces/KEYS gpg --import KEYS find . -name '*.asc' -exec gpg --verify {} \; # build source mkdir src cd src unzip ../tobago-2.0.9-source-release.zip cd tobago-2.0.9 mvn install -Pall-modules mvn apache-rat:check -Pall-modules ## Note: DEPENDENCIES needs to be ignored ## https://issues.apache.org/jira/browse/TOBAGO-1450 #### # To check for all errors, if more than one project is affected # mvn apache-rat:check -Drat.numUnapprovedLicenses=9999 # To see details of rat failure, including location of rat report # mvn -e -X apache-rat:check # verify tobago-assembly-*-dist.tar.gz and tobago-assembly-*-dist.zip binaries are identical # verify tobago-example-assembly-*-example.tar.gz and tobago-example-assembly-*-example.zip binaries are identical cd .. tar xvf ../tobago-assembly-2.0.9-dist.tar.gz mv myfaces-tobago-2.0.9/ myfaces-tobago-2.0.9.tar.gz.unpacked unzip ../tobago-assembly-2.0.9-dist.zip mv myfaces-tobago-2.0.9/ myfaces-tobago-2.0.9.zip.unpacked tar xvf ../tobago-example-assembly-2.0.9-example.tar.gz mv myfaces-tobago-2.0.9/ myfaces-tobago-example-2.0.9.tar.gz.unpacked unzip ../tobago-example-assembly-2.0.9-example.zip mv myfaces-tobago-2.0.9/ myfaces-tobago-example-2.0.9.zip.unpacked # should be no output diff -rq myfaces-tobago-2.0.9.*.unpacked # should only be "are identical" output diff -srq myfaces-tobago-2.0.9.*.unpacked | grep -v "are identical" # should be no output diff -rq myfaces-tobago-example-2.0.9.*.unpacked # should only be "are identical" output diff -srq myfaces-tobago-example-2.0.9.*.unpacked | grep -v "are identical" On Wed, Jan 27, 2016 at 4:50 PM, Udo Schnurpfeil <u...@schnurpfeil.de> wrote: > Hello, > > I would like to release Tobago 2.0.9. > > For a detail list of changes please consult the release notes: > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310273&version=12332146 > The version is available at the staging repository (Nexus). > > Staging repository: > > https://repository.apache.org/content/repositories/orgapachemyfaces-1061/ > > A demo is available here: > > http://irian.biz/tobago-example-demo-2.0.x/ > > The vote is open for 72h. > > [ ] +1 > [ ] +0 > [ ] -1 > > Regards, > > Udo > >
