FWIW the signatures look good to me, running on Linux : [EMAIL PROTECTED]:~/Desktop$ gpg --verify apache-openjpa-1.0.2-source.zip.asc gpg: Signature made Tue 12 Feb 2008 07:43:14 PM CST using DSA key ID 513CA0DC gpg: Good signature from "Patrick Linskey (CODE SIGNING KEY) <[EMAIL PROTECTED] >" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 2611 868E F232 A24A 3B4B C0BC DCBA 5243 513C A0DC
[EMAIL PROTECTED]:~/Desktop$ gpg --verify apache-openjpa-1.0.2-binary.zip.asc gpg: Signature made Tue 12 Feb 2008 07:43:14 PM CST using DSA key ID 513CA0DC gpg: Good signature from "Patrick Linskey (CODE SIGNING KEY) <[EMAIL PROTECTED] >" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 2611 868E F232 A24A 3B4B C0BC DCBA 5243 513C A0DC I was also able to run the examples (also on Linux). The release looks good to me. +1 -Mike On Feb 15, 2008 9:28 PM, Albert Lee <[EMAIL PROTECTED]> wrote: > From the reference download site, downloaded all zip and asc files. I am > running Win/XP. > > Install the source zip, maven built successful. All tests run successful. > > Check all artifacts, looks good. > > Following the instructions from http://openjpa.apache.org/downloads.html, > downloaded the KEYS file and tried to verify the signatures. > > C:\temp>gpg --import KEYS > gpg: key 11A1AE9C: public key "Marc Prud'hommeaux (CODE SIGNING KEY) < > [EMAIL PROTECTED]>" imported > gpg: key 7E3BEB2D: public key "Michael Dick (code signing key) < > [EMAIL PROTECTED]>" imported > gpg: key 513CA0DC: public key "Patrick Linskey (CODE SIGNING KEY) < > [EMAIL PROTECTED]>" imported > gpg: key 8007117F: "Albert Lee (CODE SIGNING KEY) <[EMAIL PROTECTED]>" > not changed > gpg: Total number processed: 4 > gpg: imported: 3 > gpg: unchanged: 1 > > C:\temp\openjpa.102>dir > Volume in drive C has no label. > Volume Serial Number is 6806-ABBD > > Directory of C:\temp\openjpa.102 > > 02/15/2008 09:24 PM <DIR> . > 02/15/2008 09:24 PM <DIR> .. > 02/15/2008 09:02 PM 16,273,253 apache-openjpa-1.0.2-binary.zip > 02/15/2008 09:16 PM 189 apache-openjpa-1.0.2-binary.zip.asc > 02/15/2008 08:44 PM 5,057,185 apache-openjpa-1.0.2-source.zip > 02/15/2008 09:16 PM 189 apache-openjpa-1.0.2-source.zip.asc > 4 File(s) 21,330,816 bytes > 2 Dir(s) 6,154,297,344 bytes free > > C:\temp\openjpa.102>gpg --verify apache-openjpa-*.zip.asc > gpg: Signature made 02/12/08 19:43:14 using DSA key ID 513CA0DC > gpg: BAD signature from "Patrick Linskey (CODE SIGNING KEY) < > [EMAIL PROTECTED] > >" > > Looks like the signature does not match the KEYS. > > Albert Lee. > > > On Wed, Feb 13, 2008 at 11:11 AM, Patrick Linskey <[EMAIL PROTECTED]> > wrote: > > > OpenJPA Developers- > > > > A candidate build for OpenJPA 1.0.2 is available at: > > > > http://openjpa.apache.org/builds/1.0.2/downloads/ > > > > Please review these artifacts and signatures, and vote whether we > > should release them as Apache OpenJPA version 1.0.2. Release notes > > for this release are included in the artifact, or can be browsed at: > > > > > > > http://svn.apache.org/repos/asf/openjpa/branches/1.0.2/openjpa-project/RELEASE-NOTES.html > > > > The Apache Release Audit Tool has been run on the release, and no > > missing licenses were found with the exceptions listed in the > > exclusion section of the "rat-maven-plugin" configuration in http:// > > svn.apache.org/repos/asf/openjpa/branches/1.0.2/pom.xml . > > > > In accordance with http://www.apache.org/foundation/ > > voting.html#ReleaseVotes< > http://www.apache.org/foundation/voting.html#ReleaseVotes>, three +1 votes > will be sufficient to > > approve the release for publication. While it is not possible to veto > > a release, the vote will remain open for the standard 3 day period > > (ending at 9:00am Pacific on Monday 2/18) in order to allow people to > > thoroughly review the release and perform whatever additional testing > > they desire and raise any concerns or objections. > > > > A vote of "+1" means you approve of the release for publication, "-1" > > means you do not approve, and a "+0" or "-0" means you are neutral. > > > > Thanks in advance for your diligence in helping to ensure that the > > quality of the OpenJPA 1.0.2 release reflects the high quality of all > > of its contributors! > > > > -Patrick > > > > -- > > Patrick Linskey > > 202 669 5907 > > > > > > -- > Albert Lee. >
