Marton, Thanks for checking. I agree that the difference seems not a problem since the fingerprints are the same.
Tsz-Wo On Tue, May 8, 2018 at 1:21 PM, Elek, Marton <[email protected]> wrote: > I am not a gpg expert but downloaded both of them and checked with 'gpg > --list-packages filename'. > > The only difference is that the KEYS version has an additional signature > from Owen: > > :signature packet: algo 1, keyid 78434EF460D6914B > version 4, created 1462223114, md5len 0, sigclass 0x13 > digest algo 10, begin of digest e8 2d > hashed subpkt 2 len 4 (sig created 2016-05-02) > hashed subpkt 27 len 1 (key flags: 03) > hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 3) > hashed subpkt 21 len 4 (pref-hash-algos: 10 9 8 11) > hashed subpkt 22 len 4 (pref-zip-algos: 2 3 1 0) > hashed subpkt 30 len 1 (features: 01) > hashed subpkt 23 len 1 (keyserver preferences: 80) > subpkt 16 len 8 (issuer key ID 78434EF460D6914B) > data: [4095 bits] > > A more simple signature (by Owen) is contained by both: > > # off=2203 ctb=89 tag=2 hlen=3 plen=543 > :signature packet: algo 1, keyid 78434EF460D6914B > version 4, created 1462223114, md5len 0, sigclass 0x18 > digest algo 10, begin of digest 30 e2 > hashed subpkt 2 len 4 (sig created 2016-05-02) > hashed subpkt 27 len 1 (key flags: 0C) > subpkt 16 len 8 (issuer key ID 78434EF460D6914B) > data: [4092 bits] > > > IMHO it's not a problem just a redundant signature data. (or not redundat as > he key flags are different). > > Marton > > > > > On 05/08/2018 12:59 AM, Tsz Wo Sze wrote: >> >> Marton, >> >> I compared you keys in two locations below >> - https://dist.apache.org/repos/dist/dev/incubator/ratis/KEYS >> - >> http://pgp.mit.edu/pks/lookup?op=get&fingerprint=on&search=0x78434EF460D6914B >> >> They somehow look different. They match until "Zz6JA". Do you know why? >> >> Tsz-Wo >> >> On Sun, May 6, 2018 at 3:57 AM, Elek, Marton <[email protected]> wrote: >>> >>> >>> Hi all, >>> >>> I'd like to call a vote to release Apache Ratis (incubating) 0.2.0. >>> >>> This is the second incubator release and it includes more than 120 >>> improvements and fixes since the previous 0.1.0-alpha release. This is >>> the >>> first release >>> which includes a binary package with ready to use example project. >>> >>> All distribution packages, including signatures, digests, etc. can be >>> found at: >>> >>> https://dist.apache.org/repos/dist/dev/incubator/ratis/0.2.0/rc0/ >>> >>> Staged artifacts can be found at: >>> >>> https://repository.apache.org/content/repositories/orgapacheratis-1003/ >>> >>> >>> This release has been signed with PGP key 0EE79B28, corresponding to >>> [email protected], which is included in the repository's KEYS file >>> (https://dist.apache.org/repos/dist/dev/incubator/ratis/KEYS). >>> >>> This key can be found on keyservers, such as: >>> >>> http://pgp.mit.edu/pks/lookup?op=get&search=0x0EE79B28 >>> >>> Or in the apache phonebook: >>> >>> https://people.apache.org/keys/committer/elek.asc >>> >>> >>> The release candidate has been tagged in git with ratis-0.2.0-rc0 >>> (ee4936d) >>> >>> https://github.com/apache/incubator-ratis/releases/tag/ratis-0.2.0-rc0 >>> >>> >>> >>> Please review and vote. The vote will be open for at least 72 hours. >>> >>> If the vote passed, the second stage vote will be called on the Apache >>> incubator mailing list to get approval from the Incubator PMC. >>> >>> >>> >>> # Review/testing >>> >>> You can check the usual requirements of an apache release: >>> >>> • Signatures >>> • Checksums >>> • License and notice files >>> • Disclaimer file (incubator!) >>> • Build the project from the source code package (mvn clean install >>> assembly:single -DskipTests=true ) >>> • Licence headers >>> >>> The binary papckage can be smoketested with: >>> >>> ./examples/bin/start-all.sh >>> ./examples/bin/client.sh assign --name a --value 2 >>> ./examples/bin/client.sh get --name a >>> >>> >>> >>> Starting with my vote: +1 >>> >>> Thanks, >>> Marton
