Hey Yan, Were you able to validate the source tarball? I ran:
$ gpg --keyserver pgpkeys.mit.edu --recv-key CAC06239EA00BA80 gpg: requesting key EA00BA80 from hkp server pgpkeys.mit.edu gpg: key EA00BA80: public key "Yan Fang (CODE SIGNING KEY) < yanf...@apache.org>" imported gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1) $ gpg --fingerprint CAC06239EA00BA80 pub 4096R/EA00BA80 2015-03-24 [expires: 2020-03-22] Key fingerprint = 7091 46DA 2CF3 EACF 476E B077 CAC0 6239 EA00 BA80 uid Yan Fang (CODE SIGNING KEY) <yanf...@apache.org> sub 4096R/E3F3DAD3 2015-03-24 [expires: 2020-03-22] $ gpg apache-samza-0.9.0-src.tgz.asc gpg: Signature made Tue Mar 24 11:51:58 2015 PDT using RSA key ID 0CAE52EA gpg: Can't check signature: public key not found Cheers, Chris On Tue, Mar 24, 2015 at 3:18 PM, Yan Fang <yanfang...@gmail.com> wrote: > Hey all, > > This is a call for a vote on a release of Apache Samza 0.9.0. This is our > first release as the Apache top-level project. Thanks to everyone who has > contributed to this release. We are very glad to see some new contributors > in this release. > > The release candidate can be downloaded from here: > > http://people.apache.org/~yanfang/samza-0.9.0-rc0/ > > The release candidate is signed with pgp key CAC06239EA00BA80, which is > included in the repository's KEYS file: > > > https://git-wip-us.apache.org/repos/asf?p=samza.git;a=blob_plain;f=KEYS;hb=6f5bafb6cd93934781161eb6b1868d11ea347c95 > > and can also be found on keyservers: > > http://pgp.mit.edu/pks/lookup?op=get&search=0xCAC06239EA00BA80 > > The git tag is release-0.9.0-rc0 and signed with the same pgp key: > > > https://git-wip-us.apache.org/repos/asf?p=samza.git;a=tag;h=1039f7ede6490f9420dcecd6adc7677b97e78bcf > > Test binaries have been published to Maven's staging repository, and are > available here: > > https://repository.apache.org/content/repositories/orgapachesamza-1005/ > > Note that the binaries were built with JDK6 without incident. > > 95 issues were resolved for this release: > > > https://issues.apache.org/jira/issues/?jql=project%20%3D%20SAMZA%20AND%20fixVersion%20%3D%200.9.0%20AND%20status%20in%20(Resolved%2C%20Closed) > > The vote will be open for 72 hours ( end in 4:00pm Friday, 03/27/2015 ). > Please download the release candidate, check the hashes/signature, build it > and test it, and then please vote: > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove (and reason why) > > +1 from my side for the release. > > Fang, Yan > yanfang...@gmail.com > +1 (206) 849-4108 >