Also, I'll check with Infra if there is a _better_ way to manage a team key file, something generated from id.apache.org
On Wed, Aug 12, 2020 at 10:14 AM Brian Demers <[email protected]> wrote: > Sorry about that, I needed to create a new (stronger) key, and I uploaded > to a couple of public key pools and id.apache.org, but I missed > https://downloads.apache.org/shiro/KEYS > It's fixed now. Though, I'm guessing > https://people.apache.org/keys/committer/bdemers is probably cached every > few days > > The Apache release process for repository.apache.org uses the following > two key servers: > - keyserver.ubuntu.com > - pool.sks-keyservers.net > > > https://keyserver.ubuntu.com/pks/lookup?search=bdemers%40apache.org&fingerprint=on&op=index > > On Wed, Aug 12, 2020 at 8:06 AM Colm O hEigeartaigh <[email protected]> > wrote: > >> Hi Brian, >> >> What gpg did you use to sign the artifacts? I've imported >> https://downloads.apache.org/shiro/KEYS but I get the following: >> >> gpg --verify shiro-root-1.6.0-source-release.zip.asc >> gpg: assuming signed data in 'shiro-root-1.6.0-source-release.zip' >> gpg: Signature made Tue 11 Aug 2020 21:02:34 IST >> gpg: using RSA key B26B2F5E93463E91E2F93D2478A3F0D70AE5308C >> gpg: Can't check signature: No public key >> >> Colm. >> >> On Wed, Aug 12, 2020 at 9:41 AM Tamás Cservenák <[email protected]> >> wrote: >> >> > +1 >> > >> > On Tue, Aug 11, 2020 at 11:47 PM Brian Demers <[email protected]> >> wrote: >> > >> > > This is a call to vote in favor of releasing Apache Shiro version >> 1.6.0. >> > > >> > > The 5 issues solved for 1.6.0: >> > > >> > > >> > > >> > >> https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.6.0 >> > > >> > > The source to be voted upon: >> > > e2fcdf3753a9e1d37e8dbe89cd306d01f54fa712 - >> > > https://github.com/apache/shiro/tree/shiro-root-1.6.0-release-vote1 >> > > >> > > Staging repo for binaries: >> > > >> https://repository.apache.org/content/repositories/orgapacheshiro-1030 >> > > >> > > Project website (just for informational purposes, not to be voted >> upon): >> > > http://shiro.apache.org/ >> > > >> > > Guide to testing staged releases: >> > > >> http://maven.apache.org/guides/development/guide-testing-releases.html >> > > >> > > Vote open for 72 hours. Please do examine the source and binaries >> before >> > > voting. >> > > >> > > [ ] +1 >> > > [ ] +0 >> > > [ ] -1 (please include reasoning) >> > > >> > >> >
