Thanks, it's working now. +1 from me for the release. Colm.
On Wed, Aug 12, 2020 at 3:16 PM Brian Demers <[email protected]> wrote: > I answered my own question: > https://people.apache.org/keys/group/shiro.asc > > (I still need to follow up on how frequently it's updated) > > On Wed, Aug 12, 2020 at 10:14 AM Brian Demers <[email protected]> > wrote: > > > Also, I'll check with Infra if there is a _better_ way to manage a team > > key file, something generated from id.apache.org > > > > On Wed, Aug 12, 2020 at 10:14 AM Brian Demers <[email protected]> > > wrote: > > > >> Sorry about that, I needed to create a new (stronger) key, and I > uploaded > >> to a couple of public key pools and id.apache.org, but I missed > >> https://downloads.apache.org/shiro/KEYS > >> It's fixed now. Though, I'm guessing > >> https://people.apache.org/keys/committer/bdemers is probably cached > >> every few days > >> > >> The Apache release process for repository.apache.org uses the following > >> two key servers: > >> - keyserver.ubuntu.com > >> - pool.sks-keyservers.net > >> > >> > >> > https://keyserver.ubuntu.com/pks/lookup?search=bdemers%40apache.org&fingerprint=on&op=index > >> > >> On Wed, Aug 12, 2020 at 8:06 AM Colm O hEigeartaigh < > [email protected]> > >> wrote: > >> > >>> Hi Brian, > >>> > >>> What gpg did you use to sign the artifacts? I've imported > >>> https://downloads.apache.org/shiro/KEYS but I get the following: > >>> > >>> gpg --verify shiro-root-1.6.0-source-release.zip.asc > >>> gpg: assuming signed data in 'shiro-root-1.6.0-source-release.zip' > >>> gpg: Signature made Tue 11 Aug 2020 21:02:34 IST > >>> gpg: using RSA key > >>> B26B2F5E93463E91E2F93D2478A3F0D70AE5308C > >>> gpg: Can't check signature: No public key > >>> > >>> Colm. > >>> > >>> On Wed, Aug 12, 2020 at 9:41 AM Tamás Cservenák <[email protected]> > >>> wrote: > >>> > >>> > +1 > >>> > > >>> > On Tue, Aug 11, 2020 at 11:47 PM Brian Demers <[email protected]> > >>> wrote: > >>> > > >>> > > This is a call to vote in favor of releasing Apache Shiro version > >>> 1.6.0. > >>> > > > >>> > > The 5 issues solved for 1.6.0: > >>> > > > >>> > > > >>> > > > >>> > > >>> > https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.6.0 > >>> > > > >>> > > The source to be voted upon: > >>> > > e2fcdf3753a9e1d37e8dbe89cd306d01f54fa712 - > >>> > > > https://github.com/apache/shiro/tree/shiro-root-1.6.0-release-vote1 > >>> > > > >>> > > Staging repo for binaries: > >>> > > > >>> https://repository.apache.org/content/repositories/orgapacheshiro-1030 > >>> > > > >>> > > Project website (just for informational purposes, not to be voted > >>> upon): > >>> > > http://shiro.apache.org/ > >>> > > > >>> > > Guide to testing staged releases: > >>> > > > >>> http://maven.apache.org/guides/development/guide-testing-releases.html > >>> > > > >>> > > Vote open for 72 hours. Please do examine the source and binaries > >>> before > >>> > > voting. > >>> > > > >>> > > [ ] +1 > >>> > > [ ] +0 > >>> > > [ ] -1 (please include reasoning) > >>> > > > >>> > > >>> > >> >
