+1 I updated my GPG keys as such:
wget https://people.apache.org/keys/group/sling.asc -q -O /tmp/sling.asc gpg --import /tmp/sling.asc &> /dev/null And the signatures look good. On Tue, Sep 27, 2016 at 5:13 PM, Robert Munteanu <romb...@apache.org> wrote: > On Tue, 2016-09-27 at 22:50 +0200, Karl Pauls wrote: > > I'm getting bad sigs. I think i don't see your key in > > https://people.apache.org/keys/group/sling.asc - is it possible that > > you > > didn't add your gpg key id to your id.apache.org account (or that it > > is not > > available via a public server)? > > Hm, that's weird. > > My public key is set as 4F63EC54 via id.apache.org . Also > > $ gpg --recv-keys 4F63EC54 > gpg: key 339508654F63EC54: "Robert Munteanu <romb...@apache.org>" not > changed > gpg: Total number processed: 1 > gpg: unchanged: 1 > > Robert > > > > > regards, > > > > Karl > > > > On Tue, Sep 27, 2016 at 10:32 PM, Robert Munteanu <romb...@apache.org > > > > > wrote: > > > > > Hi, > > > > > > We solved 4 issues in this release: > > > https://issues.apache.org/jira/browse/SLING/fixforversion/12337877 > > > > > > Staging repository: > > > https://repository.apache.org/content/repositories/orgapachesling-1 > > > 527 > > > > > > You can use this UNIX script to download the release and verify the > > > signatures: > > > http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh > > > > > > Usage: > > > sh check_staged_release.sh 1527 /tmp/sling-staging > > > > > > Please vote to approve this release: > > > > > > [ ] +1 Approve the release > > > [ ] 0 Don't care > > > [ ] -1 Don't release, because ... > > > > > > This majority vote is open for at least 72 hours. > > > > > > > > > > > > > > >