On Fri, 5 Jan 2018, Dan Kirkwood wrote:

Date: Fri, 5 Jan 2018 00:24:24 +0100
From: Dan Kirkwood <dang...@apache.org>
To: Henk P. Penning <penn...@uu.nl>, dev@trafficcontrol.incubator.apache.org
Subject: Re: [VOTE] Release Apache Traffic Control (incubating) 2.1.0-RC2

Hi Henk..    I think those issues should now be resolved:
- 1.8.x files removed from
https://dist.apache.org/repos/dist/dev/incubator/trafficcontrol
- links to checksum and .asc signature files no longer point to the mirror

thanks for pointing these out!

Hi Dan,

  regarding

    https://www.apache.org/dist/incubator/trafficcontrol/2.0.0-incubating/

  Please use extension .md5 instead of .md5sum ;
  this is required :

    http://www.apache.org/dev/release-distribution#sigs-and-sums

  Also, use extension .sha512 for a SHA-512 checksum file.

Dan Kirkwood

  Thank, regards,

  Henk Penning

On Thu, Dec 28, 2017 at 3:34 AM, Henk P. Penning <penn...@uu.nl> wrote:
On Thu, 7 Dec 2017, Hank Beatty wrote:

Date: Thu, 7 Dec 2017 17:17:59 +0100
From: Hank Beatty <hbea...@apache.org>
To: gene...@incubator.apache.org
Cc: dev@trafficcontrol.incubator.apache.org
Subject: Re: [VOTE] Release Apache Traffic Control (incubating) 2.1.0-RC2


On 12/06/2017 04:14 AM, Henk P. Penning wrote:



https://dist.apache.org/repos/dist/dev/incubator/trafficcontrol/2.1.0/RC2/


    Please rename
      apache-trafficcontrol-2.1.0-incubating.tar.gz.sha


I have renamed the file.


  Some more points ; in dist/incubator/trafficcontrol/

  PGP key c4b33c804587a8f0 [Dan Kirkwood <dang...@apache.org>] signed

    1.8.0-incubating/trafficcontrol-incubating-1.8.0.tar.gz.asc
    1.8.1-incubating/trafficcontrol-incubating-1.8.1.tar.gz.asc

  ... but this key expired on 2017-11-08.

  Please, either

    -- remove 1.8.0-incubating and 1.8.1-incubating
       from dist/incubator/trafficcontrol/
    -- fix (resign) key c4b33c804587a8f0 ;
    -- replace the .asc's

  See https://checker.apache.org/projs/incubator.html
  For help, see https://checker.apache.org/doc/README.html#prob-sigexp

  Note that 1.8.0-incubating and 1.8.1-incubating must be
  removed from dist/incubator/trafficcontrol/ when development
  on those branches has stopped (replaced by 2.x).
  [ http://www.apache.org/legal/release-policy.html#when-to-archive ]

  Regarding your website :

    https://trafficcontrol.incubator.apache.org/downloads/index.html

  Under "MD5 SHA512 PGP" you point to the mirrors, but sigs and
  checksums aren't on the mirrors ; please refer to [note the https]

    https://www.apache.org/dist/incubator/trafficcontrol/....

  Please note that all your stuff in automatically archived at

    https://archive.apache.org/dist/incubator/trafficcontrol/

  Thanks ; regard,

  Henk Penning -- apache.org infrastructure ; mirrors

------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl     \_/


------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl     \_/

Reply via email to