Hmm, it appears that pgp.mit.edu doesn't show signatures. But this here does: Glenn: http://minsky.surfnet.nl:11371/pks/lookup?search=0x0ED3D317&op=vindex Jeremias: http://minsky.surfnet.nl:11371/pks/lookup?search=0x7C611584&op=vindex Vincent is even better connected: http://minsky.surfnet.nl:11371/pks/lookup?search=0x4358C584&op=vindex Compare the entries. There are no signatures asserting your identity, yet. It would be good if you managed to get hold of a few Apache committers for a little key signing party at some point.
Here's some more info about the WoT: http://www.apache.org/dev/release-signing.html#web-of-trust Jeremias Maerki On 14.10.2012 15:52:11 Glenn Adams wrote: > I see you've fixed the lib/build problem. I'll create and upload new images > shortly. > > As for my key, pgp.mit.edu reports my key at: > > http://pgp.mit.edu:11371/pks/lookup?search=gadams%40apache.org&op=index > > So I'm not sure what you mean by having no signature there. > > On Sun, Oct 14, 2012 at 5:24 PM, Jeremias Maerki > <[email protected]>wrote: > > > Hi Glenn, > > > > I'm sorry for the bad news again but the source ZIP doesn't compile > > since it's missing lib/build. Since the source distribution is the main > > release (the binary is always just a convenience for the users), I still > > can't give a +1 here. Due to the other issues I haven't even bothered to > > check the previous ZIP so I didn't catch that earlier. I'm sorry. > > > > Web of Trust: one little snag we should probably address is that Glenn's > > key currently has no signatures on pgp.mit.edu. But that is easily fixed > > by adding another signature from a committer with a sufficient number of > > signatures until Glenn can attend an ApacheCon or meet some Apache > > committers at another opportunity. > > > > > > Jeremias Maerki > > > > > > On 14.10.2012 11:06:00 Glenn Adams wrote: > > > Now that Jeremias has integrated two important fixes at [1][2], and > > having > > > updated [3][4] the release date to 18OCT12 and fixed the minor > > > documentation issues noted by Vincent at [5], I have tagged [6][7], > > built, > > > and uploaded the respective release artifacts at [8][9]. > > > > > > Accordingly, I would like to commence a vote on releasing these > > artifacts * > > > [8][9]*, ending at 0800Z 18OCT, after which time, if there are no > > negative > > > votes and no unresolved comments, I will deploy to the appropriate > > > locations and send out respective release announcements. > > > > > > Regards, > > > Glenn > > > > > > [1] http://svn.apache.org/viewvc?view=revision&revision=1395896 > > > [2] http://svn.apache.org/viewvc?view=revision&revision=1395925 > > > [3] http://svn.apache.org/viewvc?view=revision&revision=1397983 > > > [4] http://svn.apache.org/viewvc?view=revision&revision=1397989 > > > [5] > > > > > http://mail-archives.apache.org/mod_mbox/xmlgraphics-general/201210.mbox/%3cCACQ=j+f1fo078dff7fjdprnj0qcvg0rodxute1upw6vscp+...@mail.gmail.com%3e > > > [6] http://svn.apache.org/viewvc?view=revision&revision=1397986 > > > [7] http://svn.apache.org/viewvc?view=revision&revision=1397992 > > > [8] http://people.apache.org/~gadams/candidates/xmlgraphics-commons-1_5/ > > > [9] http://people.apache.org/~gadams/candidates/fop-1_1/ > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
