Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

2024-02-13 Thread Jacques Le Roux

Hi,

And this is what get on Ubuntu 20.04, better for SHA512 (but not right it seems), weird for GPG. All that was working before, notably with last 
versions of apache-ofbiz-18.12.12.


jacques@jacques-VirtualBox:~/ofbiz-tools$ ./verify-ofbiz-release.sh -v 
apache-ofbiz-18.12.12  2>&1 | tee verify.log
Processing files for release: apache-ofbiz-18.12.12...
Verifying files...
sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA 
5F95A606 B1CC6C1A A8CBC42C
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA 
5F95A606 B1CC6C1A A8CBC42C

sha sums mismatch!

GPG verification output
gpg: Signature made jeu. 08 févr. 2024 11:03:49 CET
gpg:    using RSA key 3545C5E31CC2D029B2CCAD067A580908847AF9E0
gpg: Can't check signature: No public key

Done processing files for release apache-ofbiz-18.12.12

"sha sums mismatch!" sounds weird to me as the two lines compare

Also I don't understand what's going on with GPG since I have both KEYS and 
apache-ofbiz-18.12.12.zip.asc

Do I miss something?

Jacques


Le 13/02/2024 à 14:09, Jacques Le Roux a écrit :

Since I'm on win7 using PowerShell:

   PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
apache-ofbiz-18.12.12.zip -a SHA512
   Algorithm Hash Path
   -  
   SHA512 
D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... 
C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip

   PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
apache-ofbiz-18.12.12.zip.sha512 -a SHA512
   Algorithm Hash Path
   -  
   SHA512 EB5E9CEAF1250D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512

Not sure why it's different from verify-ofbiz-release.sh result :/

Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :

Hi Jacopo,

It seems there is at least a hash issue:

sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253 
88AB6487 DC5B71E7 5BA97A17
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA 
5F95A606 B1CC6C1A A8CBC42C

sha sums mismatch!

Thanks

Jacques

Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :

This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html


Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

2024-02-13 Thread Jacques Le Roux

Since I'm on win7 using PowerShell:

   PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
apache-ofbiz-18.12.12.zip -a SHA512
   Algorithm Hash Path
   -  
   SHA512 
D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... 
C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip

   PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
apache-ofbiz-18.12.12.zip.sha512 -a SHA512
   Algorithm Hash Path
   -  
   SHA512 EB5E9CEAF1250D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
   C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512

Not sure why it's different from verify-ofbiz-release.sh result :/

Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :

Hi Jacopo,

It seems there is at least a hash issue:

sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253 
88AB6487 DC5B71E7 5BA97A17
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA 
5F95A606 B1CC6C1A A8CBC42C

sha sums mismatch!

Thanks

Jacques

Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :

This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

2024-02-13 Thread Jacques Le Roux

Hi Jacopo,

It seems there is at least a hash issue:

sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253 
88AB6487 DC5B71E7 5BA97A17
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA 
5F95A606 B1CC6C1A A8CBC42C

sha sums mismatch!

Thanks

Jacques

Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :

This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html


Apache Project Website Checks

2024-02-13 Thread Jacques Le Roux

Hi,

Now that it's soon 3 years that we did not Tweet anything, I think we should 
follow this advice

https://whimsy.apache.org/site/project/ofbiz

Jacques



[VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

2024-02-13 Thread Jacopo Cappellato
This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html


Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - second attempt

2024-02-13 Thread Nicolas Malin

No problem Jacopo,

Thanks for your work and time both !

Nicolas

Le 13/02/2024 à 08:46, Jacopo Cappellato a écrit :

I'd like to cancel this vote in order to prepare a new tentative
release that includes the latest commits by Jacques.
Thank you all for your votes and I apologize for the inconvenience:
please stay tuned as the new vote will start soon!

Jacopo

On Thu, Feb 8, 2024 at 2:29 PM Jacopo Cappellato
  wrote:

This is the vote thread, second attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html