Re: 1.8.18 release available for testing/signing
On 7/6/2017 08:04, Stefan wrote:
> On 7/6/2017 04:13, Daniel Shahaf wrote:
>> Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
>>> Summary
>>> ---
>>> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
>>> corrected - see below)
>>>
>>> Verified
>>>
>>> subversion-1.8.18.tar.gz:
>>> Signature verified.
>>> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
>>> SHA-1-checksum)
>>> SHA-512:
>>> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
>>> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
>>> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
>>> checksum matching the value above
>> The .gz.sha512 file is not compressed in the repository:
>>
>> [[[
>> % () { for 1; wget -qO- $1 | file - }
>> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
>>
>> /dev/stdin: ASCII text
>> /dev/stdin: ASCII text
>> /dev/stdin: ASCII text
>> ]]]
> That's interesting... Just confirmed that indeed in the c/o of
> https://dist.apache.org/repos/dist/dev/subversion the file is not
> compressed and looks fine here too.
>> How are you downloading it?
> Downloaded from: https://dist.apache.org/repos/dist/dev/subversion/
> using FF 54.0.1 (64-bit) on Windows 10. (direct link:
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha512
> ).
>> Might your user agent be applying
>> Content-Transfer-Encoding that the server doesn't specify? Do you see the
>> same
>> problem with the 1.8.18 .gz.sha1 file?
> Unlikely it's on my client side, I'd say.
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha1
> looks fine (not compressed).
>> Do you see the same problem with
>> ?
> Nope, that file is uncompressed when I download it via FF.
>
>> (I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
>>
>> Our main concern here should be to ensure that the sha512 link on the
>> download page will be usable by end users.
> +1
>> Cheers,
>>
>> Daniel
>>
>> P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
>> ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
>>
As per Daniel's suggestion on IRC tried:
https://dist.apache.org/repos/dist/release/ant/binaries/apache-ant-1.10.1-bin.tar.gz.sha512
- that one looks good here. Hence I agree with his conclusion that it's
some dist.a.o artifact which won't effect the sha512-files for the release.
+1 for release from me then.
Regards,
Stefan
smime.p7s
Description: S/MIME Cryptographic Signature
Re: 1.8.18 release available for testing/signing
On 7/6/2017 04:13, Daniel Shahaf wrote:
> Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
>> Summary
>> ---
>> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
>> corrected - see below)
>>
>> Verified
>>
>> subversion-1.8.18.tar.gz:
>> Signature verified.
>> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
>> SHA-1-checksum)
>> SHA-512:
>> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
>> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
>> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
>> checksum matching the value above
> The .gz.sha512 file is not compressed in the repository:
>
> [[[
> % () { for 1; wget -qO- $1 | file - }
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
>
> /dev/stdin: ASCII text
> /dev/stdin: ASCII text
> /dev/stdin: ASCII text
> ]]]
That's interesting... Just confirmed that indeed in the c/o of
https://dist.apache.org/repos/dist/dev/subversion the file is not
compressed and looks fine here too.
> How are you downloading it?
Downloaded from: https://dist.apache.org/repos/dist/dev/subversion/
using FF 54.0.1 (64-bit) on Windows 10. (direct link:
https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha512
).
> Might your user agent be applying
> Content-Transfer-Encoding that the server doesn't specify? Do you see the
> same
> problem with the 1.8.18 .gz.sha1 file?
Unlikely it's on my client side, I'd say.
https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha1
looks fine (not compressed).
> Do you see the same problem with
> ?
Nope, that file is uncompressed when I download it via FF.
> (I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
>
> Our main concern here should be to ensure that the sha512 link on the
> download page will be usable by end users.
+1
>
> Cheers,
>
> Daniel
>
> P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
> ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
Regards,
Stefan
smime.p7s
Description: S/MIME Cryptographic Signature
Re: 1.8.18 release available for testing/signing
Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
> Summary
> ---
> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
> corrected - see below)
>
> Verified
>
> subversion-1.8.18.tar.gz:
> Signature verified.
> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
> SHA-1-checksum)
> SHA-512:
> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
> checksum matching the value above
The .gz.sha512 file is not compressed in the repository:
[[[
% () { for 1; wget -qO- $1 | file - }
https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
/dev/stdin: ASCII text
/dev/stdin: ASCII text
/dev/stdin: ASCII text
]]]
How are you downloading it? Might your user agent be applying
Content-Transfer-Encoding that the server doesn't specify? Do you see the same
problem with the 1.8.18 .gz.sha1 file? Do you see the same problem with
?
(I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
Our main concern here should be to ensure that the sha512 link on the
download page will be usable by end users.
Cheers,
Daniel
P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
Re: 1.8.18 release available for testing/signing
On 7/3/2017 12:55, Stefan Sperling wrote: > The 1.8.18 release can now be tested and signed. > Get it from https://dist.apache.org/repos/dist/dev/subversion > as usual, and add your signatures there. Thanks! Summary --- +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been corrected - see below) Platform - Windows 10 (build 1607) 64-bit - Visual Studio 2015 Update 3 - ActivePerl: 5.24.0.2400 (for OpenSSL) - AWK: 20070501 - CMake 3.7.0 (for OpenSSL) - NASM 2.12.02 (for OpenSSL) - Python 2.7.12 - SCons 2.5.1 (for Apache Serf) Verified subversion-1.8.18.tar.bz2: Signature verified. SHA-1: 026f42b53b8595b9b87c4d24441f7a121c27554c (matches provided SHA-1-checksum) SHA-512: 48d596c442da34fa3eb4f0f8b10cc3d5d27841b2fc4e7a493cac8e6f4c722f63fcd67fe99dfac5bbe31ac405055072a304d9a6771974c9990927cb21c5eb31d0 (matches provided SHA-512-checksum) subversion-1.8.18.tar.gz: Signature verified. SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided SHA-1-checksum) SHA-512: 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245 *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512 checksum matching the value above subversion-1.8.18.zip: Signature verified. SHA-1: 9a3745245c2eb9fefaca50a5788604cfae89a636 (matches provided SHA-1-checksum) SHA-512: 17815e6a22c281ceff179916ff8ee2414db063c2254e2b17378ea0dcd343f4441fc6a4d57d58d89e4ec86ffb288eea150693904954b2b96559000ebf7612 (matches provided SHA-512-checksum) Contents of subversion-1.8.18.tar.bz2 equals contents of subversion-1.8.18.tar.gz. Contents of subversion-1.8.18.zip equals contents of subversion-1.8.18.tar.bz2 with the expected differences: - Windows vs. Linux line ending changes - non-Windows-specific generated files missing in zip archive - different time stamp in subversion\po\subversion.pot Contents of subversion-1.8.18.zip equals contents of tags/1.8.18 with the expected differences: - differences related to svn-keywords in files (URL, timestamps) - differences related to symlinks in svnpubsub, svnwcsub - generated header files and subversion.pot file only present in zip archive - excluded folders from zip archive: contrib, notes - excluded files from zip archive: STATUS Dependencies - APR: 1.5.2 (patched with MAXSVN-42, MAXSVN-43, MAXSVN-94) - APRICONV: 1.2.1 (patched with MAXSVN-45, MAXSVN-46) - APRUTIL: 1.5.4 with Expat 2.2.0 (patched with MAXSVN-44, MAXSVN-46, MAXSVN-47, MAXSVN-76, MAXSVN-94) - Apache httpd: 2.4.23 (patched with MAXSVN-48, MAXSVN-91) - Apache Serf: 1.3.9 (patched with MAXSVN-51, MAXSVN-84) - OpenSSL: 1.0.2j - PCRE: 8.39 - SQLite: 3.15.1 (amalgamation) - ZLib: 1.2.8 Patches applied to SVN -- - MAXSVN-58 (build fix for SQLite >= 3.12.0 with VS >= 2005) - MAXSVN-65 (test fixes due to drive-letter issue) - MAXSVN-66 (fix for debug popup in move test #8) - MAXSVN-92 (named-atomic test failure fix) Patches mentioned above can be downloaded here: http://www.luke1410.de:8090/browse/MAXSVN-94?jql=project%20%3D%20MAXSVN%20AND%20%22Patch%20Version%2Fs%22%20%3D%201.8.18-1 Tested -- - [fsfs] x [ra_local | ra_svn | ra_serf (http)] x [64-bit] x [release] Results --- General issues (i.e. issues not specific to my test/build environment): - Build error when compiling with SQLite >= 3.12.0 (circumventing by applying the patch for MAXSVN-58) - see http://mail-archives.apache.org/mod_mbox/subversion-dev/201607.mbox/%3C656be423-0911-da1a-dfc3-6050d4dba1ee%40posteo.de%3E - Debug popup upon running move-test #8 (circumventing by applying patch for MAXSVN-66) - see http://mail-archives.apache.org/mod_mbox/subversion-dev/201608.mbox/%3C885361ff-0e43-6bd2-0d4f-3d846e72aabc%40gmx.de%3E - named_atomic-test.exe test failures (circumventing by applying patch for MAXSVN-92) - see https://svn.haxx.se/dev/archive-2014-09/0048.shtml Issues specific to my test/build environment: - checkout-test #14 and update-test #31 failure due to drive letter issue (circumventing by applying the patch for MAXSVN-65) - see http://mail-archives.apache.org/mod_mbox/subversion-dev/201607.mbox/%3Cf6f6e917-0b31-e87c-22e7-68cce2b601e9%40posteo.de%3E Signatures -- subversion-1.8.18.tar.bz2: -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAABCgAGBQJZXV0GAAoJEDdqPP0RCxyV3L4QAIDIMh2hywi7qD12g1KKPQFc DyxgTJZJi8SEqsKC6i96/hS8BKPG4VCqcQS5lXcCfACsEcSoKEzwJb93uTBaDvoK BxQ9QBSIHfSXkdKrAGPAuLn/8+i7usRDkwsoqDH+74z5DLZ5EgmGn+leinJz+rPN 9ODZJRLe5ei+RRyCWv4eqvUlAx9EE69i9tDxfFTiuwthL6fWi0bZ1R3flNacdVe0 shEMrh20Zhfy0joQKLnV5XPd9RidvxOtai2JqZfcP85x3Qi3PMI/VBHPPezUVlSd JHS7VyoeKdH01cf9WrbGlz0kZ5C4BkE41fTDz/D2Za6xpyuEWaXjS1yxVNqGn63r qeN0rQEc4dCIJlk5Pc6NUIUZoYaXp6Ezy
RE: 1.8.18 release available for testing/signing
> -Original Message- > From: Stefan Sperling [mailto:s...@apache.org] > Sent: maandag 3 juli 2017 12:56 > To: dev@subversion.apache.org > Subject: 1.8.18 release available for testing/signing > > The 1.8.18 release can now be tested and signed. > Get it from https://dist.apache.org/repos/dist/dev/subversion > as usual, and add your signatures there. Thanks! +1 for release Visual Studio 2015 on Windows 8.1 VM (x86 build on x64 system) apr 1.6.2 apr-util 1.6.0 apr_memcache 1.6.0 bdb 4.4.20 expat 2.2.0 httpd 2.4.25 mod_dav 2.4.25 openssl 1.0.2l sasl 2.1.26 serf 1.3.9 sqlite 3.19.3 zlib 1.2.11 Ran the [fsfs] x [local | svn | serf] tests + [bdb] x [local] + JavaHL, verified files with tag, etc. Bert
Re: 1.8.18 release available for testing/signing
Summary: +1 to release Platform: Debian/stable (jessie 64-bit) Tested: (local, svn, svn/sasl, serf, serf/v1) x (fsfs, fsfs/pack/shard, bdb) swig-pl, swig-py, swig-rb javahl x (fsfs, bdb) Results: All tests successful apart from known failures for log_tests.py 37 and svnadmin_tests.py 14 and 28 with packing enabled, and SWIG ruby test_load due to "nil is frozen". Local dependencies: apache2-dev : 2.4.25-3+deb9u1 libapr1-dev : 1.5.2-5 libaprutil1-dev : 1.5.4-3 libdb5.3-dev : 5.3.28-12+b1 libsasl2-dev : 2.1.27~101-g0780600+dfsg-3 libserf-dev : 1.3.9-3 libsqlite3-dev : 3.16.2-5 perl : 5.24.1-3 python2.7-dev : 2.7.13-2 ruby-dev : 1:2.3.3 openjdk-8-jdk : 8u131-b11-2 subversion-1.8.18.tar.bz2 -BEGIN PGP SIGNATURE- iQEzBAABCAAdFiEEqER5D7V0NgbulZIHdteI4e0aWZwFAllcNUIACgkQdteI4e0a WZwxSwf/eO5InaOmalSmocNS7nBKvueBcAAlhKKL6L/lLMmjr+6gMpML8Y12zJGX KH5cuSycZ0hJiPJtXIWsIEeJkV7x8qQoeB2AZsMbLc6C8sG/YGmG1YfKrEAJKnJy G312P/H8Gvf3zoV0ytu7yUwlwMwuQiDCQZ/p/vP7WTYxTIEFtZ4INiQoiRJleH4O gINx4pKtobrphbdlsxTh47uuULR6RlpxkFN6zWj1sfiq/mTHegzbZniUKJFv/Nkd X3djSw952Q020GfAOoS4t5a+qxurh6CQBoaucTBkxZyqonC45xz3i/o8dP+5Pb0Q wFPAG31DEE3fGIjurczMHhRujS63+A== =rbi0 -END PGP SIGNATURE- subversion-1.8.18.tar.gz -BEGIN PGP SIGNATURE- iQEzBAABCAAdFiEEqER5D7V0NgbulZIHdteI4e0aWZwFAllcNUIACgkQdteI4e0a WZyY7wf+NzDrOxsqInasJRBWS+pT36MEJM4ebYSHobTuK6oxEoXQSRQ81R8CHwmr u8j81wXbzVZGB0Av+pyYfbI6xbjNyYy5QwbD9gUwyzHHR8adzKx9DacT9BBi51ec NR1ADnqe5+1fM6BjZpymNJq52mEnv/R5LE/f41+W718B/zlDL39gI4Uuf0NOI2WQ 0FV212mj7cVkP8aqkNElFoeFtFBNf5vCBKPXSgwkvfAWhdEcLVcJoz8C4pybMolK pMdea0SzNHjnBb8CPLXijKwnf7zfroNNP0dOd51BsEm+Yg6ahF7nOv0dtmGINHFl pKEUqNPBnJbiciuSXlR32Z4fQ4n8SA== =BBAt -END PGP SIGNATURE- -- Philip
Re: 1.8.18 release available for testing/signing
On 03.07.2017 12:55, Stefan Sperling wrote: The 1.8.18 release can now be tested and signed. Get it from https://dist.apache.org/repos/dist/dev/subversion as usual, and add your signatures there. Thanks! Summary: +1 to release (despite binding issues similar to 1.9.6 - see below) Platform Ubuntu 16.04.2 x64, Linux 4.4.0-81-generic SMP Standard dependencies: Apache 2.4.18, worker MPM APR 1.5.2 APR-Util 1.5.4 BDB 5.3.28 GCC 5.4.0 JUnit 4.12 libmagic 5.25 libtool, libtool-bin 2.4.6 OpenJDK-8 8u77 OpenSSL 1.0.2g Perl 5.22.1 Python 2.7.11 Ruby 2.3.0 Serf 1.3.8 SQLite 3.11.0 Swig 2.0.12 zlib 1.2.8 Manually installed and in-tree dependencies: ctypesgen svn-r151 Verified: Tarball contents and signatures (fsfs, bdb) x (local, svnserve, serf) check-swig-py check-swig-pl check-swig-rb check-javahl check-ctypes-python ./get-deps.sh Results: (Ruby tests) Various test failures. Mostly related to sqlite in WC: "Svn::Error::SqliteBusy: sqlite[S5]: database is locked" when accecssing Svn::Wc::AdmAccess methods. (Perl tests): Several warnings issued (all tests still reported as passsed): Warning: unable to close filehandle $out_fh properly: Bad file descriptor at /dev/shm/dist/subversion-1.8.18/subversion/bindings/swig/perl/native/blib/lib/SVN/Core.pm line 58 (Ubuntu issue) ./configure needed global variables set to make LTO work: AR="gcc-ar" NM="gcc-nm" RANLIB=gcc-ranlib All tests passed. GPG Signatures committed to the dist/dev/subversion repository.
Re: 1.8.18 release available for testing/signing
The 1.8.18 release can now be tested and signed. SUMMARY: +1 to release (Unix) VERIFIED: - SHA1 sums: 026f42b53b8595b9b87c4d24441f7a121c27554c subversion-1.8.18.tar.bz2 22ab7f366fb1d373247c56696b2b754c5fd06368 subversion-1.8.18.tar.gz Comparing the two compressions of each tar package: Files subversion-1.8.18.tar(bz2) and subversion-1.8.18.tar(gz) are identical TESTED: --- [ fsfs | bdb ] x [ file | svn | http (serf; MPM=worker) ] swig-rb swig-py swig-pl javahl cytpes-python RESULTS: All tests passed. PLATFORM: - Ubuntu 16.04 (Linux kernel: 4.4.0-79-generic x86_64) DEPENDENCIES: - APR: 1.5.2 APR-UTIL: 1.5.4 zlib: 1.2.8 OpenSSL: 1.0.2 Apache: 2.4.18 BDB: 5.3.21 sqlite: 3.7.13 Python: 2.7.12 (Ubuntu package: python 2.7.11-1) Perl: 5.22.1 Ruby: 2.3.1 (Ubuntu package: ruby 1:2.3.0+1) java: 1.8.0 junit: 4.12 swig: 3.0.8 serf: 1.3.8 - Julian
Re: 1.8.18 release available for testing/signing
On Mon, Jul 3, 2017 at 12:55 PM, Stefan Sperling wrote: > The 1.8.18 release can now be tested and signed. > Get it from https://dist.apache.org/repos/dist/dev/subversion > as usual, and add your signatures there. Thanks! Summary --- +1 to release Platform Windows 7 SP1 (x64) Microsoft Visual Studio 2013 Verified Signature, sha1 and sha512 for subversion-1.8.18.zip. Contents of subversion-1.8.18.zip are identical to tags/1.8.18, and to branches/1.8.x@1800620 (except for expected differences in svn_version.h and svnpubsub and svnwcsub (symlinks vs. file contents), and generated files). Tested -- [ Release build ] x [ fsfs ] x [ file | svn | http ] Results --- All tests pass. I had to apply a patch locally to build with newest sqlite. See https://svn.haxx.se/dev/archive-2016-07/0016.shtml. The patch reorders the includes in tests/libsvn_wc/wc-queries-test.c. Dependencies Httpd 2.4.16 Apr 1.5.2 Apr-Util 1.5.4 OpenSSL 1.0.2k Serf 1.3.9 SQLite 3.19.3.0 ZLib 1.2.11 Signature - subversion-1.8.18.zip: -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAABCgAGBQJZWqwQAAoJELWc5tYBDIqtSyYQALpJMOOfP1zmlW14m2cehUQQ VLSCi2XLrBfK+QqDOBbEDyKNnmoDCtQPz2PpC6CtTDV946TN6m8DDV9BFc8tJZ4t K92GK9SmRlwQLpLKL3wM8XxSIya3ZOFQQ56pL36H9Ct4bYSX3VTDQtdAhl1gEbcF Rkj8THnBX79Kr84mlUuG71GbRdMtFzHPwa7Kvcl/1C1DjCoKebAzmQsRCZM1A3+b NmzUlhBeC1iTgOFlFuLDs8qMu278u8vk9f32ymCmYqsGYEq6YLMjaea5Bx21EkRq yrpc8qqjM+vBWQsSV5HtuWAGnBl5m5H410iPtmmPe4cZlcLja0mQ3vRUj3cOUm2e Nu0QpHQAxNSzOuGRoN68yOXsSFCe6Ne34ZWzM8EdGBwu2c+trljzE6Z2Os9ry+q4 XvVKqkfhMk6EE10aC116j/bF0gtOsAPYKEltb2V/aYm7ksm8XQ5f7iqJNLhaQOmx MOlIj85nAN7ikSFk9FJYDxVJxBR/k95cvLnC9pgHnUzYTnps5TLUJLoOjSCjgPCd etbNilmj/J38jTlCgmjQC3+mLIHe+ZHe3XIunowkxibjsm//KdBmLo0G7GGD6AVL dp6139LU7Twh4FWUpgN4WmIjh4Vb9UZ2CA6rVCbb8a+78wNdD6PYxJTQ8KYtgMIX SxlHj7z4CmQyv0ihtGt7 =559v -END PGP SIGNATURE- -- Johan
1.8.18 release available for testing/signing
The 1.8.18 release can now be tested and signed. Get it from https://dist.apache.org/repos/dist/dev/subversion as usual, and add your signatures there. Thanks!
