RE: KEYS?
Herr Mueller i got thru: wget http://www.apache.org/dist/maven/KEYS --2012-10-14 00:14:28-- http://www.apache.org/dist/maven/KEYS Resolving www.apache.org... 140.211.11.131, 192.87.106.229 Connecting to www.apache.org|140.211.11.131|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 131350 (128K) Saving to: `KEYS' 100%[==>] 131,350 117K/s in 1.1s 2012-10-14 00:14:30 (117 KB/s) - `KEYS' saved [131350/131350] i got thru by not checking for certificate wget --no-check-certificate https://svn.apache.org/repos/asf/maven/project/KEYS --2012-10-14 00:19:22-- https://svn.apache.org/repos/asf/maven/project/KEYS Resolving svn.apache.org... 140.211.11.4 Connecting to svn.apache.org|140.211.11.4|:443... connected. WARNING: cannot verify svn.apache.org's certificate, issued by `/C=US/O=Thawte, Inc./CN=Thawte SSL CA': Unable to locally verify the issuer's authority. HTTP request sent, awaiting response... 200 OK Length: 131350 (128K) [text/plain] Saving to: `KEYS.1' 100%[==>] 131,350 154K/s in 0.8s 2012-10-14 00:19:24 (154 KB/s) - `KEYS.1' saved [131350/131350] try from another wireless site BTW Thawte is a CA approved provider...you should not experience any "not trusted" errors with a Thawte issued cert Martin __ Verzicht und Vertraulichkeitanmerkung Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiterleitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient lediglich dem Austausch von Informationen und entfaltet keine rechtliche Bindungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen wir keine Haftung fuer den Inhalt uebernehmen. > Date: Sat, 13 Oct 2012 14:25:20 + > Subject: KEYS? > From: lbrt...@gmail.com > To: users@maven.apache.org > > I couldn't find anyone complaining about issues while > downloading/verifying KEYS in your FAQ: > ~ > http://maven.apache.org/general.html > ~ > yet the link to the KEY ring used by your developers is not to be found > ~ > $ wget http://www.apache.org/dist/maven/KEYS > --2012-10-13 10:19:32-- http://www.apache.org/dist/maven/KEYS > Resolving www.apache.org (www.apache.org)... 140.211.11.131, > 192.87.106.229, 2001:610:1:80bc:192:87:106:229 > Connecting to www.apache.org (www.apache.org)|140.211.11.131|:80... connected. > HTTP request sent, awaiting response... 404 Not Found > 2012-10-13 10:19:33 ERROR 404: Not Found. > ~ > and things seems not to work if you use the one in your repositories > ~ > $ wget --no-check-certificate https://svn.apache.org/repos/asf/maven/project/KEYS > --2012-10-13 10:20:46-- https://svn.apache.org/repos/asf/maven/project/KEYS > Resolving svn.apache.org (svn.apache.org)... 140.211.11.4 > Connecting to svn.apache.org (svn.apache.org)|140.211.11.4|:443... connected. > WARNING: The certificate of `svn.apache.org' is not trusted. > WARNING: The certificate of `svn.apache.org' hasn't got a known issuer. > HTTP request sent, awaiting response... 200 OK > Length: 131350 (128K) [text/plain] > Saving to: `KEYS' > > 100%[>] > 131,350 314K/s in 0.4s > > 2012-10-13 10:20:48 (314 KB/s) - `KEYS' saved [131350/131350] > > $ ls -l KEYS > -rw-r--r-- 1 knoppix knoppix 131350 Oct 5 15:01 KEYS > $ wc -l KEYS > 2334 KEYS > $ md5sum KEYS > e1e7483acae6b595207dcd17ab188119 KEYS > $ md5sum -b KEYS > e1e7483acae6b595207dcd17ab188119 *KEYS > ~ > $ gpg --import KEYS > gpg: key C560DD8B: public key "Emmanuel Venisse " > imported > gpg: key BB617866: public key "Sarel Jason van Zyl " imported > gpg: key C9725F3B: public key "Dion Gillard " imported > gpg: key 084C9113: public key "Brett Porter " imported > gpg: key 1824BDC1: public key "Brett Porter (Release Signing Key) > " imported > gpg: key F0E309FF: public key "Vincent Massol " imported > gpg: key 5249885E: public key "Lukas Theussl " imported > gpg: key 93CC521B: public key "Arnaud Heritier (aheritier) > " imported > gpg: key 699A35EB: public key "Arnaud Heritier (CODE SIGNING KEY) > " imported > gpg: key 27CD9F92: public key "Fabrizio Giustina " imported > gpg: key F0E309FF: "Vincent Massol " not changed > gpg: key AF5EC452: public key "Dennis Lundberg (CODE SIGNING KEY) > " imported > gpg: key 8FB67BAC: public key "Joakim Erdfelt " imported > gpg: key 3C062231: public key "Brian E Fox " imported > gpg: key BB550746: public key "J. Daniel Kulp " imported > gpg: key E50BC813: public key "Jesse McConnell (CODE SIGNING KEY) > " imported > gpg: key B3A2D3B1: public key "John Casey (Maven PMC Member) > " imported > gpg: key 9C0EFF85: public key "John D Casey " imported > gpg: key DB596386: public key "Vincent Siveton " imported > gpg: key A43C4492: public key "Carlos Sanchez > " imported > gpg: key C625BAFB
Re: Dependencies that should not be on the classpath
There's a real maven design problem here, if you ask me. Maven overloads the 'type' of an artifact. A 'war' dependency is legitimate and a different thing from a 'jar' dependency. Sadly, though, all jar files are equally treated as the output of the standard java lifecycle, suitable for classpath. Javadoc is a counterexample. - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: KEYS?
> ... a list of mirrors ~ Well, I just made the stupid mistake for the week ;-) ~ I should have noticed it by aactually paying attention to tar's error message ~ lbrtchx - To unsubscribe, e-mail: users-unsubscr...@maven.apache.org For additional commands, e-mail: users-h...@maven.apache.org
Re: KEYS?
http://www.apache.org/dyn/closer.cgi/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz returns a html page with a list of mirrors So don't use that for downloading a distrib. 2012/10/13 Albretch Mueller : > I have no way to check that everything on the back end is fine, but > it seems I keep getting corrupted/unsychronized data: > ~ > lbrtchx > ~ > $ wget --server-response --no-verbose > http://www.apache.org/dyn/closer.cgi/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz > HTTP/1.1 200 OK > Date: Thu, 11 Oct 2012 09:05:17 GMT > Server: Apache/2.4.1 (Unix) OpenSSL/1.0.0g > Vary: Accept-Encoding > Cache-Control: max-age=3600 > Expires: Thu, 11 Oct 2012 10:05:17 GMT > Keep-Alive: timeout=5, max=100 > Connection: Keep-Alive > Transfer-Encoding: chunked > Content-Type: text/html; charset=utf-8 > 2012-10-11 05:04:58 > URL:http://www.apache.org/dyn/closer.cgi/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz > [30124] -> "apache-maven-3.0.4-src.tar.gz" [1] > ~ > $ wget http://www.apache.org/dist/maven/KEYS > --2012-10-13 10:34:40-- http://www.apache.org/dist/maven/KEYS > Resolving www.apache.org (www.apache.org)... 140.211.11.131, > 192.87.106.229, 2001:610:1:80bc:192:87:106:229 > Connecting to www.apache.org (www.apache.org)|140.211.11.131|:80... connected. > HTTP request sent, awaiting response... 200 OK > Length: 131350 (128K) > Saving to: `KEYS' > > 100%[>] > 131,350 247K/s in 0.5s > > 2012-10-13 10:34:41 (247 KB/s) - `KEYS' saved [131350/131350] > > $ ls -l KEYS > -rw-r--r-- 1 knoppix knoppix 131350 Oct 13 2012 KEYS > > $ wc -l KEYS > 2334 KEYS > > $ md5sum KEYS > e1e7483acae6b595207dcd17ab188119 KEYS > ~ > $ gpg --import KEYS > gpg: key C560DD8B: "Emmanuel Venisse " not changed > gpg: key BB617866: "Sarel Jason van Zyl " not changed > gpg: key C9725F3B: "Dion Gillard " not changed > gpg: key 084C9113: "Brett Porter " not changed > gpg: key 1824BDC1: "Brett Porter (Release Signing Key) > " not changed > gpg: key F0E309FF: "Vincent Massol " not changed > gpg: key 5249885E: "Lukas Theussl " not changed > gpg: key 93CC521B: "Arnaud Heritier (aheritier) > " not changed > gpg: key 699A35EB: "Arnaud Heritier (CODE SIGNING KEY) > " not changed > gpg: key 27CD9F92: "Fabrizio Giustina " not changed > gpg: key F0E309FF: "Vincent Massol " not changed > gpg: key AF5EC452: "Dennis Lundberg (CODE SIGNING KEY) > " not changed > gpg: key 8FB67BAC: "Joakim Erdfelt " not changed > gpg: key 3C062231: "Brian E Fox " not changed > gpg: key BB550746: "J. Daniel Kulp " not changed > gpg: key E50BC813: "Jesse McConnell (CODE SIGNING KEY) > " not changed > gpg: key B3A2D3B1: "John Casey (Maven PMC Member) " not > changed > gpg: key 9C0EFF85: "John D Casey " not changed > gpg: key DB596386: "Vincent Siveton " not changed > gpg: key A43C4492: "Carlos Sanchez " not changed > gpg: key C625BAFB: "Maria Odea Ching " not changed > gpg: key 7BA507E8: "Mauro Talevi " not changed > gpg: key 70161C62: "Herve Boutemy " not changed > gpg: key B4372146: "Olivier Lamy " not changed > gpg: key 0F353251: "Dan Fabulich " not changed > gpg: key 064C851C: "Raphaël Piéroni " not changed > gpg: key B0874707: "Milos Kleint " not changed > gpg: key 365A46EF: "Mark Hobson " not changed > gpg: key 81C4177D: "Oleg Gusakov " not changed > gpg: key 34A72A7F: "John Dennis Casey " not changed > gpg: key 3571506F: "Raphaël Piéroni " not changed > gpg: key 9A25CE21: "Barrie Treloar " not changed > gpg: key 9D7013A9: "Dan T. Tran " not changed > gpg: key CC303655: "Stephane Nicoll " not changed > gpg: key 39332BA6: "Barrie Treloar " not changed > gpg: key A7FF4A41: "Benjamin Bentmann (CODE SIGNING KEY) > " not changed > gpg: key 7F3ACFC4: "Paul Gier (Apache Maven) " not changed > gpg: key CDA187E9: "Nicolas De loof " not changed > gpg: key B620D787: "Stephen Connolly " not changed > gpg: key DDFA199E: "John Dennis Casey (Apache Code-Signing Key) > " not changed > gpg: key 2CF0CC82: "Arnaud Héritier (CODE SIGNING KEY) > " not changed > gpg: key E0747D50: "Kristian Rosenvold " not changed > gpg: key 589628E0: "Mark Hobson " not changed > gpg: key 6BFC416A: "Brian Demers " not changed > gpg: key DC742C7C: "Brian E Fox (CODE SIGNING KEY) > " not changed > gpg: key 9CE964B8: "Robert Scholte " not changed > gpg: key ED330E1B: "Igor Fedorenko " not changed > gpg: key F65C0178: "Tony Chemit (CODE SIGNING KEY) > " not changed > gpg: key 98B1CC53: "Benson Margulies " not changed > gpg: key 4FB9BA39: "Tamás Cservenák " not changed > gpg: Total number processed: 50 > gpg: unchanged: 50 > ~ > $ wget --server-response > http://www.apache.org/dist/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz.asc > --2012-10-13 10:38:47-- > http://www.apache.org/dist/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz.asc > Resolving www.apache.org (www.apache.org)... 192.87.106.229, > 140.211.11.131, 2001:610:1:80
Re: KEYS?
I have no way to check that everything on the back end is fine, but it seems I keep getting corrupted/unsychronized data: ~ lbrtchx ~ $ wget --server-response --no-verbose http://www.apache.org/dyn/closer.cgi/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz HTTP/1.1 200 OK Date: Thu, 11 Oct 2012 09:05:17 GMT Server: Apache/2.4.1 (Unix) OpenSSL/1.0.0g Vary: Accept-Encoding Cache-Control: max-age=3600 Expires: Thu, 11 Oct 2012 10:05:17 GMT Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 2012-10-11 05:04:58 URL:http://www.apache.org/dyn/closer.cgi/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz [30124] -> "apache-maven-3.0.4-src.tar.gz" [1] ~ $ wget http://www.apache.org/dist/maven/KEYS --2012-10-13 10:34:40-- http://www.apache.org/dist/maven/KEYS Resolving www.apache.org (www.apache.org)... 140.211.11.131, 192.87.106.229, 2001:610:1:80bc:192:87:106:229 Connecting to www.apache.org (www.apache.org)|140.211.11.131|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 131350 (128K) Saving to: `KEYS' 100%[>] 131,350 247K/s in 0.5s 2012-10-13 10:34:41 (247 KB/s) - `KEYS' saved [131350/131350] $ ls -l KEYS -rw-r--r-- 1 knoppix knoppix 131350 Oct 13 2012 KEYS $ wc -l KEYS 2334 KEYS $ md5sum KEYS e1e7483acae6b595207dcd17ab188119 KEYS ~ $ gpg --import KEYS gpg: key C560DD8B: "Emmanuel Venisse " not changed gpg: key BB617866: "Sarel Jason van Zyl " not changed gpg: key C9725F3B: "Dion Gillard " not changed gpg: key 084C9113: "Brett Porter " not changed gpg: key 1824BDC1: "Brett Porter (Release Signing Key) " not changed gpg: key F0E309FF: "Vincent Massol " not changed gpg: key 5249885E: "Lukas Theussl " not changed gpg: key 93CC521B: "Arnaud Heritier (aheritier) " not changed gpg: key 699A35EB: "Arnaud Heritier (CODE SIGNING KEY) " not changed gpg: key 27CD9F92: "Fabrizio Giustina " not changed gpg: key F0E309FF: "Vincent Massol " not changed gpg: key AF5EC452: "Dennis Lundberg (CODE SIGNING KEY) " not changed gpg: key 8FB67BAC: "Joakim Erdfelt " not changed gpg: key 3C062231: "Brian E Fox " not changed gpg: key BB550746: "J. Daniel Kulp " not changed gpg: key E50BC813: "Jesse McConnell (CODE SIGNING KEY) " not changed gpg: key B3A2D3B1: "John Casey (Maven PMC Member) " not changed gpg: key 9C0EFF85: "John D Casey " not changed gpg: key DB596386: "Vincent Siveton " not changed gpg: key A43C4492: "Carlos Sanchez " not changed gpg: key C625BAFB: "Maria Odea Ching " not changed gpg: key 7BA507E8: "Mauro Talevi " not changed gpg: key 70161C62: "Herve Boutemy " not changed gpg: key B4372146: "Olivier Lamy " not changed gpg: key 0F353251: "Dan Fabulich " not changed gpg: key 064C851C: "Raphaël Piéroni " not changed gpg: key B0874707: "Milos Kleint " not changed gpg: key 365A46EF: "Mark Hobson " not changed gpg: key 81C4177D: "Oleg Gusakov " not changed gpg: key 34A72A7F: "John Dennis Casey " not changed gpg: key 3571506F: "Raphaël Piéroni " not changed gpg: key 9A25CE21: "Barrie Treloar " not changed gpg: key 9D7013A9: "Dan T. Tran " not changed gpg: key CC303655: "Stephane Nicoll " not changed gpg: key 39332BA6: "Barrie Treloar " not changed gpg: key A7FF4A41: "Benjamin Bentmann (CODE SIGNING KEY) " not changed gpg: key 7F3ACFC4: "Paul Gier (Apache Maven) " not changed gpg: key CDA187E9: "Nicolas De loof " not changed gpg: key B620D787: "Stephen Connolly " not changed gpg: key DDFA199E: "John Dennis Casey (Apache Code-Signing Key) " not changed gpg: key 2CF0CC82: "Arnaud Héritier (CODE SIGNING KEY) " not changed gpg: key E0747D50: "Kristian Rosenvold " not changed gpg: key 589628E0: "Mark Hobson " not changed gpg: key 6BFC416A: "Brian Demers " not changed gpg: key DC742C7C: "Brian E Fox (CODE SIGNING KEY) " not changed gpg: key 9CE964B8: "Robert Scholte " not changed gpg: key ED330E1B: "Igor Fedorenko " not changed gpg: key F65C0178: "Tony Chemit (CODE SIGNING KEY) " not changed gpg: key 98B1CC53: "Benson Margulies " not changed gpg: key 4FB9BA39: "Tamás Cservenák " not changed gpg: Total number processed: 50 gpg: unchanged: 50 ~ $ wget --server-response http://www.apache.org/dist/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz.asc --2012-10-13 10:38:47-- http://www.apache.org/dist/maven/maven-3/3.0.4/source/apache-maven-3.0.4-src.tar.gz.asc Resolving www.apache.org (www.apache.org)... 192.87.106.229, 140.211.11.131, 2001:610:1:80bc:192:87:106:229 Connecting to www.apache.org (www.apache.org)|192.87.106.229|:80... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Sat, 13 Oct 2012 14:39:04 GMT Server: Apache/2.4.1 (Unix) OpenSSL/1.0.0g Last-Modified: Wed, 05 Sep 2012 07:01:49 GMT ETag: "c3-4c8eef2e018aa" Accept-Ranges: bytes Content-Length: 195 Vary: Accept-Encoding Cache-Control: max-age=3600 Expires: Sat, 13 Oct 2012
Re: KEYS?
fixed. The file will be propagated in mirrors soon. Apologize for missed that. 2012/10/13 Olivier Lamy : > We switched recently to a new mechanism for distribution and I missed > to add the KEYS file. > I will fix that. > Note: it's a simple copy of the file located in svn: > http://svn.apache.org/repos/asf/maven/project/KEYS > > 2012/10/13 Albretch Mueller : >> I couldn't find anyone complaining about issues while >> downloading/verifying KEYS in your FAQ: >> ~ >> http://maven.apache.org/general.html >> ~ >> yet the link to the KEY ring used by your developers is not to be found >> ~ >> $ wget http://www.apache.org/dist/maven/KEYS >> --2012-10-13 10:19:32-- http://www.apache.org/dist/maven/KEYS >> Resolving www.apache.org (www.apache.org)... 140.211.11.131, >> 192.87.106.229, 2001:610:1:80bc:192:87:106:229 >> Connecting to www.apache.org (www.apache.org)|140.211.11.131|:80... >> connected. >> HTTP request sent, awaiting response... 404 Not Found >> 2012-10-13 10:19:33 ERROR 404: Not Found. >> ~ >> and things seems not to work if you use the one in your repositories >> ~ >> $ wget --no-check-certificate >> https://svn.apache.org/repos/asf/maven/project/KEYS >> --2012-10-13 10:20:46-- https://svn.apache.org/repos/asf/maven/project/KEYS >> Resolving svn.apache.org (svn.apache.org)... 140.211.11.4 >> Connecting to svn.apache.org (svn.apache.org)|140.211.11.4|:443... connected. >> WARNING: The certificate of `svn.apache.org' is not trusted. >> WARNING: The certificate of `svn.apache.org' hasn't got a known issuer. >> HTTP request sent, awaiting response... 200 OK >> Length: 131350 (128K) [text/plain] >> Saving to: `KEYS' >> >> 100%[>] >> 131,350 314K/s in 0.4s >> >> 2012-10-13 10:20:48 (314 KB/s) - `KEYS' saved [131350/131350] >> >> $ ls -l KEYS >> -rw-r--r-- 1 knoppix knoppix 131350 Oct 5 15:01 KEYS >> $ wc -l KEYS >> 2334 KEYS >> $ md5sum KEYS >> e1e7483acae6b595207dcd17ab188119 KEYS >> $ md5sum -b KEYS >> e1e7483acae6b595207dcd17ab188119 *KEYS >> ~ >> $ gpg --import KEYS >> gpg: key C560DD8B: public key "Emmanuel Venisse " >> imported >> gpg: key BB617866: public key "Sarel Jason van Zyl " >> imported >> gpg: key C9725F3B: public key "Dion Gillard " imported >> gpg: key 084C9113: public key "Brett Porter " imported >> gpg: key 1824BDC1: public key "Brett Porter (Release Signing Key) >> " imported >> gpg: key F0E309FF: public key "Vincent Massol " imported >> gpg: key 5249885E: public key "Lukas Theussl " imported >> gpg: key 93CC521B: public key "Arnaud Heritier (aheritier) >> " imported >> gpg: key 699A35EB: public key "Arnaud Heritier (CODE SIGNING KEY) >> " imported >> gpg: key 27CD9F92: public key "Fabrizio Giustina " >> imported >> gpg: key F0E309FF: "Vincent Massol " not changed >> gpg: key AF5EC452: public key "Dennis Lundberg (CODE SIGNING KEY) >> " imported >> gpg: key 8FB67BAC: public key "Joakim Erdfelt " imported >> gpg: key 3C062231: public key "Brian E Fox " imported >> gpg: key BB550746: public key "J. Daniel Kulp " imported >> gpg: key E50BC813: public key "Jesse McConnell (CODE SIGNING KEY) >> " imported >> gpg: key B3A2D3B1: public key "John Casey (Maven PMC Member) >> " imported >> gpg: key 9C0EFF85: public key "John D Casey " imported >> gpg: key DB596386: public key "Vincent Siveton " >> imported >> gpg: key A43C4492: public key "Carlos Sanchez >> " imported >> gpg: key C625BAFB: public key "Maria Odea Ching " imported >> gpg: key 7BA507E8: public key "Mauro Talevi " imported >> gpg: key 70161C62: public key "Herve Boutemy " imported >> gpg: key B4372146: public key "Olivier Lamy " imported >> gpg: key 0F353251: public key "Dan Fabulich " imported >> gpg: key 064C851C: public key "Raphaël Piéroni " imported >> gpg: key B0874707: public key "Milos Kleint " imported >> gpg: key 365A46EF: public key "Mark Hobson " imported >> gpg: key 81C4177D: public key "Oleg Gusakov " imported >> gpg: key 34A72A7F: public key "John Dennis Casey >> " imported >> gpg: key 3571506F: public key "Raphaël Piéroni " imported >> gpg: key 9A25CE21: public key "Barrie Treloar " imported >> gpg: key 9D7013A9: public key "Dan T. Tran " imported >> gpg: key CC303655: public key "Stephane Nicoll " imported >> gpg: key 39332BA6: public key "Barrie Treloar " imported >> gpg: key A7FF4A41: public key "Benjamin Bentmann (CODE SIGNING KEY) >> " imported >> gpg: key 7F3ACFC4: public key "Paul Gier (Apache Maven) >> " imported >> gpg: key CDA187E9: public key "Nicolas De loof " imported >> gpg: key B620D787: public key "Stephen Connolly " >> imported >> gpg: key DDFA199E: public key "John Dennis Casey (Apache Code-Signing >> Key) " imported >> gpg: key 2CF0CC82: public key "Arnaud Héritier (CODE SIGNING KEY) >> " imported >> gpg: key E0747D50: public key "Kristian Rosenvold >> " imported >> gpg: key 589628E0: public key "Mark Hobson " imported >> gpg: key 6BFC416A: public key "Brian Demers " >> imported
Re: KEYS?
We switched recently to a new mechanism for distribution and I missed to add the KEYS file. I will fix that. Note: it's a simple copy of the file located in svn: http://svn.apache.org/repos/asf/maven/project/KEYS 2012/10/13 Albretch Mueller : > I couldn't find anyone complaining about issues while > downloading/verifying KEYS in your FAQ: > ~ > http://maven.apache.org/general.html > ~ > yet the link to the KEY ring used by your developers is not to be found > ~ > $ wget http://www.apache.org/dist/maven/KEYS > --2012-10-13 10:19:32-- http://www.apache.org/dist/maven/KEYS > Resolving www.apache.org (www.apache.org)... 140.211.11.131, > 192.87.106.229, 2001:610:1:80bc:192:87:106:229 > Connecting to www.apache.org (www.apache.org)|140.211.11.131|:80... connected. > HTTP request sent, awaiting response... 404 Not Found > 2012-10-13 10:19:33 ERROR 404: Not Found. > ~ > and things seems not to work if you use the one in your repositories > ~ > $ wget --no-check-certificate > https://svn.apache.org/repos/asf/maven/project/KEYS > --2012-10-13 10:20:46-- https://svn.apache.org/repos/asf/maven/project/KEYS > Resolving svn.apache.org (svn.apache.org)... 140.211.11.4 > Connecting to svn.apache.org (svn.apache.org)|140.211.11.4|:443... connected. > WARNING: The certificate of `svn.apache.org' is not trusted. > WARNING: The certificate of `svn.apache.org' hasn't got a known issuer. > HTTP request sent, awaiting response... 200 OK > Length: 131350 (128K) [text/plain] > Saving to: `KEYS' > > 100%[>] > 131,350 314K/s in 0.4s > > 2012-10-13 10:20:48 (314 KB/s) - `KEYS' saved [131350/131350] > > $ ls -l KEYS > -rw-r--r-- 1 knoppix knoppix 131350 Oct 5 15:01 KEYS > $ wc -l KEYS > 2334 KEYS > $ md5sum KEYS > e1e7483acae6b595207dcd17ab188119 KEYS > $ md5sum -b KEYS > e1e7483acae6b595207dcd17ab188119 *KEYS > ~ > $ gpg --import KEYS > gpg: key C560DD8B: public key "Emmanuel Venisse " > imported > gpg: key BB617866: public key "Sarel Jason van Zyl " imported > gpg: key C9725F3B: public key "Dion Gillard " imported > gpg: key 084C9113: public key "Brett Porter " imported > gpg: key 1824BDC1: public key "Brett Porter (Release Signing Key) > " imported > gpg: key F0E309FF: public key "Vincent Massol " imported > gpg: key 5249885E: public key "Lukas Theussl " imported > gpg: key 93CC521B: public key "Arnaud Heritier (aheritier) > " imported > gpg: key 699A35EB: public key "Arnaud Heritier (CODE SIGNING KEY) > " imported > gpg: key 27CD9F92: public key "Fabrizio Giustina " imported > gpg: key F0E309FF: "Vincent Massol " not changed > gpg: key AF5EC452: public key "Dennis Lundberg (CODE SIGNING KEY) > " imported > gpg: key 8FB67BAC: public key "Joakim Erdfelt " imported > gpg: key 3C062231: public key "Brian E Fox " imported > gpg: key BB550746: public key "J. Daniel Kulp " imported > gpg: key E50BC813: public key "Jesse McConnell (CODE SIGNING KEY) > " imported > gpg: key B3A2D3B1: public key "John Casey (Maven PMC Member) > " imported > gpg: key 9C0EFF85: public key "John D Casey " imported > gpg: key DB596386: public key "Vincent Siveton " imported > gpg: key A43C4492: public key "Carlos Sanchez > " imported > gpg: key C625BAFB: public key "Maria Odea Ching " imported > gpg: key 7BA507E8: public key "Mauro Talevi " imported > gpg: key 70161C62: public key "Herve Boutemy " imported > gpg: key B4372146: public key "Olivier Lamy " imported > gpg: key 0F353251: public key "Dan Fabulich " imported > gpg: key 064C851C: public key "Raphaël Piéroni " imported > gpg: key B0874707: public key "Milos Kleint " imported > gpg: key 365A46EF: public key "Mark Hobson " imported > gpg: key 81C4177D: public key "Oleg Gusakov " imported > gpg: key 34A72A7F: public key "John Dennis Casey > " imported > gpg: key 3571506F: public key "Raphaël Piéroni " imported > gpg: key 9A25CE21: public key "Barrie Treloar " imported > gpg: key 9D7013A9: public key "Dan T. Tran " imported > gpg: key CC303655: public key "Stephane Nicoll " imported > gpg: key 39332BA6: public key "Barrie Treloar " imported > gpg: key A7FF4A41: public key "Benjamin Bentmann (CODE SIGNING KEY) > " imported > gpg: key 7F3ACFC4: public key "Paul Gier (Apache Maven) > " imported > gpg: key CDA187E9: public key "Nicolas De loof " imported > gpg: key B620D787: public key "Stephen Connolly " > imported > gpg: key DDFA199E: public key "John Dennis Casey (Apache Code-Signing > Key) " imported > gpg: key 2CF0CC82: public key "Arnaud Héritier (CODE SIGNING KEY) > " imported > gpg: key E0747D50: public key "Kristian Rosenvold > " imported > gpg: key 589628E0: public key "Mark Hobson " imported > gpg: key 6BFC416A: public key "Brian Demers " imported > gpg: key DC742C7C: public key "Brian E Fox (CODE SIGNING KEY) > " imported > gpg: key 9CE964B8: public key "Robert Scholte " > imported > gpg: key ED330E1B: public key "Igor Fedorenko " imported > gpg: key F65C0178: public key "Tony Chem
