> > However, I do not believe that signing should be done on minotaur. It
> > should be done on the Release Manager's personal system where (s)he has
> > control over the private key. I don't like the idea of having private
keys
> > on minotaur.
> To be argumentative, shouldn't Apache have contr
Henri Yandell wrote:
> On Mon, 1 Sep 2003, Noel J. Bergman wrote:
> > See: http://nagoya.apache.org/wiki/apachewiki.cgi?SigningReleases
> The Jakarta Commons release docs need to link to this doc. Or at least
> include the 'how to create a key' section. Very useful at getting me
> started on gpg q
On Mon, 1 Sep 2003, Noel J. Bergman wrote:
> See: http://nagoya.apache.org/wiki/apachewiki.cgi?SigningReleases
>
> PGP is mentioned, but not elaborated upon. I wrote the GPG instructions.
> Someone who uses PGP should contribute the matching instructions.
>
> However, I do not believe that sign
On Mon, 1 Sep 2003, Henri Yandell <[EMAIL PROTECTED]> wrote:
> md5sum should be changed to md5
You could also simply use Ant's task instead. It can
generate md5 (and other) checksums without any native executable.
I don't think md5sum is Linux specific. md5sum comes from the GNU
textutils AFA
Is this due to security, or a personal preference?
I only use this particular PGP key for building apache builds, so storing
on the apache server is a nice management concept for myself. I mean to
use PGP for emails someday, but would probably use a different one.
Hen
On Mon, 1 Sep 2003, Noel J
> I would prefer the instructions be usable on cvs.apache.org
> rather than minotaur, as far less people have minotaur
> accounts and all committers have cvs accounts.
cvs.apache.org == minotaur
--- Noel
-
To unsubscribe
> i'm happy for the instructions to advocate using minotaur to store code
> signing keys and to perform code signing
I'm not. As a voting matter, I'd be -1 (policy, not veto) for storing
private keys on the server.
--- Noel
--
minotaur is now serves cvs and www.
i'm happy for the instructions to advocate using minotaur to store code
signing keys and to perform code signing and summing provided that
infrastructure are cool about this too.
anyone want to volunteer to check with infrastructure?
- robert
On Monday, Sep
Howdy,
Yup, good suggetions that had me stuck for a minute or two looking for
gpg/md5sum on cvs.apache.org. I would prefer the instructions be usable
on cvs.apache.org rather than minotaur, as far less people have minotaur
accounts and all committers have cvs accounts.
Yoav Shapira
On Mon, 1 Sep
On Mon, 1 Sep 2003, robert burrell donkin wrote:
> On Monday, September 1, 2003, at 10:21 PM, Henri Yandell wrote:
>
> > Couple of points. Signing suggests gpg and summing suggests md5sum. These
> > are both linux tools and as Apache doesn't have any linux boxes it makes
> > more sense to me if
On Monday, September 1, 2003, at 10:21 PM, Henri Yandell wrote:
Couple of points. Signing suggests gpg and summing suggests md5sum. These
are both linux tools and as Apache doesn't have any linux boxes it makes
more sense to me if the instructions are usable on Minotaur.
i've always been very relu
11 matches
Mail list logo
