thx for this, Jeroen.
Per Robert's email earlier in this thread, and also one small thing that
Mark Stru noticed (off-list), I'll need to go round the loop again. So put
some time aside again later in the week and hopefully next time the release
will go thru...
Cheers
Dan
On 18 December 2012 21
... thumbs
A big +1
Everything went smooth and successfully. And thumps up for the
documentation on Isis site!
On Tue, Dec 18, 2012 at 9:29 PM, Dan Haywood
wrote:
> other interesting reading: http://people.apache.org/~henkp/trust/
>
> you might also say that the public key might be trusted because it is
>
other interesting reading: http://people.apache.org/~henkp/trust/
you might also say that the public key might be trusted because it is
listed on the committers' index, http://people.apache.org/list_H.html
On 18 December 2012 20:25, Dan Haywood wrote:
> I guess the trust comes from the fact t
I guess the trust comes from the fact that the KEYS file - which is
downloaded from the Isis repo - contains the public key which does verify
against the private key I used to sign the release.
The message that it isn't trusted should be interpreted as it doesn't link
to a trusted root CA.
I wond
Ok, following this procedure omits the need to specify a keyserver. Still
untrusted though:
gpg --import ~/Development/apache-isis/KEYS
gpg: key 2FDB81B1: public key "Mark Struberg (Apache) "
imported
gpg: key 77AD2E23: "Dan Haywood (CODE SIGNING KEY) "
not changed
gpg: key 61459F7A: public key "M
On 18 December 2012 20:02, Jeroen van der Wal wrote:
>
> In the output I also noticed that Dan's key is not trusted:
>
>
Um, it *is* trusted, in that it is counter-signed by various other members
in the ASF web of trust:
http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x76D7491A77AD2E23
I
In the process of verifying I encountered the fact that I have to specify
the keyserver in this way
gpg --verify --keyserver pgp.mit.ede
In the output I also noticed that Dan's key is not trusted:
$ gpg --verify --keyserver pgp.mit.edu isis-1.0.0-source-release.asc
isis-1.0.0-source-release.zip
ok.
Well, I'll take a risk and push an updated release out tonight with your
patch and hope that there's nothing missing in the license stuff. (I'm
hoping that Mark and/or Benson and/or Nour will also check things on that
front, being as they have more experience and might see something that I've
No I haven't looked at the license stuff yet (so I can't properly answer
the first question yet, but I it would be +1 if the license stuff is good).
Rob
On 12/18/12 18:48, Dan Haywood wrote:
Hi Rob,
OK, thx for doing this testing. If this patch were applied, would it be a
positive vote from
Hi Rob,
OK, thx for doing this testing. If this patch were applied, would it be a
positive vote from you? In particular, did you check the license stuff out
as well?
Thx
Dan
On 18 December 2012 18:43, Robert Matthews wrote:
> I've spent some time working through this and have tested what I can
I've spent some time working through this and have tested what I can.
I've even built another component using the new core.
I have unfortunately come across a bit of a problem that prevents one of
my applications from running. It due to the new model validation, which
balks at methods that ha
12 matches
Mail list logo