BTW,
there is a script at [1] used by Sling for checking signatures from
staging, would need some minor mods for Shindig, should I bring it in
to shindig svn and adjust ?
Ian
1 http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh
On 6 Aug 2009, at 13:06, Vincent Siveton wrote:
Hi Paul,
2009/8/5 Paul Lindner <[email protected]>:
Hi Vincent, I believe I identified the problem. One needs to use
-Papache-release instead of -Prelease. This generates the
signatures, adds
I updated pom to be sure to use the parent configuration.
I also fixed samples pom.
the javadoc jars etc.
The new staging repo is here:
https://repository.apache.org/content/repositories/shindig-staging-016/
I tried to verify the checksum for jar, and they are wrong:
#sha1sum shindig-common-1.1-BETA2-incubating.jar
1c2d59ce6c453f8bb1d255169bdfbf8df6a30e30
*shindig-common-1.1-BETA2-incubating.jar
#more shindig-common-1.1-BETA2-incubating.jar.sha1
4b9ff114f653eb48ed8c2ff9a43e4c81d2c952f8
#openssl dgst -md5 shindig-common-1.1-BETA2-incubating.jar
MD5(shindig-common-1.1-BETA2-incubating.jar)=
7fc0bee0f4df931f1a95fd9d6342b703
#more shindig-common-1.1-BETA2-incubating.jar.md5
34b9f53df2503ef6f806420b13a4072c
There are issues with GPG signing:
[INFO] gpg: WARNING: "--no-use-agent" is an obsolete option - it
has no
effect
I activated gpg-agent to sign the artifacts
gpg.useAgent doesn't work
http://wiki.apache.org/portals/FrontPage/HowtoUseNexusForRelease
Also, I saw some of this:
[INFO] 2248K uploaded
(shindig-1.1-BETA2-incubating-20090805.182435-1-source.tar.bz2)
[INFO] [INFO] Retrieving previous build number from
apache.snapshots.https
[INFO] [WARNING] *** CHECKSUM FAILED - Checksum failed on download:
local =
'1b057e58e68f7c078a43613ad7707bc55ded538c'; remote =
'd23c06917f48efc3c8c5d2ade24681dd2def1da7' - RETRYING
[INFO] [WARNING] *** CHECKSUM FAILED - Checksum failed on download:
local =
'1b057e58e68f7c078a43613ad7707bc55ded538c'; remote =
'd23c06917f48efc3c8c5d2ade24681dd2def1da7' - IGNORING
[INFO] Uploading:
https://repository.apache.org/content/repositories/snapshots/org/apache/shindig/shindig/1.1-BETA2-incubating-SNAPSHOT/shindig-1.1-BETA2-incubating-20090805.182435-1.pom.asc
Any clues?
Not sure if it could be related, I spot:
* shindig-1.1.x/KEYS: GnuPG v1.4.9 for Paul
* *.asc files: GnuPG v2.0.11
Cheers,
Vincent
