Re: 1.7.8 up for testing/signing

On Mon, Dec 10, 2012 at 10:03 PM, Paul Burba <ptburba_at_gmail.com> wrote:
> On Mon, Dec 10, 2012 at 5:07 PM, Ben Reser <ben_at_reser.org> wrote:
>> The 1.7.8 release artifacts are now available for testing/signing.
>> Please get the tarballs from
>> https://dist.apache.org/repos/dist/dev/subversion
>> and add your signatures there.
>>
>> Thanks!
>
> SUMMARY:
> ---------
> +1 to release
>
> VERIFIED:
> ---------
> Other than the expected differences in
> subversion/include/svn_version.h,
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.7.8.zip
> is identical to
> https://svn.apache.org/repos/asf/subversion/branches/1.7.x@1419691.
>
> SHA1 checksum of
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.7.8.zip
> is 65985725f8138cc18993a9088d4ad70df6c0d816
>
> TESTED:
> -------
> [Release-Build] x[ fsfs | bdb ] x [ file | svn | http (neon) | http (serf) ]
> Ruby bindings (patched as described here:
> http://svn.haxx.se/dev/archive-2011-06/0682.shtml)
> JavaHL Bindings
>
> RESULTS:
> --------
> All Tests Pass
>
> PLATFORM:
> ---------
> MS Windows 7 Home Premium Service Pack 1
> Microsoft Visual Studio 2008 Version 9.0.30729.1 SP
>
> DEPENDENCIES:
> -------------
> APR: 1.4.6
> APR-UTIL: 1.4.1
> Neon: 0.29.5
> zlib: 1.2.4
> OpenSSL: 0.9.8q
> Apache: 2.2.22
> BDB: 4.8.30
> sqlite: 3.7.7.1
> Python: 2.7.2 (ActivePython 2.7.2.5)
> Perl: 5.14.2
> Ruby: ruby 1.8.7
> java: 1.6.0_21
> junit: 4.8.2
> swig: 1.3.40
> serf: 1.1.1
>
> SIGNATURE:
> ----------
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.7.8.zip:
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (MingW32)
>
> iD8DBQBQxnLZ2RaJMFP83FURAhdgAJ4uhjXgujUQK5MCObZWanCv0y06dgCfcip4
> 9wYkft1k86LMlDaXYBRZfvk=
> =EbgM
> -----END PGP SIGNATURE-----

Hi Ben,

Not until after I signed this did I recall your note about migrating
off of sha1 based keys --
http://svn.haxx.se/dev/archive-2012-10/0073.shtml

Here's my sig using my new[1] 4069 bit RSA key (I updated
subversion-1.7.8.zip.asc as well):

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
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=A/dt
-----END PGP SIGNATURE-----

[1] Key ID: 56F3D7BC
Fingerprint: 1A0F E7C6 B3C5 F8D4 D0C4 A20B 64DD C071 56F3 D7BC

-- 
Paul T. Burba
CollabNet, Inc. -- www.collab.net -- Enterprise Cloud Development
Skype: ptburba