On 2/12/14, 10:30 PM, Ben Reser wrote:
> The 1.9.0-alpha1 release artifacts are now available for testing/signing.
> Please get the tarballs from
> https://dist.apache.org/repos/dist/dev/subversion
> and add your signatures there. There's no particular schedule to this and I
> wouldn't be surprised if we don't find some sort of problems in testing.
So far we have two known issues with this tarball:
svn-populate-node-origins-index doesn't build with Visual Studio 2010, 2012, or
2013 due to the ' in the project's descriptions. Bert found and fixed this in
http://svn.apache.org/r1568180
Certificate validation failure. There was a missing initialization that will
make certificates without subjectAltNames randomly fail to validate.
svn.apache.org's certificate just so happens to be such a certificate. The bug
is such that it will never allow a certificate to be validated that shouldn't
be. Julian reported this here:
https://mail-archives.apache.org/mod_mbox/subversion-dev/201402.mbox/%3C1392388334.48607.YahooMailNeo%40web87705.mail.ir2.yahoo.com%3E
and I fixed the problem in http://svn.apache.org/r1568349
I wasn't terribly inclined to re-roll 1.9.0-alpha for the first one, but the
second one seems more critical since I'm guessing a lot of people will run into it.
I'm not going to immediately run out and produce a new tarball since I suspect
we may find more things, so please continue testing this and let me know if you
find other things.
Received on 2014-02-14 20:45:21 CET