Re: Subversion 1.13.0-rc1 up for testing/signing

Nathan Hartman wrote:
> On Tue, Sep 17, 2019 at 10:17 AM Julian Foad <julianfoad_at_apache.org> wrote:
>>
>> The 1.13.0-rc1 release artifacts are now available for testing/signing.
>> Please get the tarballs from
>> https://dist.apache.org/repos/dist/dev/subversion
>> and add your signatures there.
>
> Please bear with me and all my n00b questions... :-)

No worries...

> The ASF committer keys list (https://people.apache.org/keys/committer/)
> is showing my key as "key not found." Not really sure what to do about
> that.

 From some things I just tried, it looks like it might be a temporary
failure of a keyserver. When I tried

gpg --recv-keys --keyserver=hkp://keyserver.ubuntu.com:11371
583F00ADF981C39F

I got "keyserver receive failed: No data" about half the times I tried,
and success the other times. Another keyserver said "no data" every time.

I wouldn't worry about it, for now. Carry on.

> Also, some ASF help page (that I can't seem to locate now) said I need
> to add my key to a KEYS file. Not sure where that is.

You should add them in https://id.apache.org ; you probably already
have. AFAIK the KEYS file(s) are automatically generated from that,
nowadays.

> I've signed the bz2 and gz tarballs and am ready to commit my sigs;
> should I wait until after fixing the above issue(s)?

Don't wait. Validation against such a list is not necessary.

- Julian
Received on 2019-09-27 17:54:46 CEST