incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From sebb <seb...@gmail.com>
Subject Re: [incubator/taverna] bad signatures
Date Fri, 09 Mar 2018 16:02:52 GMT
On 9 March 2018 at 15:09, Henk P. Penning <penning@uu.nl> wrote:
> On Fri, 9 Mar 2018, Stian Soiland-Reyes wrote:
>
>> Date: Fri, 9 Mar 2018 15:52:29 +0100
>> From: Stian Soiland-Reyes <stain@apache.org>
>> To: Henk P. Penning <penning@uu.nl>
>> Cc: general@incubator.apache.org, private@taverna.incubator.apache.org
>> Subject: Re: [incubator/taverna] bad signatures
>
>
> Hi Stian,
>
>> Thanks to the bot for spotting this, I have updated expiry date for my
>> PGP subkey 6e50bb68cc1699a6.
>
>
>   Excellent ; the checker refreshes expired keys (only) daily ;
>   so tomorrow the checker should pickup the change.
>
>> As for removing "old" releases under
>> https://dist.apache.org/repos/dist/release/incubator/taverna/source/
>> all of these are referenced from
>> https://taverna.incubator.apache.org/download/ as they are different
>> modules (from different git repos) - is there a way to flag this for
>> the checker? I have removed taverna-parent-2 though - as -3 is
>> released.
>

I think what Stian is saying is that the following are all different products:

    taverna-common-activities-2.1.0-incubating/
    taverna-language-0.15.1-incubating/
    taverna-osgi-0.2.1-incubating/
    taverna-parent-2-incubating/
    taverna-parent-3-incubating/

** apart from taverna-parent-2-incubating **


>   Please remember that everything in /dist/ is automatically
>   archived in : https://archive.apache.org/dist/
>
>   So you can simply remove older stuff and refer to it
>   (for instance on you download pages) with urls pointing into
>
>     https://archive.apache.org/dist/incubator/taverna/source/

I disagree; they are not older versions.

So they should be left on the ASF mirrors until such time as they are
superseded (c.f. taverna-parent-2-incubating)

>   Please mail me (henkp@apache.org) if you have any questions, remarks etc.
>
>   Thanks ; groeten,
>
>   HPP
>
>
> ------------------------------------------------------------   _
> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
> http://www.staff.science.uu.nl/~penni101/ M penning@uu.nl     \_/
>
>> On 9 March 2018 at 14:35, Henk P. Penning <penning@uu.nl> wrote:
>>>
>>> Hi Stian,
>>>
>>>   please take a quick look at :
>>>
>>>     https://checker.apache.org/projs/incubator.html
>>>
>>>   As you can see, you have 2 bad signatures in
>>>   www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
>>>   your key 6e50bb68cc1699a6 expired.
>>>   Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.
>>>
>>>   Please fix this problem soon :
>>>
>>>   -- remove the parent package,
>>>   -- or change the expiration date of the subkey,
>>>   -- or replace the signature file
>>>
>>>   Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG
>>>
>>>   Please seriously consider removing releases
>>>
>>>     taverna-common-activities-2.1.0-incubating/
>>>     taverna-language-0.15.1-incubating/
>>>     taverna-osgi-0.2.1-incubating/
>>>     taverna-parent-2-incubating/
>>>     taverna-parent-3-incubating/
>>>
>>>   ... from /dist/incubator/taverna/source ; branches that
>>>   are not currently "under development" should be
>>>   removed from /dist/ ; see [1].
>>>
>>>   Please mail me (henkp@apache.org) if you have any questions, remarks
>>> etc.
>>>
>>>   [1] https://www.apache.org/legal/release-policy.html
>>>
>>>   Regards,
>>>
>>>   Henk Penning -- apache.org infrastructure ; dist & mirrors
>>>
>>> ------------------------------------------------------------   _
>>> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
>>> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
>>> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
>>> http://www.staff.science.uu.nl/~penni101/ M penning@uu.nl     \_/
>>>
>>> ---------- Forwarded message ----------
>>> Date: Fri, 9 Mar 2018 14:20:28 +0100
>>>
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir
>>> prod/gpg
>>> 6e50bb68cc1699a6 2> /dev/null
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> sig:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <stain@apache.org>
>>> sig:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <stain@apache.org>
>>> ***** sums_delete 2
>>
>>
>>
>>
>> --
>> Stian Soiland-Reyes
>> http://orcid.org/0000-0001-9842-9718
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
>> For additional commands, e-mail: general-help@incubator.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message