Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
Sender: Brett Porter <brett@porterclan.net>
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Mac OS X Mail 6.1 \(1498\))
Subject: Re: [VOTE] CloudStack Release 4.0, first round
From: Brett Porter <brett@apache.org>
In-Reply-To: 
 <CA+96GG5opFojDc4Obdss+xWs0xwQwVNYA8UxFM+A+ofx_5ZX9w@mail.gmail.com>
Date: Sat, 6 Oct 2012 02:28:55 +1000
Content-Transfer-Encoding: quoted-printable
Message-Id: <14BCA064-757A-40B8-8FC2-C852A386F3EE@apache.org>
References: 
 <B1DF26ECC0458748AC97CECE2DA98D41012FA059FB81@SJCPMAILBOX01.citrite.net>
 <435BFC41-7EB0-4A7E-9721-F68A82C29C97@apache.org>
 <CA+96GG5opFojDc4Obdss+xWs0xwQwVNYA8UxFM+A+ofx_5ZX9w@mail.gmail.com>
To: cloudstack-dev@incubator.apache.org


On 06/10/2012, at 2:23 AM, Chip Childers <chip.childers@sungard.com> =
wrote:

> On Fri, Oct 5, 2012 at 12:16 PM, Brett Porter <brett@apache.org> =
wrote:
>> Hi Alex,
>>=20
>> On 06/10/2012, at 12:54 AM, Alex Huang <Alex.Huang@citrix.com> wrote:
>>=20
>>> Please follow the test procedure before voting:
>>>=20
>>> =
https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudStack+4.0+test=
+procedure
>>=20
>> I noticed the instructions rely on importing keys from a key server, =
after downloading the KEYS file. Wouldn't it be better to import the =
KEYS file directly instead?
>=20
> Brett,
>=20
> I followed the CouchDB test procedure document [1] as the template for
> that verification step.  Is it more common to use the KEYS file?

The doc says...

"You will need to import the keys into your local keychain before you =
can continue.

You can do this manually, from the KEYS file.

Or, you can import them from a public key server:"

There is more info here: =
http://www.apache.org/dev/release-signing#public-key-not-found

If you download from a key server, you need to trust it and check the =
fingerprint matches. Importing the keys file is typically quicker and =
more trustworthy.

- Brett