Return-Path: Delivered-To: apmail-db-jdo-commits-archive@www.apache.org Received: (qmail 67332 invoked from network); 21 Nov 2007 17:39:28 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 21 Nov 2007 17:39:28 -0000 Received: (qmail 63040 invoked by uid 500); 21 Nov 2007 17:39:14 -0000 Mailing-List: contact jdo-commits-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jdo-dev@db.apache.org Delivered-To: mailing list jdo-commits@db.apache.org Received: (qmail 63008 invoked by uid 99); 21 Nov 2007 17:39:14 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 Nov 2007 09:39:14 -0800 X-ASF-Spam-Status: No, hits=-100.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.130] (HELO eos.apache.org) (140.211.11.130) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 Nov 2007 17:39:14 +0000 Received: from eos.apache.org (localhost [127.0.0.1]) by eos.apache.org (Postfix) with ESMTP id 3EB03D2D5 for ; Wed, 21 Nov 2007 17:38:53 +0000 (GMT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Apache Wiki To: jdo-commits@db.apache.org Date: Wed, 21 Nov 2007 17:38:53 -0000 Message-ID: <20071121173853.12296.76125@eos.apache.org> Subject: [Jdo Wiki] Update of "KeysAtApache" by MichelleCaisse X-Virus-Checked: Checked by ClamAV on apache.org Dear Wiki user, You have subscribed to a wiki page or wiki category on "Jdo Wiki" for change notification. The following page has been changed by MichelleCaisse: http://wiki.apache.org/jdo/KeysAtApache The comment on the change is: fix some problems ------------------------------------------------------------------------------ Anyone who knows you personally and has a key can sign your key. You need to provide them with your key fingerprint and owner information, which you get by this command: - {{{gpg --armor --export KEY_ID > mykey.asc}}} + {{{gpg --fingerprint KEY_ID}}} * You can find lots of people to sign your key at an [http://wiki.apache.org/apachecon/PgpKeySigning Apache key signing party] @@ -96, +96 @@ {{{gpg --armor --export > ownerkeyid_signed_by_keyid}}} + or + + {{{gpg --armor --export > ownerkeyid_signed_by_keyid}}} + [[Anchor(sign_release)]] = Signing a release with your key = @@ -113, +117 @@ The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the .asc signature file for the particular distribution. Make sure you get the KEYS and signatures from the main distribution directory, rather than from a mirror. Then verify the signatures using {{{gpg --import KEYS}}} + {{{gpg --verify release_name.tar.gz.asc}}} You can also verify the checksums on the files. Unix programs called md5/sha1 or md5sum/sha1sum are included in many unix distributions. *sum is also available as part of GNU Textutils. Windows users can get binary md5 programs from http://www.fourmilab.ch/md5 and hhttp://www.pc-tools.net/win32/freeware/console. Windows !SlavaSoft fsum supports MD5 and SHA1.