Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: DO NOT REPLY [Bug 51679] New: Code signature key expired
Date: Thu, 18 Aug 2011 17:45:46 +0200
Message-ID: 
 <E563FB5AB3F02844AC749BA39E494AB4052FB569@VF-MBX11.internal.vodafone.com>
In-Reply-To: 
 <CALK=YjP4YFD0gNkTAGm=CCYn-eZcE5ziNqJD2s4WJLugZwzovA@mail.gmail.com>
Thread-Topic: DO NOT REPLY [Bug 51679] New: Code signature key expired
Thread-Index: Acxdu6f+hoC9B6y4RvGSzDewV+t0BAAAey2A
References: <bug-51679-7868@https.issues.apache.org/bugzilla/>
 <CALK=YjP4YFD0gNkTAGm=CCYn-eZcE5ziNqJD2s4WJLugZwzovA@mail.gmail.com>
From: =?iso-8859-1?Q?=22Pl=FCm=2C_R=FCdiger=2C_VF-Group=22?=
 <ruediger.pluem@vodafone.com>
To: <dev@httpd.apache.org>

IMHO it can be resigned in place since we do not touch the release =
artifacts itself.
But as Bill did the release IMHO he should resign the release to be =
consistent with the
other metadata of this release (e.g. the creator of the 2.2.19) tag.

Regards

R=FCdiger=20

> -----Original Message-----
> From: Eric Covener=20
> Sent: Donnerstag, 18. August 2011 17:29
> To: dev@httpd.apache.org
> Subject: Fwd: DO NOT REPLY [Bug 51679] New: Code signature key expired
>=20
> CHANGES says that currently nothing is backported to 2.2.x since
> 2.2.19 -- should we burn a release # to replace?  Can the existing
> release be re-signed in-place?
>=20
>=20
> ---------- Forwarded message ----------
> From:  <bugzilla@apache.org>
> Date: Thu, Aug 18, 2011 at 9:29 AM
> Subject: DO NOT REPLY [Bug 51679] New: Code signature key expired
> To: bugs@httpd.apache.org
>=20
>=20
> https://issues.apache.org/bugzilla/show_bug.cgi?id=3D51679
>=20
> =A0 =A0 =A0 =A0 =A0 =A0 Bug #: 51679
> =A0 =A0 =A0 =A0 =A0 Summary: Code signature key expired
> =A0 =A0 =A0 =A0 =A0 Product: Apache httpd-2
> =A0 =A0 =A0 =A0 =A0 Version: 2.2.19
> =A0 =A0 =A0 =A0 =A0Platform: All
> =A0 =A0 =A0 =A0OS/Version: All
> =A0 =A0 =A0 =A0 =A0 =A0Status: NEW
> =A0 =A0 =A0 =A0 =A0Severity: minor
> =A0 =A0 =A0 =A0 =A0Priority: P2
> =A0 =A0 =A0 =A0 Component: All
> =A0 =A0 =A0 =A0AssignedTo: bugs@httpd.apache.org
> =A0 =A0 =A0 =A0ReportedBy: brunzema@dimdi.de
> =A0 =A0Classification: Unclassified
>=20
>=20
> The signing key for httpd-2.2.19.tar.gz.asc seems to have expired:
>=20
> gpg -v --verify httpd-2.2.19.tar.gz.asc
> gpg: armor header: Version: GnuPG v1.4.9 (GNU/Linux)
> gpg: assuming signed data in `httpd-2.2.19.tar.gz'
> gpg: Signature made Fri 20 May 2011 07:02:24 PM CEST using=20
> RSA key ID 7F7214A7
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0=20
> =A0 =A0 =A0 =A0^^^^^^^^
> gpg: NOTE: signature key CB9B9EC5 expired Fri 03 Jul 2009=20
> 05:21:46 PM CEST
> gpg: NOTE: signature key 7F7214A7 expired Sat 09 Jul 2011=20
> 02:54:10 AM CEST
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ^^^^^^^^^^^^
> gpg: using subkey 7F7214A7 instead of primary key B55D9977
> gpg: NOTE: signature key 7F7214A7 expired Sat 09 Jul 2011=20
> 02:54:10 AM CEST
> gpg: NOTE: signature key CB9B9EC5 expired Fri 03 Jul 2009=20
> 05:21:46 PM CEST
> gpg: NOTE: signature key 7F7214A7 expired Sat 09 Jul 2011=20
> 02:54:10 AM CEST
> gpg: using PGP trust model
> gpg: Good signature from "William A. Rowe, Jr. <wrowe@rowe-clan.net>"
> gpg: =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 aka "William A. Rowe, Jr. =
<wrowe@apache.org>"
> gpg: =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 aka "William A. Rowe, Jr. =
<wrowe@vmware.com>"
> gpg: =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 aka "William A. Rowe, Jr.=20
> <william.rowe@springsource.com>"
> gpg: NOTE: signature key CB9B9EC5 expired Fri 03 Jul 2009=20
> 05:21:46 PM CEST
> gpg: NOTE: signature key 7F7214A7 expired Sat 09 Jul 2011=20
> 02:54:10 AM CEST
> gpg: Note: This key has expired!
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Primary key fingerprint: B1B9 6F45 DFBD CCF9 7401 =A09235 193F=20
> 180A B55D 9977
> =A0 =A0 Subkey fingerprint: 4962 0827 E32B C882 DC6B =A0EF54 A348=20
> B984 7F72 14A7
> gpg: binary signature, digest algorithm SHA1
>=20
> --
> Configure bugmail:=20
> https://issues.apache.org/bugzilla/userprefs.cgi?tab=3Demail
> ------- You are receiving this mail because: -------
> You are the assignee for the bug.
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
> For additional commands, e-mail: bugs-help@httpd.apache.org
>=20
>=20
>=20
>=20
> --=20
> Eric Covener
> covener@gmail.com
>=20