incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Thilo Goetz <twgo...@gmx.de>
Subject Re: AW: [VOTE] apache-empire-db-2.0.3-incubating and apache-empire-struts2-ext-1.0.3-incubating release
Date Mon, 08 Sep 2008 14:10:07 GMT
Jörg Reiher wrote:
> Hello, 
> I've got the following questions regarding the KEYS file and the md5+sha hashes for a
release:
> 
> There is actually a KEYS file located at http://people.apache.org/~reiher/Empire-db-incubating/KEYS
> Is there something wrong with it or do we have to put it in any other place?
> 
> I used gpg to generate the MD5 and SHA hashes. The output of gpg differs from what would
be produced by md5sum, because gpg formats the values with blanks between each HEX-String,
md5sum doesn't.
> Is this a problem? If so, the Apache guideline should take this into account (http://www.apache.org/dev/release-signing.html#md5)

It can be a problem, see http://www.mail-archive.com/general@incubator.apache.org/msg16141.html
And yes, the release signing FAQ should be updated to reflect this.

--Thilo

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message