From dev-return-104295-archive-asf-public=cust-asf.ponee.io@sling.apache.org Thu Mar 5 10:35:01 2020 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 5A5E1180667 for ; Thu, 5 Mar 2020 11:35:01 +0100 (CET) Received: (qmail 12933 invoked by uid 500); 5 Mar 2020 10:35:00 -0000 Mailing-List: contact dev-help@sling.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@sling.apache.org Delivered-To: mailing list dev@sling.apache.org Received: (qmail 12914 invoked by uid 99); 5 Mar 2020 10:35:00 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 05 Mar 2020 10:35:00 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 98AE8C055B for ; Thu, 5 Mar 2020 10:34:59 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.499 X-Spam-Level: X-Spam-Status: No, score=-0.499 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=gmx.net Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id DkmzfI5oPh7e for ; Thu, 5 Mar 2020 10:34:57 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=212.227.15.18; helo=mout.gmx.net; envelope-from=konrad_w@gmx.de; receiver= Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 61C607E12C for ; Thu, 5 Mar 2020 10:34:57 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1583404497; bh=wNZPys9k5M0WDJKSges+v4TGo18uiwMAlTF5tp3wGHk=; h=X-UI-Sender-Class:From:Subject:Date:References:To:In-Reply-To; b=baxXKDd6kJE9GjN4O/2kyd/KxJFcPrxg5QbnmnFy5lPHXAhHhE2Mqn0etCoRo16yF EJSGBc0hCYeuCG68seJ5Dfx8+B/6uw8wlLWIn28sNIBxmUSM/RSRV9ORbVSnCzSmEe Jvg6tI4duYQ6c6bp+6BifX48/YcKI9eQFV4noOKw= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.26.101] ([195.202.50.185]) by mail.gmx.com (mrgmx004 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MpUUw-1jhmgf0BEi-00pujR for ; Thu, 05 Mar 2020 11:34:57 +0100 From: Konrad Windszus Content-Type: multipart/alternative; boundary="Apple-Mail=_C0B1DC71-0731-43D9-ACE2-68EBF3B3E0DE" Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.60.0.2.5\)) Subject: Re: 404 for https://www.apache.org/dist/sling/KEYS Date: Thu, 5 Mar 2020 11:34:56 +0100 References: <927d7162-f99a-87fd-e11b-ed91afd2abaa@apache.org> <86F91285-2635-4360-8522-19FBF4A63133@gmx.de> <400c1fd3-e1b0-170b-7781-9f940e3aa8d3@apache.org> To: dev@sling.apache.org In-Reply-To: <400c1fd3-e1b0-170b-7781-9f940e3aa8d3@apache.org> Message-Id: <76804B2E-ACFE-42CE-8471-FD72CD0975C7@gmx.de> X-Mailer: Apple Mail (2.3608.60.0.2.5) X-Provags-ID: V03:K1:GGrG1QazkvueQd716N7MDlyZ1p2OqDwvpkG00TClaX03vDLhEGc m+BX/Bai7LKRP+Q5oxvO0M66W+zs5TbFZPDtnhTiKy/P/3HGXMSL1ZKloWi+f4PDt4fogZp CzkSI+Ehc5ORDiaX779LAVkYpQ1+W+GfbMNre5WOeP/Q1dtA7NKgg6Xy8HsI9ACEr7v8iRS OaDbVl7lgIbXQUFFehJuA== X-UI-Out-Filterresults: notjunk:1;V03:K0:4tSgjhVe72c=:0HwomXcmKXCn2O//yhZJ37 pOPoS4rLPQOUB5fN7TR/yAMCAMRsZV1gstbPP4txQGOAHQMGuS/5Khemg/xRqjV3bwAltHFHS sY4AGBAnY8KEO4FCHkxAIGzoLcHMwsj8JFbKSpgcs2aopQattzPzVLAfiOdY7GbjhSsZcUTu0 IZIo8L01ZYJHPD1R4Rlj2EFuO6kiZLvVbdFU+w48VxOEY3F/m3RYG8Yg84UyePTAPguru+/32 yO6bPvSmaapbp4GDmHn8PP2ZZTqSl/O7eBiTmFP7vJ8W017IK3h1DVl+Chj2XczmQEHFU+ur7 CV4NS37Km8IEYuC7A3D4YE9WdLdy7+mek6Cn+Bez3a+hii0p3YoPA0K1RhyQO/ZKukFApYQQH 4N4uQ83exSnr1ftGdQIvv6fjmxd5LMOxP4HQx4bGaib5ge79ihsTKTHt9BZtMAq1fe9r0kJRa SNDxgyhKUhKeA1muk08ZRJMdbQUqPzJ/M2TlHP8WQOkJKXt4XHb2t7+tp2rBC87/xRQZ5RN2t nJD6KlCWdoM8gdJ0+ngbzSCw92u5mVIGi2zM1bYubyKkW67qCZ2EsQfee/epvef+KkBmSMk5f VLGiSEndlYklw4ksLnQfJRQVhJ0U5Q2ORYE4e1UCpZE5dfPkBEOMrsdPmHRsNoUeN7jS4Zqwd KSPPkGBbAOTq0+fDlzr32hTbqEWYdgsDz5II13ZAnfHYJYGxqnRAenBlO8JOTvBcQLoayilpW EiDwdTx74oZL/d6dpGp4ThztMVQpyrgQ7zOPCJZhnKVPXqInJa3zTOm2iFDMYdUa6AtZk3f7t XrjTYbWKaOs3WoPAkWcrtGgXI6ReOEyP61VQrRvPaoCiSM1MXA8uQrOvq1EouKukkhKb9NFVQ VD5S3CETeKtVANL8rXxlLBtAaGc4xIyUXo3ugUZzs28o1Q4mbl6QR3rcDNzv0hxpLWhNa+Rse U+80w2i/oZc1sfxTSAaN+Mih0GvXph9Yeq5oGlQfUNpgwX2LRoeCweVibrBx9LS7Nav7815ba BUsAegWUA30yoMY+PxyccCHEc5Z9MGbAu24TXsVHRpiNhP7nRjwz9qy7vzgNFwYzRG3i0hDu1 kXsJifuO49AyA5GEygOFR6X/xlwq4+GTrj92b0N4fnm4fZiDsqq96hv0uDCxeu4vRRNZJvYZW J4uRZNZ+pUu/cxVQzup1O0RTxaX9ThCoRN9963muErQW3F4/UhrUnAE1nPvTx7v1VepkxGzfA 0d1r+9g3lC01PszHx --Apple-Mail=_C0B1DC71-0731-43D9-ACE2-68EBF3B3E0DE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Yes, but the problem is how to start, because the current = https://people.apache.org/keys/group/sling.asc = might no longer contain = public keys from people doing releases in the past. Anyway, I created https://issues.apache.org/jira/browse/SLING-9173 = to track it. We can continue the discussion in the ticket. Konrad > On 5. Mar 2020, at 11:30, Carsten Ziegeler = wrote: >=20 > I think it worked back then and I think it worked automatically = somehow without us doing anything. But my memory of that time might = already be corrupted. >=20 > Regardless, isn't the guidance now that we manage this file manually = again (reading the list at the bottom of = https://people.apache.org/keys/) ? >=20 > Regards > Carsten >=20 > On 05.03.2020 11:14, Konrad Windszus wrote: >> Do you remember how the mechanism worked that the KEYS url = https://www.apache.org/dist/sling/KEYS at = https://sling.apache.org/downloads.cgi did return something after 2013 . = Or was it broken since then? >> Konrad >>> On 5. Mar 2020, at 11:10, Carsten Ziegeler = wrote: >>>=20 >>> Long time ago..I remember that we discussed that in the project and = decided that its not needed anymore. >>>=20 >>> Here is what I think is how we ended up there: in the past we needed = to manually maintain the KEYS file, then it changed to the auto = generated files (https://people.apache.org/keys/group/sling.asc) and at = that time we decided that the auto generated file is enough and we don't = have to maintain a file manually anymore. I also think that at that time = there was a guidance to use the auto generated file. >>>=20 >>> Now, it seems that over time this guidance has changed without us = getting aware of it. >>>=20 >>> Regards >>> Carsten >>>=20 >>> On 05.03.2020 11:02, Konrad Windszus wrote: >>>> Found it via svn log -v = https://dist.apache.org/repos/dist/release/sling/ >>>> .... >>>> r2679 | cziegeler | 2013-08-05 09:26:19 +0200 (Mon, 05 Aug 2013) | = 1 line >>>> Changed paths: >>>> A /release/sling/.htaccess >>>> D /release/sling/KEYS >>>> Remove obsolete keys file >>>> .... >>>> @Carsten: Do you remember? >>>> Thanks, >>>> Konrad >>>>> On 5. Mar 2020, at 10:37, Konrad Windszus wrote: >>>>>=20 >>>>> I did that for most of the download links already = (https://github.com/apache/sling-site/commit/d9c831d79013cdcb755244908f1fb= e8026af70bb = ) >>>>>=20 >>>>> Regarding KEYS it is explicitly stated in = https://people.apache.org/keys/: >>>>> Note: the project group files are not directly suitable for use as = KEYS files for authenticating releases - i.e. they should not be linked = from download pages. >>>>>=20 >>>>> So who did ever upload manually a KEYS file to dist manually and = why did it vanish? >>>>> Also do we have any process for maintaining that KEYS file = manually? >>>>>=20 >>>>> Thanks for any information >>>>> Konrad >>>>>=20 >>>>>=20 >>>>>> On 5. Mar 2020, at 10:20, Carsten Ziegeler = wrote: >>>>>>=20 >>>>>> A mail went out to all PMCs yesterday that the dist = infrastructure changes and https://www.apache.org/dist/ gets replaced by = https://downloads.apache.org/. >>>>>>=20 >>>>>> We're asked to update all our references eventually. >>>>>>=20 >>>>>> Regards >>>>>> Carsten >>>>>>=20 >>>>>> On 05.03.2020 10:10, Bertrand Delacretaz wrote: >>>>>>> Hi, >>>>>>> On Wed, Mar 4, 2020 at 5:17 PM Konrad Windszus = wrote: >>>>>>>> ...I noticed that https://www.apache.org/dist/sling/KEYS is no = longer working.... >>>>>>> I just found out that https://www.apache.org/dist/ has moved to >>>>>>> https://downloads.apache.org/ >>>>>>> Redirects are in place, >>>>>>> = https://www.apache.org/dist/sling/adapter-annotations-1.0.0-javadoc.jar.as= c >>>>>>> for example redirects correctly. >>>>>>> I don't know why the KEYS file didn't make it, however. >>>>>>> -Bertrand >>>>>>=20 >>>>>> --=20 >>>>>> -- >>>>>> Carsten Ziegeler >>>>>> Adobe Research Switzerland >>>>>> cziegeler@apache.org >>>>>=20 >>>=20 >>> --=20 >>> -- >>> Carsten Ziegeler >>> Adobe Research Switzerland >>> cziegeler@apache.org >=20 > --=20 > -- > Carsten Ziegeler > Adobe Research Switzerland > cziegeler@apache.org --Apple-Mail=_C0B1DC71-0731-43D9-ACE2-68EBF3B3E0DE--