Mailing-List: contact repository-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: repository@apache.org
Received-SPF: pass (athena.apache.org: domain of plinskey@gmail.com designates
 209.85.142.185 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=gFTE5UQCnUOzyzgBgt9Qhlu9JFPjAGZ92/fhqVtVzzPcC6p/wHTSQauW1vej/dJvBJ1CXwPlNkPaHXZL8nHByNs1NwH4ZxSrAkGTSpcfSVc2BQbFALWnnFFrCtg2nov/FjavjrtHaPLHVusxcPXzN2nelmtDX2MEHdNkE2Iwz4Q=
Message-ID: <7262f25e0802291411t25ad0beco6f0556fc7d95b8df@mail.gmail.com>
Date: Fri, 29 Feb 2008 14:11:57 -0800
From: "Patrick Linskey" <pcl@apache.org>
Sender: plinskey@gmail.com
To: "Wendy Smoak" <wsmoak@gmail.com>
Subject: Re: [repo] /www/people.apache.org/repo/m2-ibiblio-rsync-repository/
Cc: repository@apache.org
In-Reply-To: <adba96190802282053r1854000ar7faf3f3130906061@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <20080225011711.929.qmail@minotaur.apache.org>
	 <adba96190802241917x10491151j9005cb2f036867a4@mail.gmail.com>
	 <7262f25e0802241959y5868df51u4e41ba3d73b1c0b1@mail.gmail.com>
	 <adba96190802250958q17bffe33odcc7ecb49d060051@mail.gmail.com>
	 <adba96190802282053r1854000ar7faf3f3130906061@mail.gmail.com>

Hi,

I was waiting for a response from you regarding Craig Russell's
comment to repository@ in this thread. In case you aren't on
repository@, here's a copy of his comment:

On Mon, Feb 25, 2008 at 2:31 PM, Craig L Russell <Craig.Russell@sun.com> wrote:
> Hi Wendy,
>
>  The .asc, .sha1, and md5 files should never be mirrored, as this can
>  lead a user to get a corrupted version of the artifact. These files
>  must only be available from the Apache site, not e.g. from ibiblio.
>
>  What is the point of putting these files into the ibiblio rsync
>  repository then?
>
>  I might be missing some information, please correct my understanding.

Any thoughts?

-Patrick

On Thu, Feb 28, 2008 at 8:53 PM, Wendy Smoak <wsmoak@gmail.com> wrote:
> On Mon, Feb 25, 2008 at 10:58 AM, Wendy Smoak <wsmoak@gmail.com> wrote:
>  > On Sun, Feb 24, 2008 at 8:59 PM, Patrick Linskey <pcl@apache.org> wrote:
>  >
>
> >  >  I'll look into the signature stuff when I'm in the office tomorrow.
>  >  >  FWIW, I'm Just Following Instructions here; I don't know much about
>  >  >  what is required, and am just following the directions that we've used
>  >  >  for past OpenJPA release uploads.
>  >
>  >  Here's some information from the ASF site:
>  >  http://www.apache.org/dev/release-signing.html#policy
>  >
>  >  It's possible that this wasn't done for prior releases, but the
>  >  signatures are required.
>  >
>  >  If you're using Maven 2, the GPG plugin can be configured to create
>  >  the signatures for you.  If you have any questions, either repository@
>  >  or the Maven users list can help.
>
>  Hi, Patrick.  Is there any update on this?
>
>  Thanks,
>  Wendy
>


-- 
Patrick Linskey
202 669 5907