On 9 March 2018 at 15:09, Henk P. Penning <penn...@uu.nl> wrote:
> On Fri, 9 Mar 2018, Stian Soiland-Reyes wrote:
>
>> Date: Fri, 9 Mar 2018 15:52:29 +0100
>> From: Stian Soiland-Reyes <st...@apache.org>
>> To: Henk P. Penning <penn...@uu.nl>
>> Cc: general@incubator.apache.org, priv...@taverna.incubator.apache.org
>> Subject: Re: [incubator/taverna] bad signatures
>
>
> Hi Stian,
>
>> Thanks to the bot for spotting this, I have updated expiry date for my
>> PGP subkey 6e50bb68cc1699a6.
>
>
> Excellent ; the checker refreshes expired keys (only) daily ;
> so tomorrow the checker should pickup the change.
>
>> As for removing "old" releases under
>> https://dist.apache.org/repos/dist/release/incubator/taverna/source/
>> all of these are referenced from
>> https://taverna.incubator.apache.org/download/ as they are different
>> modules (from different git repos) - is there a way to flag this for
>> the checker? I have removed taverna-parent-2 though - as -3 is
>> released.
>
I think what Stian is saying is that the following are all different products:
taverna-common-activities-2.1.0-incubating/
taverna-language-0.15.1-incubating/
taverna-osgi-0.2.1-incubating/
taverna-parent-2-incubating/
taverna-parent-3-incubating/
** apart from taverna-parent-2-incubating **
> Please remember that everything in /dist/ is automatically
> archived in : https://archive.apache.org/dist/
>
> So you can simply remove older stuff and refer to it
> (for instance on you download pages) with urls pointing into
>
> https://archive.apache.org/dist/incubator/taverna/source/
I disagree; they are not older versions.
So they should be left on the ASF mirrors until such time as they are
superseded (c.f. taverna-parent-2-incubating)
> Please mail me (he...@apache.org) if you have any questions, remarks etc.
>
> Thanks ; groeten,
>
> HPP
>
>
> ------------------------------------------------------------ _
> Henk P. Penning, ICT-beta R Uithof MG-403 _/ \_
> Faculty of Science, Utrecht University T +31 30 253 4106 / \_/ \
> Leuvenlaan 4, 3584CE Utrecht, NL F +31 30 253 4553 \_/ \_/
> http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl \_/
>
>> On 9 March 2018 at 14:35, Henk P. Penning <penn...@uu.nl> wrote:
>>>
>>> Hi Stian,
>>>
>>> please take a quick look at :
>>>
>>> https://checker.apache.org/projs/incubator.html
>>>
>>> As you can see, you have 2 bad signatures in
>>> www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
>>> your key 6e50bb68cc1699a6 expired.
>>> Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.
>>>
>>> Please fix this problem soon :
>>>
>>> -- remove the parent package,
>>> -- or change the expiration date of the subkey,
>>> -- or replace the signature file
>>>
>>> Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG
>>>
>>> Please seriously consider removing releases
>>>
>>> taverna-common-activities-2.1.0-incubating/
>>> taverna-language-0.15.1-incubating/
>>> taverna-osgi-0.2.1-incubating/
>>> taverna-parent-2-incubating/
>>> taverna-parent-3-incubating/
>>>
>>> ... from /dist/incubator/taverna/source ; branches that
>>> are not currently "under development" should be
>>> removed from /dist/ ; see [1].
>>>
>>> Please mail me (he...@apache.org) if you have any questions, remarks
>>> etc.
>>>
>>> [1] https://www.apache.org/legal/release-policy.html
>>>
>>> Regards,
>>>
>>> Henk Penning -- apache.org infrastructure ; dist & mirrors
>>>
>>> ------------------------------------------------------------ _
>>> Henk P. Penning, ICT-beta R Uithof MG-403 _/ \_
>>> Faculty of Science, Utrecht University T +31 30 253 4106 / \_/ \
>>> Leuvenlaan 4, 3584CE Utrecht, NL F +31 30 253 4553 \_/ \_/
>>> http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl \_/
>>>
>>> ---------- Forwarded message ----------
>>> Date: Fri, 9 Mar 2018 14:20:28 +0100
>>>
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir
>>> prod/gpg
>>> 6e50bb68cc1699a6 2> /dev/null
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> sig:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <st...@apache.org>
>>> sig:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <st...@apache.org>
>>> ***** sums_delete 2
>>
>>
>>
>>
>> --
>> Stian Soiland-Reyes
>> http://orcid.org/0000-0001-9842-9718
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
>> For additional commands, e-mail: general-h...@incubator.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
