[incubator/taverna] bad signatures

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

[incubator/taverna] bad signatures

Henk P. Penning-2
Hi Stian,

   please take a quick look at :

     https://checker.apache.org/projs/incubator.html

   As you can see, you have 2 bad signatures in
   www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
   your key 6e50bb68cc1699a6 expired.
   Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.

   Please fix this problem soon :

   -- remove the parent package,
   -- or change the expiration date of the subkey,
   -- or replace the signature file

   Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG

   Please seriously consider removing releases

     taverna-common-activities-2.1.0-incubating/
     taverna-language-0.15.1-incubating/
     taverna-osgi-0.2.1-incubating/
     taverna-parent-2-incubating/
     taverna-parent-3-incubating/

   ... from /dist/incubator/taverna/source ; branches that
   are not currently "under development" should be
   removed from /dist/ ; see [1].

   Please mail me ([hidden email]) if you have any questions, remarks etc.

   [1] https://www.apache.org/legal/release-policy.html

   Regards,

   Henk Penning -- apache.org infrastructure ; dist & mirrors

------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/

---------- Forwarded message ----------
Date: Fri, 9 Mar 2018 14:20:28 +0100

sigs [6e50bb68cc1699a6] [expired] incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
sigs [6e50bb68cc1699a6] [expired] incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir prod/gpg 6e50bb68cc1699a6 2> /dev/null
sha1: incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
sha1: incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
sig: incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
sig: incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
***** sums_delete 2

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [incubator/taverna] bad signatures

Stian Soiland-Reyes-2
Hi Henk,

Thanks to the bot for spotting this, I have updated expiry date for my
PGP subkey 6e50bb68cc1699a6.

As for removing "old" releases under
https://dist.apache.org/repos/dist/release/incubator/taverna/source/
all of these are referenced from
https://taverna.incubator.apache.org/download/ as they are different
modules (from different git repos) - is there a way to flag this for
the checker? I have removed taverna-parent-2 though - as -3 is
released.


On 9 March 2018 at 14:35, Henk P. Penning <[hidden email]> wrote:

> Hi Stian,
>
>   please take a quick look at :
>
>     https://checker.apache.org/projs/incubator.html
>
>   As you can see, you have 2 bad signatures in
>   www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
>   your key 6e50bb68cc1699a6 expired.
>   Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.
>
>   Please fix this problem soon :
>
>   -- remove the parent package,
>   -- or change the expiration date of the subkey,
>   -- or replace the signature file
>
>   Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG
>
>   Please seriously consider removing releases
>
>     taverna-common-activities-2.1.0-incubating/
>     taverna-language-0.15.1-incubating/
>     taverna-osgi-0.2.1-incubating/
>     taverna-parent-2-incubating/
>     taverna-parent-3-incubating/
>
>   ... from /dist/incubator/taverna/source ; branches that
>   are not currently "under development" should be
>   removed from /dist/ ; see [1].
>
>   Please mail me ([hidden email]) if you have any questions, remarks etc.
>
>   [1] https://www.apache.org/legal/release-policy.html
>
>   Regards,
>
>   Henk Penning -- apache.org infrastructure ; dist & mirrors
>
> ------------------------------------------------------------   _
> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
> http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/
>
> ---------- Forwarded message ----------
> Date: Fri, 9 Mar 2018 14:20:28 +0100
>
> sigs [6e50bb68cc1699a6] [expired]
> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
> sigs [6e50bb68cc1699a6] [expired]
> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
> GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir prod/gpg
> 6e50bb68cc1699a6 2> /dev/null
> sha1:
> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
> sha1:
> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
> sig:
> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
> sig:
> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
> ***** sums_delete 2



--
Stian Soiland-Reyes
http://orcid.org/0000-0001-9842-9718

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [incubator/taverna] bad signatures

Henk P. Penning-2
On Fri, 9 Mar 2018, Stian Soiland-Reyes wrote:

> Date: Fri, 9 Mar 2018 15:52:29 +0100
> From: Stian Soiland-Reyes <[hidden email]>
> To: Henk P. Penning <[hidden email]>
> Cc: [hidden email], [hidden email]
> Subject: Re: [incubator/taverna] bad signatures

Hi Stian,

> Thanks to the bot for spotting this, I have updated expiry date for my
> PGP subkey 6e50bb68cc1699a6.

   Excellent ; the checker refreshes expired keys (only) daily ;
   so tomorrow the checker should pickup the change.

> As for removing "old" releases under
> https://dist.apache.org/repos/dist/release/incubator/taverna/source/
> all of these are referenced from
> https://taverna.incubator.apache.org/download/ as they are different
> modules (from different git repos) - is there a way to flag this for
> the checker? I have removed taverna-parent-2 though - as -3 is
> released.

   Please remember that everything in /dist/ is automatically
   archived in : https://archive.apache.org/dist/

   So you can simply remove older stuff and refer to it
   (for instance on you download pages) with urls pointing into

     https://archive.apache.org/dist/incubator/taverna/source/

   Please mail me ([hidden email]) if you have any questions, remarks etc.

   Thanks ; groeten,

   HPP

------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/

> On 9 March 2018 at 14:35, Henk P. Penning <[hidden email]> wrote:
>> Hi Stian,
>>
>>   please take a quick look at :
>>
>>     https://checker.apache.org/projs/incubator.html
>>
>>   As you can see, you have 2 bad signatures in
>>   www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
>>   your key 6e50bb68cc1699a6 expired.
>>   Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.
>>
>>   Please fix this problem soon :
>>
>>   -- remove the parent package,
>>   -- or change the expiration date of the subkey,
>>   -- or replace the signature file
>>
>>   Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG
>>
>>   Please seriously consider removing releases
>>
>>     taverna-common-activities-2.1.0-incubating/
>>     taverna-language-0.15.1-incubating/
>>     taverna-osgi-0.2.1-incubating/
>>     taverna-parent-2-incubating/
>>     taverna-parent-3-incubating/
>>
>>   ... from /dist/incubator/taverna/source ; branches that
>>   are not currently "under development" should be
>>   removed from /dist/ ; see [1].
>>
>>   Please mail me ([hidden email]) if you have any questions, remarks etc.
>>
>>   [1] https://www.apache.org/legal/release-policy.html
>>
>>   Regards,
>>
>>   Henk Penning -- apache.org infrastructure ; dist & mirrors
>>
>> ------------------------------------------------------------   _
>> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
>> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
>> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
>> http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/
>>
>> ---------- Forwarded message ----------
>> Date: Fri, 9 Mar 2018 14:20:28 +0100
>>
>> sigs [6e50bb68cc1699a6] [expired]
>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>> sigs [6e50bb68cc1699a6] [expired]
>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>> GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir prod/gpg
>> 6e50bb68cc1699a6 2> /dev/null
>> sha1:
>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>> sha1:
>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>> sig:
>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
>> sig:
>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
>> ***** sums_delete 2
>
>
>
> --
> Stian Soiland-Reyes
> http://orcid.org/0000-0001-9842-9718
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [incubator/taverna] bad signatures

sebb-2-2
On 9 March 2018 at 15:09, Henk P. Penning <[hidden email]> wrote:

> On Fri, 9 Mar 2018, Stian Soiland-Reyes wrote:
>
>> Date: Fri, 9 Mar 2018 15:52:29 +0100
>> From: Stian Soiland-Reyes <[hidden email]>
>> To: Henk P. Penning <[hidden email]>
>> Cc: [hidden email], [hidden email]
>> Subject: Re: [incubator/taverna] bad signatures
>
>
> Hi Stian,
>
>> Thanks to the bot for spotting this, I have updated expiry date for my
>> PGP subkey 6e50bb68cc1699a6.
>
>
>   Excellent ; the checker refreshes expired keys (only) daily ;
>   so tomorrow the checker should pickup the change.
>
>> As for removing "old" releases under
>> https://dist.apache.org/repos/dist/release/incubator/taverna/source/
>> all of these are referenced from
>> https://taverna.incubator.apache.org/download/ as they are different
>> modules (from different git repos) - is there a way to flag this for
>> the checker? I have removed taverna-parent-2 though - as -3 is
>> released.
>

I think what Stian is saying is that the following are all different products:

    taverna-common-activities-2.1.0-incubating/
    taverna-language-0.15.1-incubating/
    taverna-osgi-0.2.1-incubating/
    taverna-parent-2-incubating/
    taverna-parent-3-incubating/

** apart from taverna-parent-2-incubating **


>   Please remember that everything in /dist/ is automatically
>   archived in : https://archive.apache.org/dist/
>
>   So you can simply remove older stuff and refer to it
>   (for instance on you download pages) with urls pointing into
>
>     https://archive.apache.org/dist/incubator/taverna/source/

I disagree; they are not older versions.

So they should be left on the ASF mirrors until such time as they are
superseded (c.f. taverna-parent-2-incubating)

>   Please mail me ([hidden email]) if you have any questions, remarks etc.
>
>   Thanks ; groeten,
>
>   HPP
>
>
> ------------------------------------------------------------   _
> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
> http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/
>
>> On 9 March 2018 at 14:35, Henk P. Penning <[hidden email]> wrote:
>>>
>>> Hi Stian,
>>>
>>>   please take a quick look at :
>>>
>>>     https://checker.apache.org/projs/incubator.html
>>>
>>>   As you can see, you have 2 bad signatures in
>>>   www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
>>>   your key 6e50bb68cc1699a6 expired.
>>>   Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.
>>>
>>>   Please fix this problem soon :
>>>
>>>   -- remove the parent package,
>>>   -- or change the expiration date of the subkey,
>>>   -- or replace the signature file
>>>
>>>   Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG
>>>
>>>   Please seriously consider removing releases
>>>
>>>     taverna-common-activities-2.1.0-incubating/
>>>     taverna-language-0.15.1-incubating/
>>>     taverna-osgi-0.2.1-incubating/
>>>     taverna-parent-2-incubating/
>>>     taverna-parent-3-incubating/
>>>
>>>   ... from /dist/incubator/taverna/source ; branches that
>>>   are not currently "under development" should be
>>>   removed from /dist/ ; see [1].
>>>
>>>   Please mail me ([hidden email]) if you have any questions, remarks
>>> etc.
>>>
>>>   [1] https://www.apache.org/legal/release-policy.html
>>>
>>>   Regards,
>>>
>>>   Henk Penning -- apache.org infrastructure ; dist & mirrors
>>>
>>> ------------------------------------------------------------   _
>>> Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
>>> Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
>>> Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
>>> http://www.staff.science.uu.nl/~penni101/ M [hidden email]     \_/
>>>
>>> ---------- Forwarded message ----------
>>> Date: Fri, 9 Mar 2018 14:20:28 +0100
>>>
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sigs [6e50bb68cc1699a6] [expired]
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir
>>> prod/gpg
>>> 6e50bb68cc1699a6 2> /dev/null
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>> sha1:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>> sig:
>>>
>>> incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
>>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
>>> sig:
>>>
>>> incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
>>>   EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <[hidden email]>
>>> ***** sums_delete 2
>>
>>
>>
>>
>> --
>> Stian Soiland-Reyes
>> http://orcid.org/0000-0001-9842-9718
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]