Nathan Hartman wrote:
On Tue, Sep 17, 2019 at 10:17 AM Julian Foad <julianf...@apache.org> wrote:The 1.13.0-rc1 release artifacts are now available for testing/signing. Please get the tarballs from https://dist.apache.org/repos/dist/dev/subversion and add your signatures there.Please bear with me and all my n00b questions... :-)
No worries...
The ASF committer keys list (https://people.apache.org/keys/committer/) is showing my key as "key not found." Not really sure what to do about that.
From some things I just tried, it looks like it might be a temporary failure of a keyserver. When I tried
gpg --recv-keys --keyserver=hkp://keyserver.ubuntu.com:11371 583F00ADF981C39F
I got "keyserver receive failed: No data" about half the times I tried, and success the other times. Another keyserver said "no data" every time.
I wouldn't worry about it, for now. Carry on.
Also, some ASF help page (that I can't seem to locate now) said I need to add my key to a KEYS file. Not sure where that is.
You should add them in https://id.apache.org ; you probably already have. AFAIK the KEYS file(s) are automatically generated from that, nowadays.
I've signed the bz2 and gz tarballs and am ready to commit my sigs; should I wait until after fixing the above issue(s)?
Don't wait. Validation against such a list is not necessary. - Julian
