TIL there is a more recent KEYS file here:

https://downloads.apache.org/trafficserver/KEYS


Sent with Proton Mail secure email.

On Tuesday, November 12th, 2024 at 4:57 PM, Jered Floyd <je...@convivian.com> 
wrote:

> I'm not able to verify the signature against the provided KEYS file; does a 
> key need to be added?
> 
> $ /usr/lib/rpm/redhat/gpgverify 
> --keyring=/home/jered/fedora-scm/trafficserver/KEYS 
> --signature=/home/jered/fedora-scm/trafficserver/trafficserver-9.2.6.tar.bz2.asc
>  --data=/home/jered/fedora-scm/trafficserver/trafficserver-9.2.6.tar.bz2
> gpgv: Signature made Tue 12 Nov 2024 07:03:29 PM UTC
> gpgv: using RSA key 73144AA83B10A97B04C1E98315AD62E940104E96
> gpgv: Can't check signature: No public key
> gpgverify: Signature verification failed.
> 
> --Jered
> 
> ----- On Nov 12, 2024, at 3:31 PM, Evan Zelkowitz e...@apache.org wrote:
> 
> > I've prepared a release for 9.2.6. The release notes are available at:
> 
> > [ https://github.com/apache/trafficserver/milestone/77 |
> > https://github.com/apache/trafficserver/milestone/77 ]
> > [
> > https://docs.trafficserver.apache.org/en/latest/release-notes/upgrading.en.html
> > |
> > https://docs.trafficserver.apache.org/en/latest/release-notes/upgrading.en.html
> > ]
> 
> > or for a brief ChangeLog:
> 
> > [ https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.6 |
> > https://github.com/apache/trafficserver/blob/9.2.x/CHANGELOG-9.2.6 ]
> 
> > The artifacts are available for download at:
> 
> > [ https://dist.apache.org/repos/dist/dev/trafficserver/9.2.6/ |
> > https://dist.apache.org/repos/dist/dev/trafficserver/9.2.6/ ]
> 
> > SHA512 checksum:
> 
> > de5666847616db699d81ee32450adbbd5e5ccf3e6ca16ec679e432e3f8c7d7095bcb9e688c6ea759b7a4a57fc2db6af5bda9df94710245c320686107a159b204
> 
> > This corresponds to git refs:
> 
> > Hash: de3e58726f6f58a95266a41eaa31ff3c6fc14336
> > Tag: 9.2.6-rc0
> 
> > Which can be verified with the following command:
> 
> > $ git tag -v 9.2.6-rc0
> 
> > All code signing keys are available here:
> 
> > [ https://dist.apache.org/repos/dist/dev/trafficserver/KEYS |
> > https://dist.apache.org/repos/dist/dev/trafficserver/KEYS ]
> 
> > Make sure you refresh from a key server to get all relevant signatures
> 
> > Please test and cast your votes as early as possible.

Reply via email to