Just one last thought... > On Aug 25, 2024, at 13:56, Craig Russell <apache....@gmail.com> wrote: > > Hi Sebb, > >> On Aug 25, 2024, at 05:36, sebbaz(Test) <sebbaz+t...@gmail.com >> <mailto:sebbaz+t...@gmail.com>> wrote: >> >> The SVN entries are intended for historic purposes to ensure we have a >> copy of the key that was used to sign the document. >> As such, they must not be deleted. > > I deleted this one because I was trying to refresh it. The key had not been > used for any other document so I believe it was safe to delete it. If I had > not deleted the key, would workbench overwrite it so the new public key would > be stored?
Perhaps workbench should only save the public key if it was successful in filing the document that was signed by that key, instead of saving it when the key is first encountered. Craig >> >> In any case, the SVN entries are not directly used for validation. >> GPG can only check a key that is in its database. > > Does GPG cache public keys to save time? I notice that the public key in > workbench now does contain the missing email address. > > Any other things to try, or do we just wait until this happens again... > > Craig > >> >> I'm not sure there is a way to refresh keys at present. >> This needs to be investigated further. >> >> On Sat, 24 Aug 2024 at 15:13, Craig Russell <apache....@gmail.com> wrote: >>> >>> I know that there is an svn command I can use to delete the public key so >>> we can file the new one. I could scour the lists for the command, but... >>> >>> svn rm >>> https://repos.apache.org/private/documents/iclas/__keys__/E22F7D9D0428D1C4B38DCA7BF6665E960DA9AF2A >>> >>>> Begin forwarded message: >>>> >>>> From: Craig Russell <apache....@gmail.com> >>>> Subject: Re: Individual Contributor License Agreement >>>> Date: August 24, 2024 at 07:09:17 PDT >>>> To: Secretary <secret...@apache.org> >>>> >>>> The original gpg public key was filed last week. I suppose that we now >>>> need to delete that key and file the new key that contains the updated >>>> email address? >>>> If so, how do we do that? >>>> >>>> Craig >>>> >>>> >>>>> On Aug 23, 2024, at 18:49, Craig Russell <apache....@gmail.com> wrote: >>>>> >>>>> The email on the form is jur...@ivoryemr.co.za >>>>> >>>>> But there is no such email in the gpg key we have on file. That key has >>>>> do...@xsinet.co.za and adme...@gmail.com . >>>>> >>>>> If you can double check we can see if there is a problem on our side. >>>>> >>>>> Warm regards, >>>>> Craig >>>>> >>>>> >>>>>> On Aug 23, 2024, at 01:19, Jurgen Doll <jur...@ivoryemr.co.za> wrote: >>>>>> >>>>>> Hi Craig >>>>>> >>>>>> I've updated my public key to include the name/email on the form and >>>>>> resigned the PDF. >>>>>> >>>>>> Thanks, regards >>>>>> Jurgen >>>>>> >>>>>> >>>>>> On Thu, 22 Aug 2024 23:46:24 +0200, Craig L Russell <c...@apache.org> >>>>>> wrote: >>>>>> >>>>>>> Dear Jurgen Doll, >>>>>>> >>>>>>> We received this document but we cannot file it as is. >>>>>>> - the public key does not match the name/email on the form >>>>>>> - the document appears to be unsigned >>>>>>> - a name typed in a script font is not a signature >>>>>>> >>>>>>> Please complete all required fields and resubmit all pages >>>>>>> to secret...@apache.org >>>>>>> https://apache.org/licenses/contributor-agreements.html#submitting >>>>>>> >>>>>>> Warm Regards, >>>>>>> >>>>>>> -- >>>>>>> Craig L Russell >>>>>>> Assistant Secretary, Apache Software Foundation >>>>>> <icla.pdf.asc><icla.pdf> >>>>> >>>>> Craig L Russell >>>>> c...@apache.org >>>>> >>>> >>>> Craig L Russell >>>> c...@apache.org >>>> >>> >>> Craig L Russell >>> c...@apache.org >>> > > Craig L Russell > c...@apache.org <mailto:c...@apache.org> Craig L Russell c...@apache.org
