Hi George, On Mar 11, 2007, at 6:45 AM, George Aroush wrote:
Hi Craig, I have been reading http://www.apache.org/dev/release-signing.html andGoogled about the public-key. What I haven't been able to figure out is howto create the public-key
You create your private key and public key at the same time using gpg --gen-key.
To list your private key, gpg -K will give you a listing of your private key with some details of what kind of key it is.
The important part of the key is the thing following the sec 1024D/. That's your 8 digit fingerprint trailer <xxxxxxxx>.
You can upload your private key to a key server with gpg --send-keys <xxxxxxxx>.
I know how frustrating it is, but I can assure you it's needed. Craig
, is it "gpg --export --armor > KEYS", is it "gpg--send-key", is it "gpg --export -a "<name>" > KEYS", etc.? After when I dothis, how do I upload my public-key? Is it 'gpg --send-key"?I tried all those and still get the error -- so whatever is it that I am missing or did wrong, the verification is failing and I have yet to find a good description telling me how to address the error "public key not found".Tonight, I will read through the links that you gave me; till then ifsomeone has a quick answer, please let me know. I have placed everything here: http://people.apache.org/~aroush/Lucene.Net-2.0-004/ -- there is aKEYS file that I placed here. For someone who never done this before, this is all alien and time consuming. Regards, -- George Aroush -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Sunday, March 11, 2007 12:50 AM To: general@incubator.apache.org Cc: lucene-net-dev@incubator.apache.orgSubject: Re: svn commit: r516738 - in /incubator/lucene.net/trunk/ C#/src:HISTORY.txt Lucene.Net/AssemblyInfo.cs Hi George,You should upload your public GPG key to a well-known GPG server such as http://pgp.mit.edu/. You will also need to put your key into the KEYS filein the release directory. Other resources you might look at include http://www.gnupg.org/(en)/documentation/faqs.htmlhttp://webber.dewinter.com/gnupg_howto/english/ GPGMiniHowto-3.html#ss3.1and if all else fails, rtfm http://www.gnupg.org/gph/en/manual.pdf With these resources, I was able to sign packages and verify them. One tricky part that I don't remember details of right away is therequirement to sign your local key. You need to have your own key signed inorder to do some of the verification. HTH, Craig On Mar 10, 2007, at 9:26 PM, George Aroush wrote:Hi Erik and all, I am about to submit this release to be voted on. However, there is one last issue I need to work on: PGP verification. I spent the past few hours learning about PGP and it looks like I am almost there. However, I'm not able to verify the package; PGP is telling me: "Can't check signature: No public key." Anyone who can help on this regards please let me know. Regards, -- George Aroush -----Original Message----- From: Erik Hatcher [mailto:[EMAIL PROTECTED] Sent: Saturday, March 10, 2007 9:45 PM To: lucene-net-dev@incubator.apache.org Cc: general@incubator.apache.org Subject: Re: svn commit: r516738 - in /incubator/lucene.net/trunk/ C#/src: HISTORY.txt Lucene.Net/AssemblyInfo.cs On Mar 10, 2007, at 10:59 AM, [EMAIL PROTECTED] wrote:+11Mar07: + - Release: Apache Lucene.Net.2.0 build 004 "final"George - Again I have to claim being lame on the specifics here, but what vote passed a "final" release? I believe you should be calling anything at best a "release candidate" until the incubator PMC approves a final release. Incubator folks, any help on keeping the Lucene.Net project on the straight and narrow path with respect to policy and expectations is appreciated.I'm currently the only mentor, and George Aroush is the only committeron the project. I'm struggling to keep up with just my home life commitments, so quite understandably I'm struggling to mentor Lucene.Net, a project I agreed to mentor purely out of interest inhelping the Lucene community, though I've never used the .NET platformmyself. So I'm eager to help this project find a new mentor as I amnot up to the task at the moment. If anyone here cares for Lucene.Netand is member or committer at Apache then please speak up and lend ahand. We are at a point now where Lucene.Net is a sorta make or breakdepending if folks step up nurture this project. Erik --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]Craig Russell Architect, Sun Java Enterprise System http://java.sun.com/products/jdo 408 276-5638 mailto:[EMAIL PROTECTED] P.S. A good JDO? O, Gasp! --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Craig Russell Architect, Sun Java Enterprise System http://java.sun.com/products/jdo 408 276-5638 mailto:[EMAIL PROTECTED] P.S. A good JDO? O, Gasp!
smime.p7s
Description: S/MIME cryptographic signature