Hi George,

On Mar 11, 2007, at 6:45 AM, George Aroush wrote:

Hi Craig,

I have been reading http://www.apache.org/dev/release-signing.html and
Googled about the public-key. What I haven't been able to figure out is how
to create the public-key

You create your private key and public key at the same time using gpg --gen-key.

To list your private key, gpg -K will give you a listing of your private key with some details of what kind of key it is.

The important part of the key is the thing following the sec 1024D/. That's your 8 digit fingerprint trailer <xxxxxxxx>.

You can upload your private key to a key server with gpg --send-keys <xxxxxxxx>.

I know how frustrating it is, but I can assure you it's needed.

Craig

, is it "gpg --export --armor > KEYS", is it "gpg
--send-key", is it "gpg --export -a "<name>" > KEYS", etc.? After when I do
this, how do I upload my public-key?  Is it 'gpg --send-key"?

I tried all those and still get the error -- so whatever is it that I am missing or did wrong, the verification is failing and I have yet to find a good description telling me how to address the error "public key not found".

Tonight, I will read through the links that you gave me; till then if
someone has a quick answer, please let me know. I have placed everything here: http://people.apache.org/~aroush/Lucene.Net-2.0-004/ -- there is a
KEYS file that I placed here.

For someone who never done this before, this is all alien and time
consuming.

Regards,

-- George Aroush


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Sunday, March 11, 2007 12:50 AM
To: general@incubator.apache.org
Cc: lucene-net-dev@incubator.apache.org
Subject: Re: svn commit: r516738 - in /incubator/lucene.net/trunk/ C#/src:
HISTORY.txt Lucene.Net/AssemblyInfo.cs

Hi George,

You should upload your public GPG key to a well-known GPG server such as http://pgp.mit.edu/. You will also need to put your key into the KEYS file
in the release directory.

Other resources you might look at include
http://www.gnupg.org/(en)/documentation/faqs.html
http://webber.dewinter.com/gnupg_howto/english/ GPGMiniHowto-3.html#ss3.1

and if all else fails, rtfm
http://www.gnupg.org/gph/en/manual.pdf

With these resources, I was able to sign packages and verify them.
One tricky part that I don't remember details of right away is the
requirement to sign your local key. You need to have your own key signed in
order to do some of the verification.

HTH,

Craig

On Mar 10, 2007, at 9:26 PM, George Aroush wrote:

Hi Erik and all,


I am about to submit this release to be voted on.  However, there is
one last issue I need to work on: PGP verification.

I spent the past few hours learning about PGP and it looks like I am
almost there.  However, I'm not able to verify the package; PGP is
telling
me:
"Can't check signature: No public key."  Anyone who can help on this
regards please let me know.

Regards,

-- George Aroush


-----Original Message-----
From: Erik Hatcher [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 10, 2007 9:45 PM
To: lucene-net-dev@incubator.apache.org
Cc: general@incubator.apache.org
Subject: Re: svn commit: r516738 - in /incubator/lucene.net/trunk/
C#/src:
HISTORY.txt Lucene.Net/AssemblyInfo.cs


On Mar 10, 2007, at 10:59 AM, [EMAIL PROTECTED] wrote:
+11Mar07:
+       - Release:  Apache Lucene.Net.2.0 build 004 "final"

George - Again I have to claim being lame on the specifics here, but
what vote passed a "final" release?  I believe you should be calling
anything at best a "release candidate" until the incubator PMC
approves a final release.
Incubator folks, any help on keeping the Lucene.Net project on the
straight and narrow path with respect to policy and expectations is
appreciated.

I'm currently the only mentor, and George Aroush is the only committer
on the project.  I'm struggling to keep up with just my home life
commitments, so quite understandably I'm struggling to mentor
Lucene.Net, a project I agreed to mentor purely out of interest in
helping the Lucene community, though I've never used the .NET platform
myself.  So I'm eager to help this project find a new mentor as I am
not up to the task at the moment. If anyone here cares for Lucene.Net
and is member or committer at Apache then please speak up and lend a
hand. We are at a point now where Lucene.Net is a sorta make or break
depending if folks step up nurture this project.

        Erik


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:[EMAIL PROTECTED] P.S. A good JDO? O, Gasp!



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:[EMAIL PROTECTED]
P.S. A good JDO? O, Gasp!

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to