Re: Subversion 1.15.0-rc3 up for testing/signing

On Tue, 14 Jul 2026 at 18:38, Branko Čibej <[email protected]> wrote:

> On 14. 7. 2026 17:21, Ivan Zhakov wrote:
>
> On Tue, 14 Jul 2026 at 18:10, Branko Čibej <[email protected]> wrote:
>
>> On 14. 7. 2026 15:33, Ivan Zhakov wrote:
>>
>> On Tue, 14 Jul 2026 at 16:24, Branko Čibej <[email protected]> wrote:
>>
>>> On 13. 7. 2026 19:34, Ivan Zhakov wrote:
>>>
>>> On Mon, 13 Jul 2026 at 14:38, Evgeny Kotkov via dev <
>>> [email protected]> wrote:
>>>
>>>> The 1.15.0-rc3 release artifacts are now available for testing/signing.
>>>> Please get the tarballs from
>>>>   https://dist.apache.org/repos/dist/dev/subversion
>>>> and add your signatures there.
>>>>
>>>> Summary:
>>>
>>>   +1 to release.
>>>
>>> Platform:
>>>
>>>   Windows 11 Version 10.0.26200.8737 (x64)
>>>
>>> Tested:
>>>
>>>   [ fsfs ] x [ file | svn | http v2] x [x64]
>>>
>>> Results:
>>>
>>>   All Tests Pass.
>>>
>>> Dependencies:
>>>
>>>   - APR 1.7.6 (compiled with 1.7.6)
>>>   - APR-Util 1.6.3 (compiled with 1.6.3)
>>>   - Expat 2.8.2 (compiled with 2.8.2)
>>>   - SQLite 3.41.2 (static)
>>>   - Utf8proc 2.1.0 (compiled with 2.1.0)
>>>   - ZLib 1.3.2 (compiled with 1.3.2)
>>>   - LZ4 1.7.5 (compiled with 1.7.5)
>>>
>>> Build tools:
>>>
>>>   MSVC v14.29-16.11 + vcxproj
>>>
>>> --
>>> Ivan Zhakov
>>>
>>>
>>> Ivan, did you forget to sign the tarballs? I didn't find your signatures.
>>>
>>>
>> I didn't sign the tarballs yet. I need to recover my key or generate new
>> one. I am working on it :)
>>
>>
>> Ah, right, oops. To recover it, all you need is a working quantum
>> computer and a couple weeks' time.
>>
> Yup. Another option is just ask NSA for their copy ;)
>
>
>> Or a supercomputer and a couple decades. To generate a new one, you need
>> 10 minutes. Good luck! :D
>>
>> I decided to go this route. But it seems I need to wait 24h wait ASF will
> fetched updated key [1]:
>
> [1]: https://people.apache.org/keys/
>
>
>
> When I generated my new signing key, I just added it to KEYS myself. Added
> the fingerprint on id.apache.org but that's it. And I left my previous
> key in KEYS since I used it to sign older releases.
>
>
I have updated fingerprint on id.apache.org, but it took 24h to get KEYS
files updated. I see that my key file on https://people.apache.org/keys/ is
updated now.

>
I have added my signatures for the subversion-1.15.0-rc3.zip tarball. I am
not sure if I should add my signature for Unix tarballs because I only
checked Windows one.

-- 
Ivan Zhakov