[VOTE] [RELEASE] Apache OFBiz 17.12.01 (full version), vote #3

[Jacopo Cappellato-3]

This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
this is the first release, containing the framework, applications and all
the plugins from the 17.12 release branches.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-17.12.01.zip
* KEYS: text file with keys
* apache-ofbiz-17.12.01.zip.asc: the detached signature file
* apache-ofbiz-17.12.01.zip.sha512: checksum file

Please download the zip file, build and test OFBiz and verify the signature
and checksum (for instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:

[ +1] release as Apache OFBiz 17.12.01
[ -1] do not release

This vote will be open for 5 days.
For more details about this process please read
http://www.apache.org/foundation/voting.html

[Michael Brohl-3]

+1

~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
sha check of file: apache-ofbiz-17.12.01.zip
Using sha file: apache-ofbiz-17.12.01.zip.sha512
apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
5B8A5358 36208F4A D26DEB40
apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
5B8A5358 36208F4A D26DEB40
sha checksum OK

GPG verification output
gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID 847AF9E0
gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY)
<[hidden email]>" [ultimate]


./gradlew loadAll testIntegration

...

:testIntegration

BUILD SUCCESSFUL


Thanks,

Michael Brohl

ecomify GmbH - www.ecomify.de


Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the signature
> and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>

[Jacques Le Roux]

+1

Jacques

Le 27/02/2020 à 18:09, Michael Brohl a écrit :

> +1
>
> ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01  ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> sha check of file: apache-ofbiz-17.12.01.zip
> Using sha file: apache-ofbiz-17.12.01.zip.sha512
> apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> 5B8A5358 36208F4A D26DEB40
> apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> 5B8A5358 36208F4A D26DEB40
> sha checksum OK
>
> GPG verification output
> gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID 847AF9E0
> gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY) <[hidden email]>" [ultimate]
>
>
> ./gradlew loadAll testIntegration
>
> ...
>
> :testIntegration
>
> BUILD SUCCESSFUL
>
>
> Thanks,
>
> Michael Brohl
>
> ecomify GmbH - www.ecomify.de
>
>
> Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
>> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
>> this is the first release, containing the framework, applications and all
>> the plugins from the 17.12 release branches.
>>
>> The release files can be downloaded from here:
>> https://dist.apache.org/repos/dist/dev/ofbiz/
>>
>> and are:
>> * apache-ofbiz-17.12.01.zip
>> * KEYS: text file with keys
>> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
>> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>>
>> Please download the zip file, build and test OFBiz and verify the signature
>> and checksum (for instructions on testing the signatures see
>> http://www.apache.org/info/verification.html).
>>
>> Vote:
>>
>> [ +1] release as Apache OFBiz 17.12.01
>> [ -1] do not release
>>
>> This vote will be open for 5 days.
>> For more details about this process please read
>> http://www.apache.org/foundation/voting.html
>>
>

[Nicola Mazzoni]

+1

Il gio 27 feb 2020, 18:40 Jacques Le Roux <[hidden email]> ha
scritto:

> +1
>
> Jacques
>
> Le 27/02/2020 à 18:09, Michael Brohl a écrit :
> > +1
> >
> > ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
> ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> > sha check of file: apache-ofbiz-17.12.01.zip
> > Using sha file: apache-ofbiz-17.12.01.zip.sha512
> > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > 5B8A5358 36208F4A D26DEB40
> > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > 5B8A5358 36208F4A D26DEB40
> > sha checksum OK
> >
> > GPG verification output
> > gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID
> 847AF9E0
> > gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY) <
> [hidden email]>" [ultimate]
> >
> >
> > ./gradlew loadAll testIntegration
> >
> > ...
> >
> > :testIntegration
> >
> > BUILD SUCCESSFUL
> >
> >
> > Thanks,
> >
> > Michael Brohl
> >
> > ecomify GmbH - www.ecomify.de
> >
> >
> > Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
> >> This is the vote thread (3nd attempt) to release "Apache OFBiz
> 17.12.01":
> >> this is the first release, containing the framework, applications and
> all
> >> the plugins from the 17.12 release branches.
> >>
> >> The release files can be downloaded from here:
> >> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>
> >> and are:
> >> * apache-ofbiz-17.12.01.zip
> >> * KEYS: text file with keys
> >> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> >> * apache-ofbiz-17.12.01.zip.sha512: checksum file
> >>
> >> Please download the zip file, build and test OFBiz and verify the
> signature
> >> and checksum (for instructions on testing the signatures see
> >> http://www.apache.org/info/verification.html).
> >>
> >> Vote:
> >>
> >> [ +1] release as Apache OFBiz 17.12.01
> >> [ -1] do not release
> >>
> >> This vote will be open for 5 days.
> >> For more details about this process please read
> >> http://www.apache.org/foundation/voting.html
> >>
> >
>

[Pierre Smits-3]

-1

As this release contains software elements that will enable criminal
parties to gain access to the implemented OFBiz system of a user (a
business organisation) and impersonate valid users with the intent to bring
harm to the aforementioned business organisation through transactions
registered by the impersonated valid user..

Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
2008 (without privileges)

*Apache Trafodion <https://trafodion.apache.org>, Vice President*
*Apache Directory <https://directory.apache.org>, PMC Member*
Apache Incubator <https://incubator.apache.org>, committer
Apache Steve <https://steve.apache.org>, committer


On Thu, Feb 27, 2020 at 8:56 PM Nicola Mazzoni <[hidden email]>
wrote:

> +1
>
> Il gio 27 feb 2020, 18:40 Jacques Le Roux <[hidden email]>
> ha
> scritto:
>
> > +1
> >
> > Jacques
> >
> > Le 27/02/2020 à 18:09, Michael Brohl a écrit :
> > > +1
> > >
> > > ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
> > ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> > > sha check of file: apache-ofbiz-17.12.01.zip
> > > Using sha file: apache-ofbiz-17.12.01.zip.sha512
> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > > 5B8A5358 36208F4A D26DEB40
> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > > 5B8A5358 36208F4A D26DEB40
> > > sha checksum OK
> > >
> > > GPG verification output
> > > gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID
> > 847AF9E0
> > > gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY) <
> > [hidden email]>" [ultimate]
> > >
> > >
> > > ./gradlew loadAll testIntegration
> > >
> > > ...
> > >
> > > :testIntegration
> > >
> > > BUILD SUCCESSFUL
> > >
> > >
> > > Thanks,
> > >
> > > Michael Brohl
> > >
> > > ecomify GmbH - www.ecomify.de
> > >
> > >
> > > Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
> > >> This is the vote thread (3nd attempt) to release "Apache OFBiz
> > 17.12.01":
> > >> this is the first release, containing the framework, applications and
> > all
> > >> the plugins from the 17.12 release branches.
> > >>
> > >> The release files can be downloaded from here:
> > >> https://dist.apache.org/repos/dist/dev/ofbiz/
> > >>
> > >> and are:
> > >> * apache-ofbiz-17.12.01.zip
> > >> * KEYS: text file with keys
> > >> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> > >> * apache-ofbiz-17.12.01.zip.sha512: checksum file
> > >>
> > >> Please download the zip file, build and test OFBiz and verify the
> > signature
> > >> and checksum (for instructions on testing the signatures see
> > >> http://www.apache.org/info/verification.html).
> > >>
> > >> Vote:
> > >>
> > >> [ +1] release as Apache OFBiz 17.12.01
> > >> [ -1] do not release
> > >>
> > >> This vote will be open for 5 days.
> > >> For more details about this process please read
> > >> http://www.apache.org/foundation/voting.html
> > >>
> > >
> >
>

[Pierre Smits-3]

And/or contains elements that provide criminal parties information to
impersonate valid users.

Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
2008 (without privileges)

*Apache Trafodion <https://trafodion.apache.org>, Vice President*
*Apache Directory <https://directory.apache.org>, PMC Member*
Apache Incubator <https://incubator.apache.org>, committer
Apache Steve <https://steve.apache.org>, committer


On Fri, Feb 28, 2020 at 2:54 AM Pierre Smits <[hidden email]> wrote:

> -1
>
> As this release contains software elements that will enable criminal
> parties to gain access to the implemented OFBiz system of a user (a
> business organisation) and impersonate valid users with the intent to bring
> harm to the aforementioned business organisation through transactions
> registered by the impersonated valid user..
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
>
> *Apache Trafodion <https://trafodion.apache.org>, Vice President*
> *Apache Directory <https://directory.apache.org>, PMC Member*
> Apache Incubator <https://incubator.apache.org>, committer
> Apache Steve <https://steve.apache.org>, committer
>
>
> On Thu, Feb 27, 2020 at 8:56 PM Nicola Mazzoni <[hidden email]>
> wrote:
>
>> +1
>>
>> Il gio 27 feb 2020, 18:40 Jacques Le Roux <[hidden email]>
>> ha
>> scritto:
>>
>> > +1
>> >
>> > Jacques
>> >
>> > Le 27/02/2020 à 18:09, Michael Brohl a écrit :
>> > > +1
>> > >
>> > > ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
>> > ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
>> > > sha check of file: apache-ofbiz-17.12.01.zip
>> > > Using sha file: apache-ofbiz-17.12.01.zip.sha512
>> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51
>> 88F98E3B
>> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
>> > > 5B8A5358 36208F4A D26DEB40
>> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51
>> 88F98E3B
>> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
>> > > 5B8A5358 36208F4A D26DEB40
>> > > sha checksum OK
>> > >
>> > > GPG verification output
>> > > gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID
>> > 847AF9E0
>> > > gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY) <
>> > [hidden email]>" [ultimate]
>> > >
>> > >
>> > > ./gradlew loadAll testIntegration
>> > >
>> > > ...
>> > >
>> > > :testIntegration
>> > >
>> > > BUILD SUCCESSFUL
>> > >
>> > >
>> > > Thanks,
>> > >
>> > > Michael Brohl
>> > >
>> > > ecomify GmbH - www.ecomify.de
>> > >
>> > >
>> > > Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
>> > >> This is the vote thread (3nd attempt) to release "Apache OFBiz
>> > 17.12.01":
>> > >> this is the first release, containing the framework, applications and
>> > all
>> > >> the plugins from the 17.12 release branches.
>> > >>
>> > >> The release files can be downloaded from here:
>> > >> https://dist.apache.org/repos/dist/dev/ofbiz/
>> > >>
>> > >> and are:
>> > >> * apache-ofbiz-17.12.01.zip
>> > >> * KEYS: text file with keys
>> > >> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
>> > >> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>> > >>
>> > >> Please download the zip file, build and test OFBiz and verify the
>> > signature
>> > >> and checksum (for instructions on testing the signatures see
>> > >> http://www.apache.org/info/verification.html).
>> > >>
>> > >> Vote:
>> > >>
>> > >> [ +1] release as Apache OFBiz 17.12.01
>> > >> [ -1] do not release
>> > >>
>> > >> This vote will be open for 5 days.
>> > >> For more details about this process please read
>> > >> http://www.apache.org/foundation/voting.html
>> > >>
>> > >
>> >
>>
>

[Pawan Verma-2]

+1
--
Thanks & Regards
Pawan Verma

On Fri, Feb 28, 2020 at 7:30 AM Pierre Smits <[hidden email]> wrote:

> And/or contains elements that provide criminal parties information to
> impersonate valid users.
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
>
> *Apache Trafodion <https://trafodion.apache.org>, Vice President*
> *Apache Directory <https://directory.apache.org>, PMC Member*
> Apache Incubator <https://incubator.apache.org>, committer
> Apache Steve <https://steve.apache.org>, committer
>
>
> On Fri, Feb 28, 2020 at 2:54 AM Pierre Smits <[hidden email]>
> wrote:
>
> > -1
> >
> > As this release contains software elements that will enable criminal
> > parties to gain access to the implemented OFBiz system of a user (a
> > business organisation) and impersonate valid users with the intent to
> bring
> > harm to the aforementioned business organisation through transactions
> > registered by the impersonated valid user..
> >
> > Met vriendelijke groet,
> >
> > Pierre Smits
> > *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/>
> since
> > 2008 (without privileges)
> >
> > *Apache Trafodion <https://trafodion.apache.org>, Vice President*
> > *Apache Directory <https://directory.apache.org>, PMC Member*
> > Apache Incubator <https://incubator.apache.org>, committer
> > Apache Steve <https://steve.apache.org>, committer
> >
> >
> > On Thu, Feb 27, 2020 at 8:56 PM Nicola Mazzoni <
> [hidden email]>
> > wrote:
> >
> >> +1
> >>
> >> Il gio 27 feb 2020, 18:40 Jacques Le Roux <[hidden email]
> >
> >> ha
> >> scritto:
> >>
> >> > +1
> >> >
> >> > Jacques
> >> >
> >> > Le 27/02/2020 à 18:09, Michael Brohl a écrit :
> >> > > +1
> >> > >
> >> > > ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
> >> > ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> >> > > sha check of file: apache-ofbiz-17.12.01.zip
> >> > > Using sha file: apache-ofbiz-17.12.01.zip.sha512
> >> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51
> >> 88F98E3B
> >> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7
> 658C9A72
> >> > > 5B8A5358 36208F4A D26DEB40
> >> > > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51
> >> 88F98E3B
> >> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7
> 658C9A72
> >> > > 5B8A5358 36208F4A D26DEB40
> >> > > sha checksum OK
> >> > >
> >> > > GPG verification output
> >> > > gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID
> >> > 847AF9E0
> >> > > gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY) <
> >> > [hidden email]>" [ultimate]
> >> > >
> >> > >
> >> > > ./gradlew loadAll testIntegration
> >> > >
> >> > > ...
> >> > >
> >> > > :testIntegration
> >> > >
> >> > > BUILD SUCCESSFUL
> >> > >
> >> > >
> >> > > Thanks,
> >> > >
> >> > > Michael Brohl
> >> > >
> >> > > ecomify GmbH - www.ecomify.de
> >> > >
> >> > >
> >> > > Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
> >> > >> This is the vote thread (3nd attempt) to release "Apache OFBiz
> >> > 17.12.01":
> >> > >> this is the first release, containing the framework, applications
> and
> >> > all
> >> > >> the plugins from the 17.12 release branches.
> >> > >>
> >> > >> The release files can be downloaded from here:
> >> > >> https://dist.apache.org/repos/dist/dev/ofbiz/
> >> > >>
> >> > >> and are:
> >> > >> * apache-ofbiz-17.12.01.zip
> >> > >> * KEYS: text file with keys
> >> > >> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> >> > >> * apache-ofbiz-17.12.01.zip.sha512: checksum file
> >> > >>
> >> > >> Please download the zip file, build and test OFBiz and verify the
> >> > signature
> >> > >> and checksum (for instructions on testing the signatures see
> >> > >> http://www.apache.org/info/verification.html).
> >> > >>
> >> > >> Vote:
> >> > >>
> >> > >> [ +1] release as Apache OFBiz 17.12.01
> >> > >> [ -1] do not release
> >> > >>
> >> > >> This vote will be open for 5 days.
> >> > >> For more details about this process please read
> >> > >> http://www.apache.org/foundation/voting.html
> >> > >>
> >> > >
> >> >
> >>
> >
>

[Suraj Khurana-2]

+1

--
Best Regards,
Suraj Khurana
www.hotwax.co

On Thu, Feb 27, 2020 at 3:20 PM Jacopo Cappellato <
[hidden email]> wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the signature
> and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>

[Swapnil M Mane]

+1

Best regards,
Swapnil M Mane,
ofbiz.apache.org



On Thu, Feb 27, 2020 at 3:20 PM Jacopo Cappellato <
[hidden email]> wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the signature
> and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>

[Gil Portenseigne]

Hello Pierre,

If you are talking about impersonation feature, that is not in the 17.12
branch.

In either way, administrative tools, if we got access to it, allow what
your are saying. But there is no security issue that grant these
privilege we are aware of. If you do, please share to the security list.

I'm open to discuss about the "criminal" aspect of the impersonation
feature, but not on this thread.

Gil

On Fri, Feb 28, 2020 at 02:54:01AM +0100, Pierre Smits wrote:

> -1
>
> As this release contains software elements that will enable criminal
> parties to gain access to the implemented OFBiz system of a user (a
> business organisation) and impersonate valid users with the intent to bring
> harm to the aforementioned business organisation through transactions
> registered by the impersonated valid user..
>
> Met vriendelijke groet,
>
> Pierre Smits

[Nicolas Malin-2]

+1

All work from my part

Nicolas

On 27/02/2020 10:49, Jacopo Cappellato wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the signature
> and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>

On 27/02/2020 10:49, Jacopo Cappellato wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the signature
> and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>

[Pierre Smits-3]

I found 3 artefacts relating to the impersonation aspects.

   - CommonEvents.java
   - security.adoc
   - sy-impersonation.adoc



Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
2008 (without privileges)

*Apache Trafodion <https://trafodion.apache.org>, Vice President*
*Apache Directory <https://directory.apache.org>, PMC Member*
Apache Incubator <https://incubator.apache.org>, committer
Apache Steve <https://steve.apache.org>, committer


On Fri, Feb 28, 2020 at 9:18 AM Nicolas Malin <[hidden email]>
wrote:

> +1
>
> All work from my part
>
> Nicolas
>
> On 27/02/2020 10:49, Jacopo Cappellato wrote:
> > This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> > this is the first release, containing the framework, applications and all
> > the plugins from the 17.12 release branches.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> >
> > and are:
> > * apache-ofbiz-17.12.01.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> > * apache-ofbiz-17.12.01.zip.sha512: checksum file
> >
> > Please download the zip file, build and test OFBiz and verify the
> signature
> > and checksum (for instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> >
> > [ +1] release as Apache OFBiz 17.12.01
> > [ -1] do not release
> >
> > This vote will be open for 5 days.
> > For more details about this process please read
> > http://www.apache.org/foundation/voting.html
> >
> On 27/02/2020 10:49, Jacopo Cappellato wrote:
> > This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> > this is the first release, containing the framework, applications and all
> > the plugins from the 17.12 release branches.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> >
> > and are:
> > * apache-ofbiz-17.12.01.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> > * apache-ofbiz-17.12.01.zip.sha512: checksum file
> >
> > Please download the zip file, build and test OFBiz and verify the
> signature
> > and checksum (for instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> >
> > [ +1] release as Apache OFBiz 17.12.01
> > [ -1] do not release
> >
> > This vote will be open for 5 days.
> > For more details about this process please read
> > http://www.apache.org/foundation/voting.html
> >
>

[Gil Portenseigne]

+1

On Thu, Feb 27, 2020 at 06:09:34PM +0100, Michael Brohl wrote:

> +1
>
> ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
> ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> sha check of file: apache-ofbiz-17.12.01.zip
> Using sha file: apache-ofbiz-17.12.01.zip.sha512
> apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> 5B8A5358 36208F4A D26DEB40
> apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> 5B8A5358 36208F4A D26DEB40
> sha checksum OK
>
> GPG verification output
> gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID 847AF9E0
> gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY)
> <[hidden email]>" [ultimate]
>
>
> ./gradlew loadAll testIntegration
>
> ...
>
> :testIntegration
>
> BUILD SUCCESSFUL
>
>
> Thanks,
>
> Michael Brohl
>
> ecomify GmbH - www.ecomify.de
>
>
> Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
> > This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> > this is the first release, containing the framework, applications and all
> > the plugins from the 17.12 release branches.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> >
> > and are:
> > * apache-ofbiz-17.12.01.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> > * apache-ofbiz-17.12.01.zip.sha512: checksum file
> >
> > Please download the zip file, build and test OFBiz and verify the signature
> > and checksum (for instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> >
> > [ +1] release as Apache OFBiz 17.12.01
> > [ -1] do not release
> >
> > This vote will be open for 5 days.
> > For more details about this process please read
> > http://www.apache.org/foundation/voting.html
> >
>

[taher]

+1

On Fri, Feb 28, 2020, 12:37 PM Gil Portenseigne <[hidden email]>
wrote:

> +1
>
> On Thu, Feb 27, 2020 at 06:09:34PM +0100, Michael Brohl wrote:
> > +1
> >
> > ~/Projects/apache-ofbiz/dist-apache-ofbiz-17.12.01 
> > ../ofbiz-tools/verify-ofbiz-release.sh apache-ofbiz-17.12.01.zip
> > sha check of file: apache-ofbiz-17.12.01.zip
> > Using sha file: apache-ofbiz-17.12.01.zip.sha512
> > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > 5B8A5358 36208F4A D26DEB40
> > apache-ofbiz-17.12.01.zip: 3E92DF0F 92E71B33 0FEF2B7C FBEE2E51 88F98E3B
> > 76614824 2A40C84F 922DDB08 B0760B76 8667EAF4 E35F2939 44757CD7 658C9A72
> > 5B8A5358 36208F4A D26DEB40
> > sha checksum OK
> >
> > GPG verification output
> > gpg: Signature made Thu Feb 27 10:36:12 2020 CET using RSA key ID
> 847AF9E0
> > gpg: Good signature from "Jacopo Cappellato (CODE SIGNING KEY)
> > <[hidden email]>" [ultimate]
> >
> >
> > ./gradlew loadAll testIntegration
> >
> > ...
> >
> > :testIntegration
> >
> > BUILD SUCCESSFUL
> >
> >
> > Thanks,
> >
> > Michael Brohl
> >
> > ecomify GmbH - www.ecomify.de
> >
> >
> > Am 27.02.20 um 10:49 schrieb Jacopo Cappellato:
> > > This is the vote thread (3nd attempt) to release "Apache OFBiz
> 17.12.01":
> > > this is the first release, containing the framework, applications and
> all
> > > the plugins from the 17.12 release branches.
> > >
> > > The release files can be downloaded from here:
> > > https://dist.apache.org/repos/dist/dev/ofbiz/
> > >
> > > and are:
> > > * apache-ofbiz-17.12.01.zip
> > > * KEYS: text file with keys
> > > * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> > > * apache-ofbiz-17.12.01.zip.sha512: checksum file
> > >
> > > Please download the zip file, build and test OFBiz and verify the
> signature
> > > and checksum (for instructions on testing the signatures see
> > > http://www.apache.org/info/verification.html).
> > >
> > > Vote:
> > >
> > > [ +1] release as Apache OFBiz 17.12.01
> > > [ -1] do not release
> > >
> > > This vote will be open for 5 days.
> > > For more details about this process please read
> > > http://www.apache.org/foundation/voting.html
> > >
> >
>
>
>

[Michael Brohl-3]

There is no impersonation functionality in 17.12. The findings are
either documentation or "constants" which do not affect the functionality.

For 17.12.02 we should remove the documentation artefacts for the
impersonation feature, but IMO this is no showstopper for the 17.12.01
release.

Michael

ecomify GmbH - www.ecomify.de


Am 28.02.20 um 09:21 schrieb Pierre Smits:

> I found 3 artefacts relating to the impersonation aspects.
>
>     - CommonEvents.java
>     - security.adoc
>     - sy-impersonation.adoc
>
>
>
> Met vriendelijke groet,
>
> Pierre Smits

[adityasharma]

+1

Thanks and regards,
Aditya Sharma

On Fri, Feb 28, 2020 at 3:17 PM Michael Brohl <[hidden email]>
wrote:

> There is no impersonation functionality in 17.12. The findings are
> either documentation or "constants" which do not affect the functionality.
>
> For 17.12.02 we should remove the documentation artefacts for the
> impersonation feature, but IMO this is no showstopper for the 17.12.01
> release.
>
> Michael
>
> ecomify GmbH - www.ecomify.de
>
>
> Am 28.02.20 um 09:21 schrieb Pierre Smits:
> > I found 3 artefacts relating to the impersonation aspects.
> >
> >     - CommonEvents.java
> >     - security.adoc
> >     - sy-impersonation.adoc
> >
> >
> >
> > Met vriendelijke groet,
> >
> > Pierre Smits
>
>

[Jacopo Cappellato-3]

+1

Jacopo Cappellato


On Thu, Feb 27, 2020 at 10:49 AM Jacopo Cappellato <
[hidden email]> wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the
> signature and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>
>

[Jacopo Cappellato-3]

The vote to release Apache OFBiz 17.12.01 is successful with one negative
(i.e. -1) vote and 11 positive (i.e. +1) votes, of which 6 binding votes.

Thank you everyone for the participation. I am going to proceed with the
next steps and we will be announcing the release in a couple of days.

Best regards,

Jacopo

On Thu, Feb 27, 2020 at 10:49 AM Jacopo Cappellato <
[hidden email]> wrote:

> This is the vote thread (3nd attempt) to release "Apache OFBiz 17.12.01":
> this is the first release, containing the framework, applications and all
> the plugins from the 17.12 release branches.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.01.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.01.zip.asc: the detached signature file
> * apache-ofbiz-17.12.01.zip.sha512: checksum file
>
> Please download the zip file, build and test OFBiz and verify the
> signature and checksum (for instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.01
> [ -1] do not release
>
> This vote will be open for 5 days.
> For more details about this process please read
> http://www.apache.org/foundation/voting.html
>
>