I did a gpg --import KEYS.txt
just to make sure, but I am still getting gpg --verify cocoon-2.1.13-src.tar.gz.asc cocoon-2.1.13-src.tar.gz gpg: Signature made Fr 17 Jul 20:05:16 2020 CEST gpg: using RSA key F9E031E290C9797C7F4CC02576ABEF9A6CDA1E88 gpg: Can't check signature: No public key Is your key maybe missing from https://downloads.apache.org/cocoon/KEYS cheers, Torsten On Sat, Jul 18, 2020 at 7:08 AM Francesco Chicchiriccò <ilgro...@apache.org> wrote: > On 17/07/20 20:40, Cédric Damioli wrote: > > Hi, > > > > More than 7 years after the 2.1.12 release, I'm glad to propose to > release Apache Cocoon 2.1.13 ! > > > > Proposed releases artifacts are located at > https://dist.apache.org/repos/dist/dev/cocoon/ > > > > Please check the files, verify checksums, build and run samples, and > cast your votes. > > +1 > Thanks Cédric! > > Regards. > > -- > Francesco Chicchiriccò > > Tirasa - Open Source Excellence > http://www.tirasa.net/ > > Member at The Apache Software Foundation > Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail > http://home.apache.org/~ilgrosso/ > >