Hi Jasha, sorry for the late reply - yes, there is a missing manual step in order to add the missing signatures, I am taking care of it right now.
In case you are interested on helping, it is a matter of * checking out the dist SVN repo[1]; * getting the keys from nexus; * adding them to the right directory in the SVN repo, then commit. HTH! -Simo [1] https://dist.apache.org/repos/dist/release/oltu http://people.apache.org/~simonetripodi/ http://twitter.com/simonetripodi On Mon, Feb 15, 2016 at 1:00 PM, Jasha Joachimsthal <ja...@apache.org> wrote: > The PGP signatures for the source releases of Apache Oltu Parent v3 [1] > and Apache Oltu Oauth2 v1.0.1 [2] are missing. I do see the PGP signatures > in Maven Central [3][4]. > Is the distribution process a manual step in which we forgot to upload > them and can we still upload these signatures? > > Regards, > > Jasha > > [1] https://www.apache.org/dist/oltu/org.apache.oltu.parent/ > [2] https://www.apache.org/dist/oltu/org.apache.oltu.oauth2/ > [3] > https://search.maven.org/#artifactdetails|org.apache.oltu|org.apache.oltu.parent|3|pom > [4] > https://search.maven.org/#artifactdetails|org.apache.oltu.oauth2|org.apache.oltu.oauth2.parent|1.0.1|pom >
