Just for the record: missing GPG signatures are now on the repository best, -Simo
http://people.apache.org/~simonetripodi/ http://twitter.com/simonetripodi On Thu, Feb 25, 2016 at 11:02 AM, Simone Tripodi <simonetrip...@apache.org> wrote: > Hi Jasha, > sorry for the late reply - yes, there is a missing manual step in order to > add the missing signatures, I am taking care of it right now. > > In case you are interested on helping, it is a matter of > * checking out the dist SVN repo[1]; > * getting the keys from nexus; > * adding them to the right directory in the SVN repo, then commit. > HTH! > -Simo > > [1] https://dist.apache.org/repos/dist/release/oltu > > http://people.apache.org/~simonetripodi/ > http://twitter.com/simonetripodi > > On Mon, Feb 15, 2016 at 1:00 PM, Jasha Joachimsthal <ja...@apache.org> > wrote: > >> The PGP signatures for the source releases of Apache Oltu Parent v3 [1] >> and Apache Oltu Oauth2 v1.0.1 [2] are missing. I do see the PGP signatures >> in Maven Central [3][4]. >> Is the distribution process a manual step in which we forgot to upload >> them and can we still upload these signatures? >> >> Regards, >> >> Jasha >> >> [1] https://www.apache.org/dist/oltu/org.apache.oltu.parent/ >> [2] https://www.apache.org/dist/oltu/org.apache.oltu.oauth2/ >> [3] >> https://search.maven.org/#artifactdetails|org.apache.oltu|org.apache.oltu.parent|3|pom >> [4] >> https://search.maven.org/#artifactdetails|org.apache.oltu.oauth2|org.apache.oltu.oauth2.parent|1.0.1|pom >> > >