Hi all,

As some of you may have noticed from the delayed commit emails which
arrived earlier, we have moved to the updated release distribution process
the infra tream put in place some years back, wherby we commit to a
specific svn releases repository.

Given this, I wondered if we should look to adopt the updated process for
signing keys and get round to removing the KEYS file now as well? We could
possibly leave an otherwise empty file including a link to the new home.

I have included the original email about the centralized key management
below.

Robbie

---------- Forwarded message ----------
From: Daniel Shahaf <[email protected]>
Date: 5 May 2011 16:51
Subject: Centralized KEYS files on https://people.apache.org/
To: [email protected]


The following is now implemented:


If you login to https://id.apache.org and enter PGP key fingerprint(s),
then the corresponding keys will within a few hours be made available
under

        https://people.apache.org/keys/ ,

at URLs such as the following:

        https://people.apache.org/keys/committer/danielsh.asc (my key)
        https://people.apache.org/keys/group/httpd.asc (all httpd
committers' keys).


This arrangement is independent of the PGP fingerprints in
^/committers/info/, it does not pull fingerprints listed there.

We recommend projects transition from KEYS files to /keys/group/$pmc.asc
files managed via https://id.apache.org/.


We have pre-filled this with the keys listed on the public
http://people.apache.org pages (which are built from the information
in ^/committers/info/ in the private repository).  Some keys were not
added, you can add those manually.  You can edit or remove the listed
keys via https://id.apache.org/.


Documentation will follow on www.apache.org/dev/ later; it's basically
"enter the fingerprint or keyid in a format that 'gpg --recv-key' is
happy with".


Questions, patches, bugs, flames: to infrastructure@ (about id.a.o) or
site-dev@ (about the scripts generating the keys/ directory).


Thanks to pctony; bugs by me.

Daniel




On 6 February 2014 13:47, <[email protected]> wrote:

> Author: jross
> Date: Tue Feb  4 19:18:40 2014
> New Revision: 4291
>
> Log:
> Add the Qpid KEYS file
>
> Added:
>     release/qpid/KEYS
>
> Added: release/qpid/KEYS
>
> ==============================================================================
> --- release/qpid/KEYS (added)
>
>>  +++ release/qpid/KEYS Tue Feb  4 19:18:40
>>>>
>>>

Reply via email to