[
https://issues.apache.org/jira/browse/SLING-9173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17052378#comment-17052378
]
Bertrand Delacretaz commented on SLING-9173:
--------------------------------------------
For now I have re-added
https://archive.apache.org/dist/sling/KEYS
to
https://dist.apache.org/repos/dist/release/sling/KEYS
so it is now at
https://downloads.apache.org/sling/KEYS
It appeared there within 1-2 minutes, although
https://blogs.apache.org/infra/entry/more-secure-and-robust-downloads mentions
that it might take up to 15 minutes.
With this, https://www.apache.org/dist/sling/KEYS correctly redirects to that
file now - we might still want to update our website links to avoid the
redirect. I'll do that tomorrow unless someone beats me to it.
> Add KEYS file to https://dist.apache.org/repos/dist/release/sling
> -----------------------------------------------------------------
>
> Key: SLING-9173
> URL: https://issues.apache.org/jira/browse/SLING-9173
> Project: Sling
> Issue Type: Bug
> Components: General
> Reporter: Konrad Windszus
> Priority: Major
>
> The link at https://sling.apache.org/downloads.cgi to
> https://www.apache.org/dist/sling/KEYS is broken, because the KEYS file has
> been removed in 2013 from the dist directory.
> The file needs to be reestablished and
> https://sling.apache.org/documentation/development/release-management.html#appendix-a-create-and-add-your-key-to-peopleapacheorg
> need to be updated.
> Compare with the discussion at
> https://lists.apache.org/thread.html/ra6807cd9c8d7921f4441f621b43c92aa90cb0380b0190e0da1461939%40%3Cdev.sling.apache.org%3E
> It is not allowed to instead just reference the file from
> https://people.apache.org/keys/group/sling.asc, for a reasoning look at
> https://people.apache.org/keys/
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
