[
https://issues.apache.org/jira/browse/SLING-9173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17053094#comment-17053094
]
Konrad Windszus commented on SLING-9173:
----------------------------------------
This is only the PMC members, but in some cases committers were release
managers and PMCs only pushed to dist. Probably we need a script which
# Downloads all ascs and according artifacts from dist
# Verifies against the KEYs file
# For all missing public keys adds it from
https://people.apache.org/keys/group/sling.asc to the KEYS file
> Add KEYS file to https://dist.apache.org/repos/dist/release/sling
> -----------------------------------------------------------------
>
> Key: SLING-9173
> URL: https://issues.apache.org/jira/browse/SLING-9173
> Project: Sling
> Issue Type: Bug
> Components: General
> Reporter: Konrad Windszus
> Priority: Major
>
> The link at https://sling.apache.org/downloads.cgi to
> https://www.apache.org/dist/sling/KEYS is broken, because the KEYS file has
> been removed in 2013 from the dist directory.
> The file needs to be reestablished and
> https://sling.apache.org/documentation/development/release-management.html#appendix-a-create-and-add-your-key-to-peopleapacheorg
> need to be updated.
> Compare with the discussion at
> https://lists.apache.org/thread.html/ra6807cd9c8d7921f4441f621b43c92aa90cb0380b0190e0da1461939%40%3Cdev.sling.apache.org%3E
> It is not allowed to instead just reference the file from
> https://people.apache.org/keys/group/sling.asc, for a reasoning look at
> https://people.apache.org/keys/
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
