[
https://issues.apache.org/jira/browse/SLING-9173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17055824#comment-17055824
]
Bertrand Delacretaz commented on SLING-9173:
--------------------------------------------
Thank you, INFRA-19944 is fixed, I have replaced
[https://dist.apache.org/repos/dist/release/sling/KEYS] with the contents of
[https://people.apache.org/keys/group/sling.asc] , as the keys found in the
previous KEYS file are all provided by sling.asc.
That should be synced soon to [https://downloads.apache.org/sling/KEYS]
With this we have no duplicates in KEYS which contains 35 keys from sling.asc
as shown below.
If needed we can add more keys manually, to avoid having to check out the whole
dist folder with svn use:
{code}
svn co https://dist.apache.org/repos/dist/release/sling --depth empty
cd sling
svn up KEYS
# edit KEYS as needed
svn diff
svn commit -m ...
{code}
Here's the current KEYS:
{code}
curl -s https://dist.apache.org/repos/dist/release/sling/KEYS | gpg --import
gpg: key 7120565E: "Amit Gupta (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 63EFCDEF: "Andreas Schaefer (CODE SIGNING KEY) <[email protected]>"
not changed
gpg: key 9E4DCC6B: "Bertrand Delacretaz (CODE SIGNING KEY)
<[email protected]>" not changed
gpg: key 015AFC8A: "Bertrand Delacretaz <[email protected]>" not changed
gpg: key 88E59E02: "Chetan Mehrotra (CODE SIGNING KEY) <[email protected]>"
not changed
gpg: key 6428BDBA: "Christian Schneider <[email protected]>" not changed
gpg: key E41EDC7E: "Carsten Ziegeler <[email protected]>" not changed
gpg: key F2F27A06: "Carsten Ziegeler (CODE SIGNING KEY) <[email protected]>"
not changed
gpg: key F24F0D9F: "David Bosschaert (CODE SIGNING KEY) <[email protected]>"
not changed
gpg: key 4C6E4124: "Dan Klco (CODE SIGNING KEY) <[email protected]>" not changed
gpg: key 70A23041: "Andrei Dulvac (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key A0F1173A: "Eric Norman (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key F79B7715: "Felix Meschberger <[email protected]>" not changed
gpg: key 6A42B333: "Georg Henzler <[email protected]>" not changed
gpg: key 40E47E14: "Ian Boston <[email protected]>" not changed
gpg: key 883F7D33: "jason e bailey (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 77F318C8: "Julian Sedding (CODE SIGNING KEY) <[email protected]>"
not changed
gpg: key 134B145C: "Justin Edelson (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 455ECC7C: "Konrad Windszus <[email protected]>" not changed
gpg: key 441E0165: "Marius Petria <[email protected]>" not changed
gpg: key F79F6478: "Mike Mueller (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 027FA950: "Nicolas Peltier <[email protected]>" not changed
gpg: key 0E4B0826: "Oliver Lietz <[email protected]>" not changed
gpg: key 859A7237: "Karl Pauls (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 964478D3: "Radu Cotescu (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 4F63EC54: "Robert Munteanu <[email protected]>" not changed
gpg: key 48CF8630: "Simone Tripodi (simonetripodi) <[email protected]>"
not changed
gpg: key 75D78E92: "Stefan Seifert <[email protected]>" not changed
gpg: key 8CCA28D1: "Stefan Egli (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 6B6E60CF: "Stefan Egli (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 02A7966D: "Stefan Egli (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key CF8EBF5F: "Carl Hall <[email protected]>" not changed
gpg: key 44BD29BA: "tmaret <[email protected]>" not changed
gpg: key 84715909: "Tomasz Rekawek (CODE SIGNING KEY) <[email protected]>" not
changed
gpg: key 3C1E73F8: "Tommaso Teofili <[email protected]>" not changed
gpg: Total number processed: 35
gpg: unchanged: 35
{code}
> Add KEYS file to https://dist.apache.org/repos/dist/release/sling
> -----------------------------------------------------------------
>
> Key: SLING-9173
> URL: https://issues.apache.org/jira/browse/SLING-9173
> Project: Sling
> Issue Type: Bug
> Components: General
> Reporter: Konrad Windszus
> Priority: Major
>
> The link at https://sling.apache.org/downloads.cgi to
> https://www.apache.org/dist/sling/KEYS is broken, because the KEYS file has
> been removed in 2013 from the dist directory.
> The file needs to be reestablished and
> https://sling.apache.org/documentation/development/release-management.html#appendix-a-create-and-add-your-key-to-peopleapacheorg
> need to be updated.
> Compare with the discussion at
> https://lists.apache.org/thread.html/ra6807cd9c8d7921f4441f621b43c92aa90cb0380b0190e0da1461939%40%3Cdev.sling.apache.org%3E
> It is not allowed to instead just reference the file from
> https://people.apache.org/keys/group/sling.asc, for a reasoning look at
> https://people.apache.org/keys/
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
