[
https://issues.apache.org/jira/browse/SLING-9173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17055848#comment-17055848
] Konrad Windszus commented on SLING-9173: ---------------------------------------- [~bdelacretaz] Can you also update https://sling.apache.org/documentation/development/release-management.html#appendix-a-create-and-add-your-key-to-peopleapacheorg ? Do we need to adjust the {{check_staged_release.sh}} script to only consider the keys from the https://downloads.apache.org/sling/KEYS (https://github.com/apache/sling-tooling-release/blob/7504038064941565346dad1386a95ec1ca8ab5cd/check_staged_release.sh#L38) to make sure all relevant public keys are really entered there? > Add KEYS file to https://dist.apache.org/repos/dist/release/sling > ----------------------------------------------------------------- > > Key: SLING-9173 > URL: https://issues.apache.org/jira/browse/SLING-9173 > Project: Sling > Issue Type: Bug > Components: General > Reporter: Konrad Windszus > Priority: Major > > The link at https://sling.apache.org/downloads.cgi to > https://www.apache.org/dist/sling/KEYS is broken, because the KEYS file has > been removed in 2013 from the dist directory. > The file needs to be reestablished and > https://sling.apache.org/documentation/development/release-management.html#appendix-a-create-and-add-your-key-to-peopleapacheorg > need to be updated. > Compare with the discussion at > https://lists.apache.org/thread.html/ra6807cd9c8d7921f4441f621b43c92aa90cb0380b0190e0da1461939%40%3Cdev.sling.apache.org%3E > It is not allowed to instead just reference the file from > https://people.apache.org/keys/group/sling.asc, for a reasoning look at > https://people.apache.org/keys/ -- This message was sent by Atlassian Jira (v8.3.4#803005)
