[jira] [Created] (FILEUPLOAD-364) GPG artifact signing keys changed?

[Tobias Gierke (Jira)]

Tobias Gierke created FILEUPLOAD-364:
----------------------------------------

             Summary: GPG artifact signing keys changed?
                 Key: FILEUPLOAD-364
                 URL: https://issues.apache.org/jira/browse/FILEUPLOAD-364
             Project: Commons FileUpload
          Issue Type: Bug
    Affects Versions: 1.6.0
            Reporter: Tobias Gierke


Hi,

We're using the pgpverify-maven-plugin to verify artifact signatures and our 
builds started failing after upgrading to commons-fileupload 1.6.0 since the 
GPG signing key used is now different.

1.5.0 used 0xA9C5DF4D22E99998D9875A5110C01C5A2F6059E7
1.6.0 uses 0x2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB

Is this intentional ?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)