https://bz.apache.org/ooo/show_bug.cgi?id=126352
Issue ID: 126352
Issue Type: DEFECT
Summary: Location of KEYS file
Product: Infrastructure
Version: current
Hardware: All
OS: All
Status: CONFIRMED
Severity: normal
Priority: P5
Component: Website general issues
Assignee: [email protected]
Reporter: [email protected]
The download page
http://www.openoffice.org/download/index.html
contains a link to the KEYS file as follows:
http://people.apache.org/keys/group/openoffice.asc
However the KEYS file should always be linked from the ASF mirror master, i.e.
under
http://www.apache.org/dist/openoffice/
The KEYS file in this location must contain all keys that were ever used to
sign ASF releases. This is so that users can still check signatures for
archived releases. [Entries should only ever be added to that file].
The files under http://people.apache.org/keys/ may not always contain every
such key, as they rely on RMs maintaining the full set of keys in LDAP, and on
an RM remaining a member of the PMC.
Note that the KEYS file source can be maintained in SVN, but it should be
published via the ASF dist mirror URL.
--
You are receiving this mail because:
You are the assignee for the issue.
