alitheg commented on PR #1422: URL: https://github.com/apache/tooling-trusted-releases/pull/1422#issuecomment-5005297481
@sbp I've just pushed revocation handling to the `arm` branch if you'd like a look? I also had to change the cache key for the signature check as it was only keyed on fingerprint which was stable across the revocation, and needed to change the way we handled uploading a key that already existed - because it was a soft delete, the key was just silently restored as before when I tried to upload a revoked one. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
