tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <ma...@apache.org>
Subject Re: New 6.0.x build
Date Wed, 08 Nov 2006 12:19:47 GMT
Remy Maucherat wrote:
> Filip Hanik - Dev Lists wrote:
>> sure, where do you have them, or do you want me to run a build against
>> the tag?
> 
> The usual location at www/www.apache.org/dist/tomcat-6/v6.0.1. For the
> next build, I'll have a new key, and I'll be using gpg instead.

We should not be signing things other people have uploaded to a public
area. The signer has no way of verifying the build integrity which
defeats the whole object of signing.

Builds should be performed in a private area, signed and then uploaded.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message