www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henk P. Penning" <he...@cs.uu.nl>
Subject Re: missing sigs in maven repo
Date Fri, 05 Sep 2008 06:14:31 GMT
On Thu, 4 Sep 2008, Donald Woods wrote:

> Date: Thu, 04 Sep 2008 21:49:57 -0400
> From: Donald Woods <dwoods@apache.org>
> To: Henk P. Penning <henkp@cs.uu.nl>
> Subject: Re: missing sigs in maven repo

Donald,

> Do you mean the .asc files?

   yes.

>                              Our Geronimo release process is to delete those 
> before publishing.

   That is strange ... the ASF requires PGP sigs for all published artifacts.
   See for instance

     http://www.apache.org/dev/release-signing.html#policy

   In the repo, 1283 out of 1339 artifacts have sigs.
   So, sigs realy should be there.

   Can you change the Geronimo release process, or see to it that is changed ?

> -Donald

   Regards,

   HPP

> Henk P. Penning wrote:
>> Donald Woods,
>>
>>   in the maven repo, you own 24 unsigned artifacts ;
>>   please supply the missing sigs ; for details, see
>>
>>     http://people.apache.org/~henkp/repo/
>>
>>   Regards,
>>
>>   Henk Penning -- apache.org infrastructure
>> 
>> ----------------------------------------------------------------   _
>> Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
>> Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
>> Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 253 2804 \_/ \_/
>> http://people.cs.uu.nl/henkp/                 M penning@cs.uu.nl  \_/
>> 
>

----------------------------------------------------------------   _
Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 253 2804 \_/ \_/
http://people.cs.uu.nl/henkp/                 M penning@cs.uu.nl  \_/

Mime
View raw message