tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jim Jagielski <...@jaguNET.com>
Subject Re: Release Manager for 8.5.x
Date Fri, 02 Nov 2018 13:56:40 GMT
If you sign and add it to the KEYS file, you should be fine.

> On Nov 2, 2018, at 9:13 AM, Christopher Schultz <chris@christopherschultz.net>
wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> All,
> 
> It looks like I'll need a PGP key used for code-signing in order to RM.
> 
> I can create a new PGP key for myself, but it won't be in the web of
> trust. Some of the folks on this list have signed my personal PGP key
> in the past at various events. If I sign this new key with my existing
> personal key, will the PMC accept my key for RM purposes (and sign it)?
> 
> The following Tomcat committers have signed my personal key in the past:
> 
> csutherl
> jfclere
> jim
> markt
> 
> I also have signatures from several well-known ASFers:
> 
> bdelacretaz
> kmcgrail
> ke4qqq
> nick
> rbowen
> sctemme
> 
> Also, should I create a new subkey of my current key[1] for
> signing-only, or should I create a completely new key for signing-only?
> 
> Thanks,
> - -chris
> 
> [1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E <https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E>
> 
> On 11/2/18 08:59, Christopher Schultz wrote:
>> All,
>> 
>> I'd like to volunteer to RM for the 8.5.x series.
>> 
>> At ApacheCon in Montréal, markt indicated that he would certainly 
>> appreciate someone taking-over the great work that he has been
>> doing as RM since the very first 8.5.x release.
>> 
>> It's going to take me some time to get to the point where I can 
>> competently execute the whole release cycle, update all the
>> artifacts, etc., so I'm going to try to "shadow" Mark as he does
>> the next few releases until I can do it myself without screwing it
>> up.
>> 
>> Is there anything written about performing a release other than
>> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess
>> 
>> That one seems to be fairly 7.0.x-specific, but probably not very
>> far off from what would be required for an 8.5.x release.
>> 
>> Thanks, -chris
>> 
>> ---------------------------------------------------------------------
>> 
>> 
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <mailto:dev-unsubscribe@tomcat.apache.org>
>> For additional commands, e-mail: dev-help@tomcat.apache.org <mailto:dev-help@tomcat.apache.org>
>> 
> -----BEGIN PGP SIGNATURE-----
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ <https://www.enigmail.net/>
> 
> iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvcTWgACgkQHPApP6U8
> pFjM2A//VQwojNUjFacPc3jiV3tvveeXVMNzW2aRFcF0Rgb68+X0hg9Sqb9kbMpQ
> V2bfFXZzWp5Ztok/xSiq6lVpG8gkeDUYejEj7+v8XaqLFJph8EJUVyUveiVM/Ne0
> Gmr7DrxDXw8PQlYTEGMnNqw+Ck2YEz/GXisujS5LAQCu5pyABeUA7MhwyVUZU8np
> inaQxmI3Dvkm9rCrDn2euhHuF5X3A3YHgPyxys7hAc2nGBVX+Z7FNlgmSpp0csCM
> M6VatnAuG1g11ANBR8MnnEL0UCqNy8kRWvQx58qROHiF3M/Cl3yMbZZ04ZL5hCIH
> O8H5OyBfGBvl5O7hI9nZxPM8Amh2yzLG02Un5yyUekSpO9MkO+m05A7q4zTE3m7y
> 0HRqLRr8VBEHz3dTNgVfV3NPR/M8BjU1UY+GxwEWrtHeKhDkEsV920k+h5vQLE3u
> Yteeiwf9qHCrS9qEto3wzbztBPLmKe73zOOiNTdJUcRZ3/D2FEaVAwklS/Qto5B6
> wwsikK3O0S53a3HpLG85FQtv6AjCCTb3FSXSO5Oey52IsaLXNQ+4QetHyhSJAWeQ
> jcwPz9R8O57ApJH2RKb8FN/etLx4yIUyRzHTR+vbITCcskdPlnhC4vfoqW63978K
> Y5PZ+djuh5w9jotO4xf7ysw59XxkEmvJuG/3TI0ubnIc5cpgDtc=
> =4BcN
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org <mailto:dev-unsubscribe@tomcat.apache.org>
> For additional commands, e-mail: dev-help@tomcat.apache.org <mailto:dev-help@tomcat.apache.org>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message