If you sign and add it to the KEYS file, you should be fine.
> On Nov 2, 2018, at 9:13 AM, Christopher Schultz > <ch...@christopherschultz.net> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > All, > > It looks like I'll need a PGP key used for code-signing in order to RM. > > I can create a new PGP key for myself, but it won't be in the web of > trust. Some of the folks on this list have signed my personal PGP key > in the past at various events. If I sign this new key with my existing > personal key, will the PMC accept my key for RM purposes (and sign it)? > > The following Tomcat committers have signed my personal key in the past: > > csutherl > jfclere > jim > markt > > I also have signatures from several well-known ASFers: > > bdelacretaz > kmcgrail > ke4qqq > nick > rbowen > sctemme > > Also, should I create a new subkey of my current key[1] for > signing-only, or should I create a completely new key for signing-only? > > Thanks, > - -chris > > [1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E > <https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E> > > On 11/2/18 08:59, Christopher Schultz wrote: >> All, >> >> I'd like to volunteer to RM for the 8.5.x series. >> >> At ApacheCon in Montréal, markt indicated that he would certainly >> appreciate someone taking-over the great work that he has been >> doing as RM since the very first 8.5.x release. >> >> It's going to take me some time to get to the point where I can >> competently execute the whole release cycle, update all the >> artifacts, etc., so I'm going to try to "shadow" Mark as he does >> the next few releases until I can do it myself without screwing it >> up. >> >> Is there anything written about performing a release other than >> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess >> >> That one seems to be fairly 7.0.x-specific, but probably not very >> far off from what would be required for an 8.5.x release. >> >> Thanks, -chris >> >> --------------------------------------------------------------------- >> >> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > <mailto:dev-unsubscr...@tomcat.apache.org> >> For additional commands, e-mail: dev-h...@tomcat.apache.org >> <mailto:dev-h...@tomcat.apache.org> >> > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > <https://www.enigmail.net/> > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvcTWgACgkQHPApP6U8 > pFjM2A//VQwojNUjFacPc3jiV3tvveeXVMNzW2aRFcF0Rgb68+X0hg9Sqb9kbMpQ > V2bfFXZzWp5Ztok/xSiq6lVpG8gkeDUYejEj7+v8XaqLFJph8EJUVyUveiVM/Ne0 > Gmr7DrxDXw8PQlYTEGMnNqw+Ck2YEz/GXisujS5LAQCu5pyABeUA7MhwyVUZU8np > inaQxmI3Dvkm9rCrDn2euhHuF5X3A3YHgPyxys7hAc2nGBVX+Z7FNlgmSpp0csCM > M6VatnAuG1g11ANBR8MnnEL0UCqNy8kRWvQx58qROHiF3M/Cl3yMbZZ04ZL5hCIH > O8H5OyBfGBvl5O7hI9nZxPM8Amh2yzLG02Un5yyUekSpO9MkO+m05A7q4zTE3m7y > 0HRqLRr8VBEHz3dTNgVfV3NPR/M8BjU1UY+GxwEWrtHeKhDkEsV920k+h5vQLE3u > Yteeiwf9qHCrS9qEto3wzbztBPLmKe73zOOiNTdJUcRZ3/D2FEaVAwklS/Qto5B6 > wwsikK3O0S53a3HpLG85FQtv6AjCCTb3FSXSO5Oey52IsaLXNQ+4QetHyhSJAWeQ > jcwPz9R8O57ApJH2RKb8FN/etLx4yIUyRzHTR+vbITCcskdPlnhC4vfoqW63978K > Y5PZ+djuh5w9jotO4xf7ysw59XxkEmvJuG/3TI0ubnIc5cpgDtc= > =4BcN > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > <mailto:dev-unsubscr...@tomcat.apache.org> > For additional commands, e-mail: dev-h...@tomcat.apache.org > <mailto:dev-h...@tomcat.apache.org>
