On 02/11/2018 13:56, Jim Jagielski wrote: > If you sign and add it to the KEYS file, you should be fine.
Indeed. Also, you signing it is sufficient for it to be included in the web of trust but I'd be happy to sign it additionally if you ping me when it is ready. Mark >> On Nov 2, 2018, at 9:13 AM, Christopher Schultz >> <ch...@christopherschultz.net> wrote: >> > All, > > It looks like I'll need a PGP key used for code-signing in order to RM. > > I can create a new PGP key for myself, but it won't be in the web of > trust. Some of the folks on this list have signed my personal PGP key > in the past at various events. If I sign this new key with my existing > personal key, will the PMC accept my key for RM purposes (and sign it)? > > The following Tomcat committers have signed my personal key in the past: > > csutherl > jfclere > jim > markt > > I also have signatures from several well-known ASFers: > > bdelacretaz > kmcgrail > ke4qqq > nick > rbowen > sctemme > > Also, should I create a new subkey of my current key[1] for > signing-only, or should I create a completely new key for signing-only? Your choice, I think. Mark > > Thanks, > -chris > > [1] https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E > <https://pgp.mit.edu/pks/lookup?op=vindex&search=0xF3AD5C94A67F707E> > > On 11/2/18 08:59, Christopher Schultz wrote: >>>> All, >>>> >>>> I'd like to volunteer to RM for the 8.5.x series. >>>> >>>> At ApacheCon in Montréal, markt indicated that he would certainly >>>> appreciate someone taking-over the great work that he has been >>>> doing as RM since the very first 8.5.x release. >>>> >>>> It's going to take me some time to get to the point where I can >>>> competently execute the whole release cycle, update all the >>>> artifacts, etc., so I'm going to try to "shadow" Mark as he does >>>> the next few releases until I can do it myself without screwing it >>>> up. >>>> >>>> Is there anything written about performing a release other than >>>> what's on this page? https://wiki.apache.org/tomcat/ReleaseProcess >>>> >>>> That one seems to be fairly 7.0.x-specific, but probably not very >>>> far off from what would be required for an 8.5.x release. >>>> >>>> Thanks, -chris >>>> >>>> --------------------------------------------------------------------- >>>> >>>> > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > <mailto:dev-unsubscr...@tomcat.apache.org> >>>> For additional commands, e-mail: dev-h...@tomcat.apache.org >>>> <mailto:dev-h...@tomcat.apache.org> >>>> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org >> <mailto:dev-unsubscr...@tomcat.apache.org> >> For additional commands, e-mail: dev-h...@tomcat.apache.org >> <mailto:dev-h...@tomcat.apache.org> > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
