https://issues.apache.org/bugzilla/show_bug.cgi?id=52124
--- Comment #6 from Mark Thomas <ma...@apache.org> --- (In reply to comment #5) > Nexus takes care of updating the metadata. > [It also checks that the sig uses a public key.] No it doesn't. It only lists the the versions deployed through Nexus rather than all the available versions. I'll raise an INFRA issue and then close this one. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org