|RESOLVED
--- Comment #6 from Mark Thomas ---
You don't have to understand the project's decision to use per release branch
KEYS files. The project has made the decision and it is clear from the comments
on this issue and the archives that that is a decision that the Tomc
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #5 from Sebb ---
AFAICT there are only about 15 keys that have been used to sign releases since
version 5, so I don't understand the reluctance to use a single shared file.
I don't think it is safe to delete the existing files as t
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #4 from Sebb ---
There are also issues with:
v5.5.36
v6.0.0-alpha
v6.0.0
--
You are receiving this mail because:
You are the assignee for the bug.
-
To unsubscri
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #4 from Sebb ---
In which case, why do the per-release KEYS files contain more entries than the
per version KEYS files?
For example:
https://archive.apache.org/dist/tomcat/tomcat-9/KEYS is about 14K
whereas
https
os/dist/release/tomcat/KEYS
Take a look at the release history for Tomcat. There have been many release
managers. We have decided to use separate release-based KEYS files to keep the
files more manageable. For example, it's easier to see if a key is in the file
when there aren't dozens of
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #2 from vacancies ---
Yes it is must that shared keys files must contain keys for all relevant
release while in Tomcat 9 as it is used here https://www.vacancies.ae
--
You are receiving this mail because:
You are the assignee for
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #1 from Remy Maucherat ---
The two keys that are in the KEYS for Tomcat 9.0 should be enough. Is there a
build that was not signed by one of the two keys that are in there ?
--
You are receiving this mail because:
You are the assi
https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
Bug ID: 65570
Summary: Shared KEYS files must contain keys for all relevant
release
Product: Tomcat 9
Version: unspecified
Hardware: PC
OS: Mac OS X 10.1
On 24/11/2009, William A. Rowe Jr. wrote:
> jean-frederic clere wrote:
> > Hi,
> >
> > It seems there is a bunch of KEYS file in the
> > https://svn.apache.org/repos/asf/tomcat and in the web site.
> >
> > Should we only have one of those?
>
>
> http://www.apache.org/dist/tomcat/KEYS is real
jean-frederic clere wrote:
> Hi,
>
> It seems there is a bunch of KEYS file in the
> https://svn.apache.org/repos/asf/tomcat and in the web site.
>
> Should we only have one of those?
http://www.apache.org/dist/tomcat/KEYS is really all you need or even
want to maintain.
---
Hi,
jean-frederic clere schrieb:
> On 11/23/2009 03:23 PM, jean-frederic clere wrote:
>> It seems there is a bunch of KEYS file in the
>> https://svn.apache.org/repos/asf/tomcat and in the web site.
>>
>> Should we only have one of those?
>
> The most problematic is ./tomcat-connectors/KEYS (Which
On 11/23/2009 03:23 PM, jean-frederic clere wrote:
Hi,
It seems there is a bunch of KEYS file in the
https://svn.apache.org/repos/asf/tomcat and in the web site.
Should we only have one of those?
> find . -name KEYS
./tomcat-4/KEYS
./tomcat-5/v5.5.28/KEYS
./tomcat-5/KEYS
./tomcat-5/v5.5.27/KE
Hi,
It seems there is a bunch of KEYS file in the
https://svn.apache.org/repos/asf/tomcat and in the web site.
Should we only have one of those?
Cheers
Jean-Frederic
-
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o
13 matches
Mail list logo
