On 3/11/06, robert burrell donkin <[EMAIL PROTECTED]> wrote: > On Sat, 2006-03-11 at 14:49 +0000, Stephen Colebourne wrote: > > robert burrell donkin wrote: > > > > 3 the raw jar will need to be signed and summed before it's made > > > available through the apache java repository. > > I don't think we are signing yet. A sum will be needed > > all new jars must be signed
Yep, jars in the release jar repository need to be pgp signed (though not jarsigner signed). Although this is mostly a consequence of the jar repository having been placed in the dist directory (everything in dist must be pgp signed), it's also just a good thing to be doing. Hen --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]