On 3/11/06, robert burrell donkin <[EMAIL PROTECTED]> wrote:
> On Sat, 2006-03-11 at 14:49 +0000, Stephen Colebourne wrote:
> > robert burrell donkin wrote:
>
> > > 3 the raw jar will need to be signed and summed before it's made
> > > available through the apache java repository.
> > I don't think we are signing yet. A sum will be needed
>
> all new jars must be signed

Yep, jars in the release jar repository need to be pgp signed (though
not jarsigner signed). Although this is mostly a consequence of the
jar repository having been placed in the dist directory (everything in
dist must be pgp signed), it's also just a good thing to be doing.

Hen

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to