IIRC, there used to be more KEYS files... ;-) dist/geronimo/KEYS is the official location for release signing keys (should be the case for all . For tracking purposes (maybe?) we've also had a copy in svn -- geronimo/KEYS. The two files should be kept in sync. I don't really recall the exact reason why we have two... And getting out of sync, is not good...
--kevan On Sat, Aug 23, 2014 at 11:28 AM, Alan D. Cabrera <l...@toolazydogs.com> wrote: > We seem to have two locations for our KEYS file, > http://svn.apache.org/repos/asf/geronimo/KEYS and > http://www.apache.org/dist/geronimo/KEYS. > > Which one is the official one? > > > Regards, > Alan > >