On 13/06/12 10:06, Ian Dickinson wrote:
Attempting to check the GPG signature on a machine that I hadn't
previously installed gnupg onto, I realise that I don't know where to
get the project's public keys from. According to [1], we should publish
a KEYS file on the web site somewhere, but as far as I know we don't.
Ian
[1] http://apache.org/dev/release-signing#public-key-not-found
When we have releases distributed, they go in the dist area, so as-was
http://www.apache.org/dist/incubator/jena/KEYS
and proto-dist:
http://people.apache.org/~andy/Jena-2.7.1/dist/KEYS
The master copy is in SVN:
https://svn.apache.org/repos/asf/jena/dist/KEYS
(all- if you have not added your key to that file, please do so)
Andy
