On Tue, Jun 23, 2020 at 5:31 PM Justin Mclean <jus...@classsoftware.com> wrote: > > Hi, > > I’ve not done a full check (which I will do) but I would be -1 on this > release as it looks like it’s been signed with an expired key: > > gpg: Good signature from "Brennan Ashton <bash...@brennanashton.com>" > [expired] > gpg: Note: This key has expired! > > It's also a good idea to sign with an “@apache.org” email address. This key is not expired and has been signed by my apache.org email address as well: https://keyserver.ubuntu.com/pks/lookup?search=0x3554D78458CEB6954B020E12E1B6E30DB05D6280&fingerprint=on&op=index This is also indicated here: https://dist.apache.org/repos/dist/release/incubator/nuttx/KEYS
--Brennan
