I answered my own question: https://people.apache.org/keys/group/shiro.asc
(I still need to follow up on how frequently it's updated) On Wed, Aug 12, 2020 at 10:14 AM Brian Demers <[email protected]> wrote: > Also, I'll check with Infra if there is a _better_ way to manage a team > key file, something generated from id.apache.org > > On Wed, Aug 12, 2020 at 10:14 AM Brian Demers <[email protected]> > wrote: > >> Sorry about that, I needed to create a new (stronger) key, and I uploaded >> to a couple of public key pools and id.apache.org, but I missed >> https://downloads.apache.org/shiro/KEYS >> It's fixed now. Though, I'm guessing >> https://people.apache.org/keys/committer/bdemers is probably cached >> every few days >> >> The Apache release process for repository.apache.org uses the following >> two key servers: >> - keyserver.ubuntu.com >> - pool.sks-keyservers.net >> >> >> https://keyserver.ubuntu.com/pks/lookup?search=bdemers%40apache.org&fingerprint=on&op=index >> >> On Wed, Aug 12, 2020 at 8:06 AM Colm O hEigeartaigh <[email protected]> >> wrote: >> >>> Hi Brian, >>> >>> What gpg did you use to sign the artifacts? I've imported >>> https://downloads.apache.org/shiro/KEYS but I get the following: >>> >>> gpg --verify shiro-root-1.6.0-source-release.zip.asc >>> gpg: assuming signed data in 'shiro-root-1.6.0-source-release.zip' >>> gpg: Signature made Tue 11 Aug 2020 21:02:34 IST >>> gpg: using RSA key >>> B26B2F5E93463E91E2F93D2478A3F0D70AE5308C >>> gpg: Can't check signature: No public key >>> >>> Colm. >>> >>> On Wed, Aug 12, 2020 at 9:41 AM Tamás Cservenák <[email protected]> >>> wrote: >>> >>> > +1 >>> > >>> > On Tue, Aug 11, 2020 at 11:47 PM Brian Demers <[email protected]> >>> wrote: >>> > >>> > > This is a call to vote in favor of releasing Apache Shiro version >>> 1.6.0. >>> > > >>> > > The 5 issues solved for 1.6.0: >>> > > >>> > > >>> > > >>> > >>> https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.6.0 >>> > > >>> > > The source to be voted upon: >>> > > e2fcdf3753a9e1d37e8dbe89cd306d01f54fa712 - >>> > > https://github.com/apache/shiro/tree/shiro-root-1.6.0-release-vote1 >>> > > >>> > > Staging repo for binaries: >>> > > >>> https://repository.apache.org/content/repositories/orgapacheshiro-1030 >>> > > >>> > > Project website (just for informational purposes, not to be voted >>> upon): >>> > > http://shiro.apache.org/ >>> > > >>> > > Guide to testing staged releases: >>> > > >>> http://maven.apache.org/guides/development/guide-testing-releases.html >>> > > >>> > > Vote open for 72 hours. Please do examine the source and binaries >>> before >>> > > voting. >>> > > >>> > > [ ] +1 >>> > > [ ] +0 >>> > > [ ] -1 (please include reasoning) >>> > > >>> > >>> >>
