Hi Konrad and Robert Thanks for the info. I added my fingerprint to my Apache ID Friday morning. Seems that it could take a few days to update, but my key is now in the list https://people.apache.org/keys/group/sling.asc
But my key is not included here https://downloads.apache.org/sling/KEYS As far the docs go. I have a two suggestions Swap step 2 with step 3. Step 2.3 says “you are DONE” but there are more steps. I think it may be important to have the public key uploaded to a key server before updating the Apache ID with the key fingerprint. Regarding Step 4. I tried updating KEYS, but don’t have access to commit changes. Is it likely that somebody has access to edit KEYS, and also needs to add their own public key? From an on-boarding perspective, I think most new committers won’t be able to edit KEYS. If it's a step that should be performed by another committer, then the docs could reflect that by indicating the role of the person in charge of step #4 Thanks Cris > On Oct 19, 2020, at 3:33 AM, Konrad Windszus <[email protected]> wrote: > > Hi Cris and Robert, > > after doing those steps you still need to manually add your key to the keys > file as outlined in https://issues.apache.org/jira/browse/SLING-9173 > <https://issues.apache.org/jira/browse/SLING-9173><https://issues.apache.org/jira/browse/SLING-9173 > <https://issues.apache.org/jira/browse/SLING-9173>>. > It is not generated automatically! > > We still need to update > https://sling.apache.org/documentation/development/release-management.html > <https://sling.apache.org/documentation/development/release-management.html> > <https://sling.apache.org/documentation/development/release-management.html > <https://sling.apache.org/documentation/development/release-management.html>> > to reflect that. > > Thanks, > Konrad > >> On 19. Oct 2020, at 09:30, Robert Munteanu <[email protected] >> <mailto:[email protected]>> wrote: >> >> Hi Cris, >> >> On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote: >>> Regarding >>> >>> >>> Konrad Windszus commented on SLING-9648: >>> ---------------------------------------- >>> Someone would need to spin a release. [~cris_rockwell] Do you want to >>> give it a try? >>> >>> >>> Sure! Haven't released to Maven Central before, so I would like to >>> try. I found a release management doc < >>> https://sling.apache.org/documentation/development/release-management.html >>>> on the Sling website. But as of now, my keys is not included in >>> the linked sling.asc file >> >> Try logging in to https://id.apache.org <https://id.apache.org/> >> <https://id.apache.org/ <https://id.apache.org/>> . You should see a form >> with a >> field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with >> the corresponding information and submit. The sling.asc file should be >> regenerated, but I'm not sure if it's immediate or needs some time. >> >> Thanks, >> Robert
