https://bz.apache.org/bugzilla/show_bug.cgi?id=65570

--- Comment #4 from Sebb <s...@apache.org> ---
In which case, why do the per-release KEYS files contain more entries than the
per version KEYS files?

For example:

https://archive.apache.org/dist/tomcat/tomcat-9/KEYS is about 14K
whereas
https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.53/KEYS is 41K

It seems like the process is not being followed.

I have checked quite a few .asc files for the Tomcat 9 series, and it does look
like all the keys used for signing are in the parent KEYS file.

However that is not the case for Tomcat-8
I found issues with versions 8.0.39 onwards.

I've not checked any other Tomcat major versions.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to