https://bz.apache.org/bugzilla/show_bug.cgi?id=65570
--- Comment #4 from Sebb <s...@apache.org> --- In which case, why do the per-release KEYS files contain more entries than the per version KEYS files? For example: https://archive.apache.org/dist/tomcat/tomcat-9/KEYS is about 14K whereas https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.53/KEYS is 41K It seems like the process is not being followed. I have checked quite a few .asc files for the Tomcat 9 series, and it does look like all the keys used for signing are in the parent KEYS file. However that is not the case for Tomcat-8 I found issues with versions 8.0.39 onwards. I've not checked any other Tomcat major versions. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org