[Issue 126352] New: Location of KEYS file

[bu...@apache.org]

https://bz.apache.org/ooo/show_bug.cgi?id=126352

          Issue ID: 126352
        Issue Type: DEFECT
           Summary: Location of KEYS file
           Product: Infrastructure
           Version: current
          Hardware: All
                OS: All
            Status: CONFIRMED
          Severity: normal
          Priority: P5
         Component: Website general issues
          Assignee: issues@openoffice.apache.org
          Reporter: sebb@apache.org

The download page

http://www.openoffice.org/download/index.html

contains a link to the KEYS file as follows:

http://people.apache.org/keys/group/openoffice.asc

However the KEYS file should always be linked from the ASF mirror master, i.e.
under

http://www.apache.org/dist/openoffice/

The KEYS file in this location must contain all keys that were ever used to
sign ASF releases. This is so that users can still check signatures for
archived releases. [Entries should only ever be added to that file].

The files under http://people.apache.org/keys/ may not always contain every
such key, as they rely on RMs maintaining the full set of keys in LDAP, and on
an RM remaining a member of the PMC.

Note that the KEYS file source can be maintained in SVN, but it should be
published via the ASF dist mirror URL.

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126352] Location of KEYS file

[bu...@apache.org]

https://bz.apache.org/ooo/show_bug.cgi?id=126352

Marcus <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|issues@openoffice.apache.or |marcus@apache.org
                   |g                           |
             Status|CONFIRMED                   |ACCEPTED

--- Comment #2 from Marcus <ma...@apache.org> ---
I've committed the change but SVN is still not fully back from restoring. I'll
wait until Sunday evening. Otherwise will ask @infra for info/help.

-- 
You are receiving this mail because:
You are the assignee for the issue.

[Issue 126352] Location of KEYS file

[bu...@apache.org]

https://bz.apache.org/ooo/show_bug.cgi?id=126352

Kay <ks...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kschenk@apache.org

--- Comment #1 from Kay <ks...@apache.org> ---
Thanks. I know at one time the Linux builds were signed separately from the
other builds, but I'm not sure why this is linked this way now. We will fix.

-- 
You are receiving this mail because:
You are the assignee for the issue.