On Sun, 19 Dec 2021 at 21:53, Matt Sicker <[email protected]> wrote: > > Yes, I’ve migrated at least one relevant key for log4net into the root keys > file. As log4php is dormant, that other keys file may no longer be necessary. > I’ll clean up the remaining bits and symlink the canonical keys file instead.
KEYS files are still needed for dormant (and archived) components. Entries in KEYS files should not be dropped once they have been used to sign a release. Sebb. [I suppose if a key is revoked, it might make sense to drop the entry, but I would check this with Infra first] > -- > Matt Sicker > > > On Dec 19, 2021, at 15:46, sebb <[email protected]> wrote: > > > > The logging project currently has 3 KEYS files under > > https://dist.apache.org/repos/dist/release/logging > > > > KEYS > > log4net/KEYS > > log4php/KEYS > > > > Ideally these should be combined at the top level and redirects added. > > > > Sebb >
