On 19/03/2025 14:52, Roberto Resoli wrote:
Hello,

I am trying to verify GPG signatures of recent tomcat downloads, but I noted that both

Mark E D Thomas <ma...@apache.org> DCFD35E0BF8CA7344752DE8B6FB21E8933C60243

Remy Maucherat <r...@apache.org>
48F8E69F6390C9F25CFEDCD268248959359E722B

Are no more available on the https://keys.openpgp.org server I use to look on. Is anyone aware of the reason?

Both keys are still present on https://keyserver.ubuntu.com

Rob,

Let me take a look. As far as I am aware, those keys should never be removed once uploaded.

I did receive a request to verify my key from a key server (I forget which) a few weeks ago which I ignored since I hadn't recently uploaded any keys.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to