[jira] [Created] (VELOCITY-993) PGP key for Velocity artifact signature available?

Scott Cantor created VELOCITY-993:
-------------------------------------

             Summary: PGP key for Velocity artifact signature available?
                 Key: VELOCITY-993
                 URL: https://issues.apache.org/jira/browse/VELOCITY-993
             Project: Velocity
          Issue Type: Wish
    Affects Versions: 2.4.1
            Reporter: Scott Cantor


The PGP key used to sign the latest release seems to be unavailable from Apache's commiter key list (and is noted as expired/invalid, but...)

Any chance of getting a copy posted somewhere? It's Claude Brisson's key, key ID was 6F9D10E747DC79485ABB4F72B709E61252F136DD

Sorry to pester, but we verify all our supply chain via Maven extension so we'd have to re-sign it all otherwise.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)