Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
We check file size with key ... but we allow big key from environments variable.
Even if large key are not recommended they are supported by standard gpg.
We have many keys with size 4096 - https://downloads.apache.org/maven/KEYS
Attachments
Issue Links
- links to