Details
-
Task
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
I lost the password for my gpg key. No security breach, but a bit embarrassing.
I generated a new key and I'll use it to sign the Maven artifacts for 1.4.6. Can you add my pubkey (attached) to KEYS so my signature be validated against the new key?
Don't remove the old one, it was used to sign Sqoop 1.4.5 release and is still secure AFAIK.