PGP signature on OpenSSL 1.1.1s

Tomas Mraz tomas at openssl.org
Thu Nov 3 07:58:56 UTC 2022


Hi,

the FAQ is misleading, we'll change it.

Thanks for the heads up,

Tomas Mraz, OpenSSL

On Wed, 2022-11-02 at 19:55 -0700, Francois Marier wrote:
> Hi,
> 
> I noticed that you signed the OpenSSL 1.1.1s but you are not actually
> listed as a member of the OMC
> (https://www.openssl.org/community/omc.html).
> 
> I was looking at the FAQ (https://www.openssl.org/docs/faq.html) 
> regarding checking the PGP signature on release tarballs and it
> states 
> that releases will be signed by an OMC member's key.
> 
> Is the OMC page out-of-date, or is the FAQ misleading?
> 
> Francois
> 

-- 
Tomáš Mráz, OpenSSL



More information about the openssl-project mailing list