Page History

...

1. Run mvn clean verify on the project to make sure it builds cleanly.
2. Make sure you have an up to date PGP key (at least 4096-bit RSA or stronger; use of ECDSA or EdDSA keys should be in addition to the RSA keys for broader compatibility) in the Logging KEYS file along with having it mirrored in a common public PGP key repository such as Ubuntu Keyservers.
3. Configure your git config user.signingKey, user.name, and user.email values to match that key.
   1. External guide: https://docs.github.com/en/github/authenticating-to-github/managing-commit-signature-verification/telling-git-about-your-signing-key
4. Ensure you have your credentials set up in ~/.m2/settings.xml as described in Log4j 2 Release Process.
   1. TODO: insert information about using encrypted passwords.

...