There are a limited number of keys that are accepted by Sonatype for
pushing to central.

Unless you have got yourself an exception, that limit is 1.

Therefore on that basis we are picking the signature of that key.

If you have an exception from Sonatype then we just drop the gpg.keyname
from the Pom.xml

On Thursday, 17 January 2013, Marc Philipp wrote:

> In pom.xml:
>
> >              <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
> >          </repository>
> >      </distributionManagement>
> > +
> > +    <properties>
> > +        <jdkVersion>1.5</jdkVersion>
> > +        <project.build.sourceEncoding>ISO-8859-1</project.build.sourceEncoding>
> > +        <arguments/>
> > +        <gpg.keyname>67893CC4</gpg.keyname>
>
> Isn't the key name specific to the person who releases?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/KentBeck/junit/pull/614/files#r2685887>.
>
>