[
https://issues.apache.org/jira/browse/GEODE-10632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jinwoo Hwang updated GEODE-10632:
---------------------------------
Description:
The release signing key is missing from Geode's KEYS file[1].
All distribution archives, the Maven artifact I checked, and the rel/v2.0.3.RC1
tag are signed.
Apache policy requires release-signing keys to be published in the project's
KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
This key is not present in either the linked repository KEYS file or the
canonical Geode distribution KEYS file.
Importing the published KEYS file results in: gpg: Can't check signature: No
public key
was:
The release-manager-provided examples command fails.
The exact build runAll command aborts during :async:start:
deploy --jar=build/libs/async.jar
build/libs/async.jar not found.
Instead, the async JAR is generated with this literal filename:
task ':async:jar' property 'archiveBaseName'.task ':async:jar' property
'archiveExtension'
The example therefore left the locator and two servers running; I shut them
down manually after the failure.
> The release signing key is missing from Geode's KEYS file[1].
> -------------------------------------------------------------
>
> Key: GEODE-10632
> URL: https://issues.apache.org/jira/browse/GEODE-10632
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> The release signing key is missing from Geode's KEYS file[1].
> All distribution archives, the Maven artifact I checked, and the
> rel/v2.0.3.RC1 tag are signed.
> Apache policy requires release-signing keys to be published in the project's
> KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
> Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
> This key is not present in either the linked repository KEYS file or the
> canonical Geode distribution KEYS file.
> Importing the published KEYS file results in: gpg: Can't check signature: No
> public key
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
