[
https://issues.apache.org/jira/browse/GEODE-10632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jinwoo Hwang updated GEODE-10632:
---------------------------------
Description:
The release signing key is missing from Geode's KEYS file[1].
Apache policy requires release-signing keys to be published in the project's
KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
This key is not present in either the linked repository KEYS file or the
canonical Geode distribution KEYS file.
Importing the published KEYS file results in: gpg: Can't check signature: No
public key
was:
The release signing key is missing from Geode's KEYS file[1].
All distribution archives, the Maven artifact I checked, and the rel/v2.0.3.RC1
tag are signed.
Apache policy requires release-signing keys to be published in the project's
KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
This key is not present in either the linked repository KEYS file or the
canonical Geode distribution KEYS file.
Importing the published KEYS file results in: gpg: Can't check signature: No
public key
> The release signing key is missing from Geode's KEYS file[1].
> -------------------------------------------------------------
>
> Key: GEODE-10632
> URL: https://issues.apache.org/jira/browse/GEODE-10632
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> The release signing key is missing from Geode's KEYS file[1].
> Apache policy requires release-signing keys to be published in the project's
> KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
> Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
> This key is not present in either the linked repository KEYS file or the
> canonical Geode distribution KEYS file.
> Importing the published KEYS file results in: gpg: Can't check signature: No
> public key
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
