avineshsachan commented on issue #16949: URL: https://github.com/apache/iceberg/issues/16949#issuecomment-4796044215
It does not seem related to GPG signing, below issue comes while signing these jars with standard java jarsigner tool utility: java.util.zip.ZipException: duplicate entry: LICENSE & Notice file in both ot these jars **Steeps to reproduce issue:** 1. download these jars https://mvnrepository.com/artifact/org.apache.iceberg/iceberg-aws-bundle/1.11.0 https://mvnrepository.com/artifact/org.apache.iceberg/iceberg-flink-runtime-2.1/1.11.0 2. try to sign jar using java jarsigner utility 2.1 generate keystore keytool -genkeypair -alias mykey -keyalg RSA -keysize 2048 -validity 365 -keystore my-keystore.jks -storepass changeit -keypass changeit -dname "CN=Test User, OU=Dev, O=MyOrg, L=City, ST=State, C=US" 2.2 sign using keystore, then error shall be shown jarsigner -keystore my-keystore.jks -storepass changeit -keypass changeit iceberg-flink-runtime-2.1-1.11.0.jar mykey jarsigner: unable to sign jar: java.util.zip.ZipException: duplicate entry: LICENSE **root cause is duplicate LICENSE and NOTICE files inside these jars** : jar -tf iceberg-flink-runtime-2.0-1.10.1.jar| grep -i License LICENSE META-INF/LICENSE META-INF/licenses/ META-INF/licenses/org.projectnessie.nessie/ META-INF/licenses/org.projectnessie.nessie/nessie-client-0.104.5/ META-INF/licenses/org.projectnessie.nessie/nessie-client-0.104.5/LICENSE META-INF/licenses/org.projectnessie.nessie/nessie-client-0.104.5/NOTICE META-INF/licenses/org.projectnessie.nessie/nessie-model-0.104.5/ META-INF/licenses/org.projectnessie.nessie/nessie-model-0.104.5/LICENSE META-INF/licenses/org.projectnessie.nessie/nessie-model-0.104.5/NOTICE META-INF/FastDoubleParser-LICENSE META-INF/thirdparty-LICENSE META-INF/LICENSE.txt org/eclipse/microprofile/openapi/annotations/info/License.class org/eclipse/microprofile/openapi/models/info/License.class LICENSE jar -tf iceberg-flink-runtime-2.0-1.10.1.jar| grep -i Notice NOTICE META-INF/NOTICE META-INF/licenses/org.projectnessie.nessie/nessie-client-0.104.5/NOTICE META-INF/licenses/org.projectnessie.nessie/nessie-model-0.104.5/NOTICE META-INF/FastDoubleParser-NOTICE NOTICE **Expectation :** duplicate LICENSE and NOTICE files should not be present in below jars so that stadard Java jarsigner utility can sign these jars : https://mvnrepository.com/artifact/org.apache.iceberg/iceberg-aws-bundle/1.11.0 https://mvnrepository.com/artifact/org.apache.iceberg/iceberg-flink-runtime-2.1/1.11.0 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
