johnzon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Romain Manni-Bucau <rmannibu...@gmail.com>
Subject Re: [VOTE] Release Apache Johnzon 1.2.4
Date Sat, 28 Mar 2020 08:02:19 GMT
Hi Justin,

Did you import the key CF80A055A2AD28E9EFBF942A73129F58DE61ECBD [1] ?

[1] https://github.com/apache/openwebbeans/blob/master/KEYS#L143

Romain Manni-Bucau
@rmannibucau <https://twitter.com/rmannibucau> |  Blog
<https://rmannibucau.metawerx.net/> | Old Blog
<http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> |
LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book
<https://www.packtpub.com/application-development/java-ee-8-high-performance>


Le ven. 27 mars 2020 à 22:41, Justin Mclean <justin@classsoftware.com> a
écrit :

> Hi,
>
> -1 (binding)
>
> It looks like there may be an issue here, when I verify the release
> signature I get:
> gpg: Signature made Fri 27 Mar 19:14:05 2020 AEDT
> gpg:                using RSA key CF80A055A2AD28E9EFBF942A73129F58DE61ECBD
> gpg: key 73129F58DE61ECBD: new key but contains no user ID - skipped
> gpg: Total number processed: 1
> gpg:           w/o user IDs: 1
> gpg: Can't check signature: No public key
>
> Can someone else verify this?
>
> I checked:
> - hash is fine
> - signature may not be correct
> - LICENSE is fine
> - NOTICE has wrong year please fix
> - No unexpected binary files
> - A file is missing an ASF header [1]
>
> Thanks,
> Justin
>
> 1. ./getrelease.sh
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message