cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Udo Rader (JIRA)" <>
Subject [jira] [Created] (CLOUDSTACK-9070) 4.5.x source downloads from fail gpg integrity test
Date Tue, 17 Nov 2015 17:12:10 GMT
Udo Rader created CLOUDSTACK-9070:

             Summary: 4.5.x source downloads from fail gpg integrity test
                 Key: CLOUDSTACK-9070
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Install and Setup
    Affects Versions: 4.5.2, 4.5.1
            Reporter: Udo Rader

as described in 

the currently available source downloads fail the gpg integrity check because the key used
to sign the packages is missing from

[udo@artio Downloads]$ gpg --verify apache-cloudstack-4.5.2-src.tar.bz2.asc
gpg: assuming signed data in `apache-cloudstack-4.5.2-src.tar.bz2'
gpg: Signature made Wed 19 Aug 2015 11:13:04 AM CEST using RSA key ID
gpg: Can't check signature: public key not found

applies to 4.5.1 and 4.5.2 at least. 

At least to me this makes the integrity of the source downloads dubious ...

This message was sent by Atlassian JIRA

View raw message