infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brian Fox (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-18018) Failed to validate the pgp signature of .... check the logs.
Date Tue, 19 Mar 2019 20:13:00 GMT

    [ https://issues.apache.org/jira/browse/INFRA-18018?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16796479#comment-16796479
] 

Brian Fox commented on INFRA-18018:
-----------------------------------

The algorithm claims to be ECDSA but the keyserver reports as RSA4096:
pub  4096R/8F7A82C1 2019-03-04            

uid DB Tsai <dbtsai@dbtsai.com>
sig  sig3  8F7A82C1 2019-03-04 __________ __________ [selfsig]
sig  sig   65359766 2019-03-04 __________ __________ DB Tsai <dbtsai@dbtsai.com>
sig  sig   6A6BDFA0 2019-03-04 __________ __________ DB Tsai <dbtsai@dbtsai.com>

uid DB Tsai <dbtsai@apache.org>
sig  sig3  8F7A82C1 2019-03-04 __________ __________ [selfsig]
sig  sig   65359766 2019-03-04 __________ __________ DB Tsai <dbtsai@dbtsai.com>
sig  sig   6A6BDFA0 2019-03-04 __________ __________ DB Tsai <dbtsai@dbtsai.com>


Something is definitely off with your key, my suggestion is to create a new one, using RSA4096
and see how that works.

> Failed to validate the pgp signature of .... check the logs.
> ------------------------------------------------------------
>
>                 Key: INFRA-18018
>                 URL: https://issues.apache.org/jira/browse/INFRA-18018
>             Project: Infrastructure
>          Issue Type: Improvement
>          Components: Nexus
>            Reporter: DB Tsai
>            Assignee: Chris Lambertus
>            Priority: Major
>
> I am trying to create a new release of Spark 2.4.1, and I often run into "Failed to validate
the pgp signature" when I upload the artifacts to Nexus. It's intermittent, and doesn't happen
every time, but it happens very often that I need to rebuild the release many times to get
one successful upload. My key is in key server  42E5B25A8F7A82C1. Can any admin check the
log on Nexus side, and see what's going on? 
> BTW, I downloaded the jars and asc; I manually checked the signature locally, and they
all looked good. See orgapachespark-1313
> Thanks.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message