You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "Bob (Jira)" <ji...@apache.org> on 2020/11/19 18:16:00 UTC
[jira] [Updated] (FLINK-20251) Can't import all release-signing
keys
[ https://issues.apache.org/jira/browse/FLINK-20251?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bob updated FLINK-20251:
------------------------
Description:
When i try to import the release-signing keys ([https://flink.apache.org/downloads.html#verifying-hashes-and-signatures]) with gpg it can't import all keys.
{code:java}
$ wget https://dist.apache.org/repos/dist/release/flink/KEYS
$ gpg --import KEYS
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 04D9B832: public key "Alan Gates (No comment) <ga...@yahoo-inc.com>" imported
gpg: key 0CBAAE9F: public key "Sean Owen (CODE SIGNING KEY) <sr...@apache.org>" imported
gpg: key 0410DA0C: public key "Ted Dunning (for signing Apache releases) <te...@gmail.com>" imported
gpg: key 3592721E: public key "Henry Saputra (CODE SIGNING KEY) <hs...@apache.org>" imported
gpg: key 3D0C92B9: public key "Owen O'Malley (Code signing) <om...@apache.org>" imported
gpg: key D9839159: public key "Robert Metzger (CODE SIGNING KEY) <rm...@apache.org>" imported
gpg: key 9D403309: public key "Ufuk Celebi (CODE SIGNING KEY) <uc...@apache.org>" imported
gpg: key D675A2E9: public key "Márton Balassi (CODE SIGNING KEY) <mb...@apache.org>" imported
gpg: key C2909CBF: public key "Maximilian Michels <mx...@apache.org>" imported
gpg: key 34911D5A: public key "Fabian Hueske (CODE SIGNING KEY) <fh...@apache.org>" imported
gpg: key B065B356: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
gpg: key 121D7293: public key "Aljoscha Krettek (CODE SIGNING KEY) <al...@apache.org>" imported
gpg: key 11D464BA: public key "Chesnay Schepler (CODE SIGNING KEY) <ch...@apache.org>" imported
gpg: key 35C33D6A: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
gpg: key A96CFFD5: public key "Till Rohrmann (stsffap) <tr...@apache.org>" imported
gpg: key D920A98C: public key "Thomas Weise <th...@apache.org>" imported
gpg: key 3B79EA0E: public key "jincheng Sun (jincheng) <ji...@apache.org>" imported
gpg: key F7059BA4: public key "Kurt Young <ku...@apache.org>" imported
gpg: key EFAE3202: public key "Jark Wu (CODE SIGNING KEY) <ja...@apache.org>" imported
gpg: key 57B6476C: public key "Hequn Cheng (CODE SIGNING KEY) <he...@apache.org>" imported
gpg: key 89C115E8: public key "Gary Yao <ga...@apache.org>" imported
gpg: key 771AB743: public key "Yu Li (CODE SIGNING KEY) <li...@apache.org>" imported
gpg: key BF075300: public key "Dian Fu (CODE SIGNING KEY) <di...@apache.org>" imported
gpg: key CEA00D0E: public key "Zhijiang Wang (CODE SIGNING KEY) <zh...@apache.org>" imported
mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: invalid armor header:
gpg: CRC error; 7B099A - C44677
gpg: read_block: read error: Invalid keyring
gpg: import from `KEYS' failed: Invalid keyring
gpg: Total number processed: 24
gpg: imported: 24 (RSA: 23)
gpg: no ultimately trusted keys found {code}
Could someone check the key of xtsong@apache.org please? When importing it as a single key, the import is working but there seems to be still an issue. And the KEYS files still can't be imported at once.
{code:java}
$ gpg --import xtsong.key
gpg: invalid armor header: mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: key 9DFF40967ABFC5A4: public key "Xintong Song (CODE SIGNING KEY) <xt...@apache.org>" imported
gpg: Total number processed: 1
gpg: imported: 1{code}
Thank you very much
was:
When i try to import the release-signing keys ([https://flink.apache.org/downloads.html#verifying-hashes-and-signatures]) with gpg it can't import all keys.
{code:java}
$ wget https://dist.apache.org/repos/dist/release/flink/KEYS
$ gpg --import KEYS
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 04D9B832: public key "Alan Gates (No comment) <ga...@yahoo-inc.com>" imported
gpg: key 0CBAAE9F: public key "Sean Owen (CODE SIGNING KEY) <sr...@apache.org>" imported
gpg: key 0410DA0C: public key "Ted Dunning (for signing Apache releases) <te...@gmail.com>" imported
gpg: key 3592721E: public key "Henry Saputra (CODE SIGNING KEY) <hs...@apache.org>" imported
gpg: key 3D0C92B9: public key "Owen O'Malley (Code signing) <om...@apache.org>" imported
gpg: key D9839159: public key "Robert Metzger (CODE SIGNING KEY) <rm...@apache.org>" imported
gpg: key 9D403309: public key "Ufuk Celebi (CODE SIGNING KEY) <uc...@apache.org>" imported
gpg: key D675A2E9: public key "Márton Balassi (CODE SIGNING KEY) <mb...@apache.org>" imported
gpg: key C2909CBF: public key "Maximilian Michels <mx...@apache.org>" imported
gpg: key 34911D5A: public key "Fabian Hueske (CODE SIGNING KEY) <fh...@apache.org>" imported
gpg: key B065B356: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
gpg: key 121D7293: public key "Aljoscha Krettek (CODE SIGNING KEY) <al...@apache.org>" imported
gpg: key 11D464BA: public key "Chesnay Schepler (CODE SIGNING KEY) <ch...@apache.org>" imported
gpg: key 35C33D6A: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
gpg: key A96CFFD5: public key "Till Rohrmann (stsffap) <tr...@apache.org>" imported
gpg: key D920A98C: public key "Thomas Weise <th...@apache.org>" imported
gpg: key 3B79EA0E: public key "jincheng Sun (jincheng) <ji...@apache.org>" imported
gpg: key F7059BA4: public key "Kurt Young <ku...@apache.org>" imported
gpg: key EFAE3202: public key "Jark Wu (CODE SIGNING KEY) <ja...@apache.org>" imported
gpg: key 57B6476C: public key "Hequn Cheng (CODE SIGNING KEY) <he...@apache.org>" imported
gpg: key 89C115E8: public key "Gary Yao <ga...@apache.org>" imported
gpg: key 771AB743: public key "Yu Li (CODE SIGNING KEY) <li...@apache.org>" imported
gpg: key BF075300: public key "Dian Fu (CODE SIGNING KEY) <di...@apache.org>" imported
gpg: key CEA00D0E: public key "Zhijiang Wang (CODE SIGNING KEY) <zh...@apache.org>" imported
mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: invalid armor header:
gpg: CRC error; 7B099A - C44677
gpg: read_block: read error: Invalid keyring
gpg: import from `KEYS' failed: Invalid keyring
gpg: Total number processed: 24
gpg: imported: 24 (RSA: 23)
gpg: no ultimately trusted keys found {code}
Could someone check the key of xtsong@apache.org please? When importing it as a single key, the import is working but there seems to still an issue. And the KEYS files can't be imported at once.
{code:java}
$ gpg --import xtsong.key
gpg: invalid armor header: mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: key 9DFF40967ABFC5A4: public key "Xintong Song (CODE SIGNING KEY) <xt...@apache.org>" imported
gpg: Total number processed: 1
gpg: imported: 1{code}
Thank you very much
> Can't import all release-signing keys
> -------------------------------------
>
> Key: FLINK-20251
> URL: https://issues.apache.org/jira/browse/FLINK-20251
> Project: Flink
> Issue Type: Improvement
> Environment: Tested on Centos 7 and Debian 10
> Reporter: Bob
> Priority: Major
>
> When i try to import the release-signing keys ([https://flink.apache.org/downloads.html#verifying-hashes-and-signatures]) with gpg it can't import all keys.
> {code:java}
> $ wget https://dist.apache.org/repos/dist/release/flink/KEYS
> $ gpg --import KEYS
> gpg: directory `/root/.gnupg' created
> gpg: new configuration file `/root/.gnupg/gpg.conf' created
> gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
> gpg: keyring `/root/.gnupg/secring.gpg' created
> gpg: keyring `/root/.gnupg/pubring.gpg' created
> gpg: /root/.gnupg/trustdb.gpg: trustdb created
> gpg: key 04D9B832: public key "Alan Gates (No comment) <ga...@yahoo-inc.com>" imported
> gpg: key 0CBAAE9F: public key "Sean Owen (CODE SIGNING KEY) <sr...@apache.org>" imported
> gpg: key 0410DA0C: public key "Ted Dunning (for signing Apache releases) <te...@gmail.com>" imported
> gpg: key 3592721E: public key "Henry Saputra (CODE SIGNING KEY) <hs...@apache.org>" imported
> gpg: key 3D0C92B9: public key "Owen O'Malley (Code signing) <om...@apache.org>" imported
> gpg: key D9839159: public key "Robert Metzger (CODE SIGNING KEY) <rm...@apache.org>" imported
> gpg: key 9D403309: public key "Ufuk Celebi (CODE SIGNING KEY) <uc...@apache.org>" imported
> gpg: key D675A2E9: public key "Márton Balassi (CODE SIGNING KEY) <mb...@apache.org>" imported
> gpg: key C2909CBF: public key "Maximilian Michels <mx...@apache.org>" imported
> gpg: key 34911D5A: public key "Fabian Hueske (CODE SIGNING KEY) <fh...@apache.org>" imported
> gpg: key B065B356: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
> gpg: key 121D7293: public key "Aljoscha Krettek (CODE SIGNING KEY) <al...@apache.org>" imported
> gpg: key 11D464BA: public key "Chesnay Schepler (CODE SIGNING KEY) <ch...@apache.org>" imported
> gpg: key 35C33D6A: public key "Tzu-Li Tai (CODE SIGNING KEY) <tz...@apache.org>" imported
> gpg: key A96CFFD5: public key "Till Rohrmann (stsffap) <tr...@apache.org>" imported
> gpg: key D920A98C: public key "Thomas Weise <th...@apache.org>" imported
> gpg: key 3B79EA0E: public key "jincheng Sun (jincheng) <ji...@apache.org>" imported
> gpg: key F7059BA4: public key "Kurt Young <ku...@apache.org>" imported
> gpg: key EFAE3202: public key "Jark Wu (CODE SIGNING KEY) <ja...@apache.org>" imported
> gpg: key 57B6476C: public key "Hequn Cheng (CODE SIGNING KEY) <he...@apache.org>" imported
> gpg: key 89C115E8: public key "Gary Yao <ga...@apache.org>" imported
> gpg: key 771AB743: public key "Yu Li (CODE SIGNING KEY) <li...@apache.org>" imported
> gpg: key BF075300: public key "Dian Fu (CODE SIGNING KEY) <di...@apache.org>" imported
> gpg: key CEA00D0E: public key "Zhijiang Wang (CODE SIGNING KEY) <zh...@apache.org>" imported
> mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
> gpg: invalid armor header:
> gpg: CRC error; 7B099A - C44677
> gpg: read_block: read error: Invalid keyring
> gpg: import from `KEYS' failed: Invalid keyring
> gpg: Total number processed: 24
> gpg: imported: 24 (RSA: 23)
> gpg: no ultimately trusted keys found {code}
> Could someone check the key of xtsong@apache.org please? When importing it as a single key, the import is working but there seems to be still an issue. And the KEYS files still can't be imported at once.
> {code:java}
> $ gpg --import xtsong.key
> gpg: invalid armor header: mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
> gpg: key 9DFF40967ABFC5A4: public key "Xintong Song (CODE SIGNING KEY) <xt...@apache.org>" imported
> gpg: Total number processed: 1
> gpg: imported: 1{code}
> Thank you very much
--
This message was sent by Atlassian Jira
(v8.3.4#803005)