[jira] [Updated] (GEODE-10632) The release signing key is missing from Geode's KEYS file[1].

["Jinwoo Hwang (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/GEODE-10632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jinwoo Hwang updated GEODE-10632:
---------------------------------
    Description: 
The release signing key is missing from Geode's KEYS file[1].

All distribution archives, the Maven artifact I checked, and the rel/v2.0.3.RC1 tag are signed.

 Apache policy requires release-signing keys to be published in the project's KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
Geode's published KEYS file: https://downloads.apache.org/geode/KEYS

This key is not present in either the linked repository KEYS file or the canonical Geode distribution KEYS file. 
Importing the published KEYS file results in: gpg: Can't check signature: No public key

  was:
The release-manager-provided examples command fails.

The exact build runAll command aborts during :async:start:

deploy --jar=build/libs/async.jar
build/libs/async.jar not found.

Instead, the async JAR is generated with this literal filename:
task ':async:jar' property 'archiveBaseName'.task ':async:jar' property 'archiveExtension'
The example therefore left the locator and two servers running; I shut them down manually after the failure.


> The release signing key is missing from Geode's KEYS file[1].
> -------------------------------------------------------------
>
>                 Key: GEODE-10632
>                 URL: https://issues.apache.org/jira/browse/GEODE-10632
>             Project: Geode
>          Issue Type: Improvement
>            Reporter: Jinwoo Hwang
>            Assignee: Jinwoo Hwang
>            Priority: Major
>
> The release signing key is missing from Geode's KEYS file[1].
> All distribution archives, the Maven artifact I checked, and the rel/v2.0.3.RC1 tag are signed.
>  Apache policy requires release-signing keys to be published in the project's KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file
> Geode's published KEYS file: https://downloads.apache.org/geode/KEYS
> This key is not present in either the linked repository KEYS file or the canonical Geode distribution KEYS file. 
> Importing the published KEYS file results in: gpg: Can't check signature: No public key



--
This message was sent by Atlassian Jira
(v8.20.10#820010)