You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/03/20 11:33:00 UTC

[jira] [Commented] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?

    [ https://issues.apache.org/jira/browse/CXF-9208?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18067022#comment-18067022 ] 

Andriy Redko commented on CXF-9208:
-----------------------------------

Ah thanks [~tgierke2342] , this is on me I believe, I will add my key shorty, sorry about that

> Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
> --------------------------------------------------------------------------------
>
>                 Key: CXF-9208
>                 URL: https://issues.apache.org/jira/browse/CXF-9208
>             Project: CXF
>          Issue Type: Bug
>            Reporter: Tobias Gierke
>            Priority: Major
>
> I just downloaded the Apache CXF 4.2.0 tar.gz from your website ([https://dlcdn.apache.org/cxf/4.2.0/apache-cxf-4.2.0.tar.gz)] and the PGP key from the associated signature file ([https://dlcdn.apache.org/cxf/4.2.0/apache-cxf-4.2.0.tar.gz.asc)] is not in [https://downloads.apache.org/cxf/KEYS,] making "gpg --verify" fail even though I imported the keys from the KEYS file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)