You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/03/20 14:55:00 UTC

[jira] [Resolved] (CXF-9208) Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?

     [ https://issues.apache.org/jira/browse/CXF-9208?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andriy Redko resolved CXF-9208.
-------------------------------
    Resolution: Fixed

> Current release signing key missing from https://downloads.apache.org/cxf/KEYS ?
> --------------------------------------------------------------------------------
>
>                 Key: CXF-9208
>                 URL: https://issues.apache.org/jira/browse/CXF-9208
>             Project: CXF
>          Issue Type: Bug
>            Reporter: Tobias Gierke
>            Assignee: Andriy Redko
>            Priority: Major
>
> I just downloaded the Apache CXF 4.2.0 tar.gz from your website ([https://dlcdn.apache.org/cxf/4.2.0/apache-cxf-4.2.0.tar.gz)] and the PGP key from the associated signature file ([https://dlcdn.apache.org/cxf/4.2.0/apache-cxf-4.2.0.tar.gz.asc)] is not in [https://downloads.apache.org/cxf/KEYS,] making "gpg --verify" fail even though I imported the keys from the KEYS file.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)