You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ant.apache.org by bu...@apache.org on 2026/04/02 08:05:12 UTC

[Bug 69991] New: Verification of tar.gz key fails, key not found

https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

            Bug ID: 69991
           Summary: Verification of tar.gz key fails, key not found
           Product: Ant
           Version: 1.10.16
          Hardware: HP
                OS: Linux
            Status: NEW
          Severity: blocker
          Priority: P2
         Component: Build Process
          Assignee: notifications@ant.apache.org
          Reporter: eva.q@email.cz
  Target Milestone: ---

Hello,
there seems to be problem with verification of PGP signature for the latest
release Ant 1.10.16.

The signature
https://downloads.apache.org/ant/binaries/apache-ant-1.10.16-bin.tar.gz.asc
(created 2026-04-01 11:01, size 228) cannot be verified by
https://downloads.apache.org/ant/KEYS (created 2026-02-08 15:38, size 95K).

On calling:
gpg --verify apache-ant-1.10.16-bin.tar.gz.asc

we get:  
gpg: Signature made Sun Mar 29 09:55:36 2026 UTC
gpg:                using EDDSA key BED597EFC4BF399D3283F697432DC97E7B73F0B6
gpg: Can't check signature: No public key

Could you please look at that?
Thanks a lot

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

Eva Quaiserova <ev...@email.cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

--- Comment #5 from Eva Quaiserova <ev...@email.cz> ---
It passes now, thanks again a lot for such swift fixing.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

--- Comment #1 from Stefan Bodewig <bo...@apache.org> ---
Argh, my fault. I used by $work key to sign the release.

I've added it to the KEYS file and make a mental note to better check before
cutting another release.

I'm so glad people actually verify our releases.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

--- Comment #4 from Stefan Bodewig <bo...@apache.org> ---
pure luck :-)

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

--- Comment #3 from Eva Quaiserova <ev...@email.cz> ---
Thank you so much, Stefan. You are incredibly fast too :)

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 69991] Verification of tar.gz key fails, key not found

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=69991

--- Comment #2 from Stefan Bodewig <bo...@apache.org> ---
there may be a (slight, I hope) delay until my change is propagated to
downloads.apache.org

-- 
You are receiving this mail because:
You are the assignee for the bug.