[INFRA-21141] Invalid signature on ECC key?

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Codesigning, Nexus
• Project: Shiro
• Flags: Important
• Assignee: Unassigned
• Reporter: Benjamin Marwell
• Created: 24/Nov/20 18:48
• Updated: 28/Jan/21 05:14
• Resolved: 28/Jan/21 05:14

Description

Dear Infra team,

I was unable to upload a SHIRO release because of an invalid key.
Excerpt:

{code}
    [ERROR] Rule failure while trying to close staging repository with ID "orgapacheshiro-1034".
    [ERROR]
    [ERROR] Nexus Staging Rules Failure Report
    [ERROR] ==================================
    [ERROR]
    [ERROR] Repository "orgapacheshiro-1034" failures
    [ERROR] Rule "signature-staging" failures
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.jar.asc' is not a valid signature for 'shiro-cache-1.7.1.jar'.
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.pom.asc' is not a valid signature for 'shiro-cache-1.7.1.pom'.
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-sources.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-sources.jar'.
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-javadoc.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-javadoc.jar'.
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-crypto/1.7.1/shiro-crypto-1.7.1.pom.asc' is not a valid signature for 'shiro-crypto-1.7.1.pom'.
    [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-web/1.7.1/shiro-web-1.7.1.jar.asc' is not a valid signature for 'shiro-web-1.7.1.jar'.
…
    [ERROR] Cleaning up local stage directory after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
    [ERROR] * Deleting context 21ca2b1acfbeec.properties
    [ERROR] Cleaning up remote stage repositories after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
    [ERROR] * Dropping failed staging repository with ID "orgapacheshiro-1034" (Rule failure during close of staging repositories: [orgapacheshiro-1034]).
{code}


My PGP key being:
0x0E593F2ED433A5AD

My guess is that ECC is not yet supported in Nexus, but nowhere in Infra does it say so, and ECC has been around since 2015 now.

Any chance to fix this soon? Is this even the reason the build was failing?

Thanks!