Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-21141

Invalid signature on ECC key?

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: None
    • Component/s: Codesigning, Nexus
    • Labels:
      None
    • Project:
      Shiro
    • Flags:
      Important

      Description

      Dear Infra team,

      I was unable to upload a SHIRO release because of an invalid key.
      Excerpt:

      {code}
          [ERROR] Rule failure while trying to close staging repository with ID "orgapacheshiro-1034".
          [ERROR]
          [ERROR] Nexus Staging Rules Failure Report
          [ERROR] ==================================
          [ERROR]
          [ERROR] Repository "orgapacheshiro-1034" failures
          [ERROR] Rule "signature-staging" failures
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.jar.asc' is not a valid signature for 'shiro-cache-1.7.1.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.pom.asc' is not a valid signature for 'shiro-cache-1.7.1.pom'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-sources.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-sources.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-javadoc.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-javadoc.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-crypto/1.7.1/shiro-crypto-1.7.1.pom.asc' is not a valid signature for 'shiro-crypto-1.7.1.pom'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-web/1.7.1/shiro-web-1.7.1.jar.asc' is not a valid signature for 'shiro-web-1.7.1.jar'.

          [ERROR] Cleaning up local stage directory after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
          [ERROR] * Deleting context 21ca2b1acfbeec.properties
          [ERROR] Cleaning up remote stage repositories after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
          [ERROR] * Dropping failed staging repository with ID "orgapacheshiro-1034" (Rule failure during close of staging repositories: [orgapacheshiro-1034]).
      {code}


      My PGP key being:
      0x0E593F2ED433A5AD

      My guess is that ECC is not yet supported in Nexus, but nowhere in Infra does it say so, and ECC has been around since 2015 now.

      Any chance to fix this soon? Is this even the reason the build was failing?

      Thanks!

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              bmarwell Benjamin Marwell
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: