Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-21141

Invalid signature on ECC key?

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • Codesigning, Nexus
    • None
    • Shiro
    • Important

    Description

      Dear Infra team,

      I was unable to upload a SHIRO release because of an invalid key.
      Excerpt:

      {code}
          [ERROR] Rule failure while trying to close staging repository with ID "orgapacheshiro-1034".
          [ERROR]
          [ERROR] Nexus Staging Rules Failure Report
          [ERROR] ==================================
          [ERROR]
          [ERROR] Repository "orgapacheshiro-1034" failures
          [ERROR] Rule "signature-staging" failures
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.jar.asc' is not a valid signature for 'shiro-cache-1.7.1.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.pom.asc' is not a valid signature for 'shiro-cache-1.7.1.pom'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-sources.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-sources.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1-javadoc.jar.asc' is not a valid signature for 'shiro-cache-1.7.1-javadoc.jar'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-crypto/1.7.1/shiro-crypto-1.7.1.pom.asc' is not a valid signature for 'shiro-crypto-1.7.1.pom'.
          [ERROR] * Invalid Signature: '/org/apache/shiro/shiro-web/1.7.1/shiro-web-1.7.1.jar.asc' is not a valid signature for 'shiro-web-1.7.1.jar'.

          [ERROR] Cleaning up local stage directory after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
          [ERROR] * Deleting context 21ca2b1acfbeec.properties
          [ERROR] Cleaning up remote stage repositories after a Rule failure during close of staging repositories: [orgapacheshiro-1034]
          [ERROR] * Dropping failed staging repository with ID "orgapacheshiro-1034" (Rule failure during close of staging repositories: [orgapacheshiro-1034]).
      {code}


      My PGP key being:
      0x0E593F2ED433A5AD

      My guess is that ECC is not yet supported in Nexus, but nowhere in Infra does it say so, and ECC has been around since 2015 now.

      Any chance to fix this soon? Is this even the reason the build was failing?

      Thanks!

      Attachments

        Activity

          People

            Unassigned Unassigned
            bmarwell Benjamin Marwell
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: