[ZOOKEEPER-4470] Keys for validating downloads of apache-zookeeper-3.5.9 have expired

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Done
• Affects Version/s: 3.5.9, 3.6.2
• Component/s: build

Environment

Not environment specific

• Assignee: Norbert Kalmár
• Reporter: Kevin Beck
• Created: 17/Feb/22 17:05
• Updated: 28/Mar/22 13:46
• Resolved: 28/Mar/22 13:46

Description

Downloads cannot be verified because the PGP keys on the download site have expired.

Keys are located here:

https://downloads.apache.org/zookeeper/KEYS

 

kbeck@KBECK-C02CF67PMD6R Downloads % gpg --verify apache-zookeeper-3.5.9-bin.tar.gz.asc apache-zookeeper-3.5.9-bin.tar.gz
gpg: Signature made Wed Jan  6 11:55:29 2021 PST
gpg:                using RSA key 3D296268A36FACA1B7EAF110792D43153B5B5147
gpg: Good signature from "Norbert Kalmar <[e-mail]>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 3D29 6268 A36F ACA1 B7EA  F110 792D 4315 3B5B 5147
kbeck@KBECK-C02CF67PMD6R Downloads %