dud created HIVE-18870:
--------------------------
Summary: Invalid GPG signature of the 2.3.2 release
Key: HIVE-18870
URL: https://issues.apache.org/jira/browse/HIVE-18870
Project: Hive
Issue Type: Bug
Affects Versions: 2.3.2
Reporter: dud
Hello
the [GPG
signature|https://www.apache.org/dist/hive/hive-2.3.2/apache-hive-2.3.2-bin.tar.gz.asc]
of the 2.3.2 Hive release is invalid preventing users to verify the downloaded
archive :
{code:java}
gpg --primary-keyring /tmp/tmp.0xXkR5pkws.gpg --import ./hive-KEYS
gpg: key 085BCB4D2E765AE1: public key "Ashish Thusoo (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key E36CD0AA4626191C: public key "Zheng Shao (Zheng Shao)
<[email protected]>" imported
gpg: key 0CA0FF40EDAC684E: public key "Carl W. Steinbach (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key 2036CB247AC28520: public key "John Sichi (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key E193B38C2305CA1C: public key "Ashutosh Chauhan <[email protected]>"
imported
gpg: key 5E1840C075E68997: public key "Thejas Nair (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key 4814E367885D649D: public key "Harish Butani (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key 1EADB7814530BADE: public key "Sushanth Sowmyan (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key D90DF4E28EE6E329: public key "Thejas M Nair (CODE SIGNING KEY 2)
<[email protected]>" imported
gpg: key A645F24823724330: public key "Gunther Hagleitner (CODE SIGNING KEY)
<[email protected]>" imported
gpg: key 1209E7F13D0C92B9: 8 duplicate signatures removed
gpg: key 1209E7F13D0C92B9: 47 signatures not checked due to missing keys
gpg: key 1209E7F13D0C92B9: public key "Owen O'Malley (Code signing)
<[email protected]>" imported
gpg: key 88BD3F5704D9B832: public key "Alan Gates (No comment)
<[email protected]>" imported
gpg: key D0111CE83C2F98F8: public key "Sergio Pena <[email protected]>" imported
gpg: key BBDD5B6642FE69CE: public key "stakiar <[email protected]>"
imported
gpg: Total number processed: 14
gpg: imported: 14
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 4 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1 valid: 4 signed: 0 trust: 2-, 0q, 0n, 2m, 0f, 0u
gpg: next trustdb check due at 2022-07-10
gpg --primary-keyring /tmp/tmp.0xXkR5pkws.gpg --verify
/tmp/hive/apache-hive-2.3.2-bin.tar.gz.asc
/tmp/hive/apache-hive-2.3.2-bin.tar.gz
gpg: Signature made jeu. 09 nov. 2017 20:32:14 CET
gpg: using RSA key B21AE8EEA5105E6CA3F9EFA1BBDD5B6642FE69CE
gpg: BAD signature from "stakiar <[email protected]>" [unknown]
{code}
I've already contacted [~stakiar] some weeks ago about this issue but
unfortunatelely the signature hasn't been fixed yet.
Regards
dud
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
