Sounds that KEYS were not updated. The best option is for PMC members to update KEYS in https://downloads.apache.org/spark/KEYS, meanwhile try to use KEYS from https://dist.apache.org/repos/dist/dev/spark/KEYS
Thank you, Vlad On Jan 10, 2025, at 7:36 AM, Jack Buggins <jack.bugg...@ibm.com.INVALID> wrote: When following step 4 from the apache downloads page, I'm hitting an issue with Spark 3.5.4 with hadoop 3 when executing gpg validation for that distribution. Is there an additional key that must be considered outside of https://downloads.apache.org/spark/KEYS to validate the package downloaded this way? For reference, I hit the issue in both download locations I tried: * https://dist.apache.org/repos/dist/release/spark/spark-3.5.4/spark-3.5.4-bin-hadoop3.tgz.asc * https://archive.apache.org/dist/spark/spark-3.5.4/spark-3.5.4-bin-hadoop3.tgz.asc Please let me know if there is a simple workaround I can apply where we can complete the validation. I'd be highly appreciative for any guidance you can offer. Kind Regards, Jack Buggins Unless otherwise stated above: IBM United Kingdom Limited Registered in England and Wales with number 741598 Registered office: Building C, IBM Hursley Office, Hursley Park Road, Winchester, Hampshire SO21 2JN
