> On 7 Mar 2023, at 17:23, Tamás Cservenák <[email protected]> wrote:
> 
> Howdy
> 
> Could you just invoke gpg cli (that's what maven gpg plugin does as well)
> and just add that file as type "jar.asc"?
> 

I tried that. Apart from a lot of manual fliddling (e.g., the new target will 
upload pom.xml, but *not* its signature, etc.) at the end Sonatype refuses to 
valide the signatures. Maybe I have to upload something more, but this stuff 
was set up 20y ago and worked since then like a charm. Delving again now in 
this mess without any migration path is really burning me out.

"Failed to validate the pgp signature of 
'/it/unimi/dsi/dsiutils/2.7.3/dsiutils-2.7.3-javadoc.jar', check the logs."

I have looked everywhere in the Sonatype web interface for such logs, with no 
results :(.

Ciao,

                                                         seba


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to