Hi Johan,

could be due to your specific network environment. This link might give some clues

https://stackoverflow.com/questions/21338721/gpg-no-valid-openpgp-data-found

Cheers, Andi

On 17.10.2020 11:51, Johan Doornenbal wrote:
Hi Dan,

I tried again today.
No luck - this time it fails early with gpg: no valid OpenPGP data found.
gpg: the signature could not be verified 1)

Best regards / Met vriendelijke groet,

Johan Doornenbal

1)

Downloading
http://repository.apache.org/content/repositories/orgapacheisis-1106/org/apache/isis/isis-parent/2.0.0-M4/isis-parent-2.0.0-M4-source-release.zip
curl -L -O
http://repository.apache.org/content/repositories/orgapacheisis-1106/org/apache/isis/isis-parent/2.0.0-M4/isis-parent-2.0.0-M4-source-release.zip
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
  Current
                                  Dload  Upload   Total   Spent    Left
  Speed
100   330  100   330    0     0   7333      0 --:--:-- --:--:-- --:--:--
  7333
100   738    0   738    0     0   4855      0 --:--:-- --:--:-- --:--:--
  4855
curl -L -O
http://repository.apache.org/content/repositories/orgapacheisis-1106/org/apache/isis/isis-parent/2.0.0-M4/isis-parent-2.0.0-M4-source-release.zip.asc
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
  Current
                                  Dload  Upload   Total   Spent    Left
  Speed
100   334  100   334    0     0   8146      0 --:--:-- --:--:-- --:--:--
  8146
100   738    0   738    0     0   5904      0 --:--:-- --:--:-- --:--:--
  5904
Verifying isis-parent-2.0.0-M4-source-release.zip
gpg --verify isis-parent-2.0.0-M4-source-release.zip.asc
isis-parent-2.0.0-M4-source-release.zip
Warning: Failed to set locale category LC_NUMERIC to en_NL.
Warning: Failed to set locale category LC_TIME to en_NL.
Warning: Failed to set locale category LC_COLLATE to en_NL.
Warning: Failed to set locale category LC_MONETARY to en_NL.
Warning: Failed to set locale category LC_MESSAGES to en_NL.
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
Command gpg --verify isis-parent-2.0.0-M4-source-release.zip.asc
isis-parent-2.0.0-M4-source-release.zip failed! [error 2] Exiting...


Op di 13 okt. 2020 om 09:45 schreef Dan Haywood <danhayw...@apache.org>:

Folks,

I've just cut a new release of the Apache Isis Framework.

The source code zip artifact has been uploaded to a staging repository on
https://repository.apache.org, along with its corresponding .asc
signature.

In the source code repo the code has been tagged as isis-2.0.0-M4-RC1;
see https://github.com/apache/isis/tags

To verify the source code itself, you can use the following commands
(in an empty directory):

----------------------------------------------------------------
VERSION=2.0.0-M4
RC=RC1
NEXUSREPONUM=1106

curl https://downloads.apache.org/isis/KEYS > /tmp/KEYS
gpg --import /tmp/KEYS

rm -rf isis-$VERSION

curl -O -L

https://raw.githubusercontent.com/apache/isis/release-$VERSION-$RC/scripts/verify-isis-release.sh

chmod +x ./verify-isis-release.sh
./verify-isis-release.sh $NEXUSREPONUM $VERSION $RC
----------------------------------------------------------------

You can then test the helloworld or simpleapp starter apps, see:
https://isis.staged.apache.org/comguide/latest/verifying-releases.html.

You can also inspect the website in general, available at:
https://isis.staged.apache.org.

Please verify the release and cast your vote.
The vote will be open for a minimum of 72 hours.

[ ] +1
[ ]  0
[ ] -1

Reply via email to