Community Support - Maven Central
  1. Community Support - Maven Central
  2. MVNCENTRAL-160

Uploading via upload mode "Artifact Bundle" never completes

    Details

    • Global Rank:
      20187

      Description

      I followed the instructions at https://docs.sonatype.org/display/Repository/Uploading+3rd-party+Artifacts+to+The+Central+Repository up to & including "Uploading an Artifact Bundle to the OSS Nexus Instance". After selecting bundle via "Select Bundle to Upload..." and clicking "Upload Bundle", the "Uploading..." progress bar simply loops and appears never to complete (after waiting several minutes). Attached is screen shot. Tried on latest versions of Chrome & Firefox.

      Also attached is bundle jar that I'm attempting to upload.

        Activity

        Hide
        Juven Xu added a comment -

        can you use tools (like httpfox) help figure what is the sever http response?

        I just tried uploading your bundle, and I got:

        Ruleset Evaluation Report
        Artifact upload failed.
        Staging ruleset evaluation on repository 'Central Bundles-008 (u:juven, a:117.82.239.245)' has failed.

        Staging Signature Validation
        -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1.pom', check the logs.
        -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1-javadoc.jar', check the logs.
        -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1-sources.jar', check the logs.

        Staging POM Validation
        -Invalid POM: /javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1.pom: Project URL missing, License information missing, SCM URL missing, Developer information missing

        Show
        Juven Xu added a comment - can you use tools (like httpfox) help figure what is the sever http response? I just tried uploading your bundle, and I got: Ruleset Evaluation Report Artifact upload failed. Staging ruleset evaluation on repository 'Central Bundles-008 (u:juven, a:117.82.239.245)' has failed. Staging Signature Validation -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1.pom', check the logs. -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1-javadoc.jar', check the logs. -Failed to validate the pgp signature of '/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1-sources.jar', check the logs. Staging POM Validation -Invalid POM: /javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1.pom: Project URL missing, License information missing, SCM URL missing, Developer information missing
        Hide
        Matthew Adams added a comment -

        Ok. Fixed causes for invalid pom. Uploaded again, only got errors about failing to validate signatures for the pom, javadocs & sources. Why can't Nexus verify the signatures? If I verify at the command line, everything checks out ok:

        r:\temp>gpg --verify jdo-api-3.0.1.jar.asc
        gpg: Signature made 10/29/11 19:38:47 Central Daylight Time using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"

        r:\temp>gpg --verify jdo-api-3.0.1-javadoc.jar.asc
        gpg: Signature made 01/12/12 08:56:53 Central Standard Time using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"

        r:\temp>gpg --verify jdo-api-3.0.1-sources.jar.asc
        gpg: Signature made 01/12/12 08:46:47 Central Standard Time using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"

        r:\temp>gpg --verify jdo-api-3.0.1.pom.asc
        gpg: Signature made 01/28/12 08:42:43 Central Standard Time using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"

        Show
        Matthew Adams added a comment - Ok. Fixed causes for invalid pom. Uploaded again, only got errors about failing to validate signatures for the pom, javadocs & sources. Why can't Nexus verify the signatures? If I verify at the command line, everything checks out ok: r:\temp>gpg --verify jdo-api-3.0.1.jar.asc gpg: Signature made 10/29/11 19:38:47 Central Daylight Time using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" r:\temp>gpg --verify jdo-api-3.0.1-javadoc.jar.asc gpg: Signature made 01/12/12 08:56:53 Central Standard Time using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" r:\temp>gpg --verify jdo-api-3.0.1-sources.jar.asc gpg: Signature made 01/12/12 08:46:47 Central Standard Time using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" r:\temp>gpg --verify jdo-api-3.0.1.pom.asc gpg: Signature made 01/28/12 08:42:43 Central Standard Time using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"
        Hide
        Craig L Russell added a comment -

        I was able to verify the signatures on the four artifacts:

        [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1-javadoc.jar.asc
        gpg: Signature made Thu Jan 12 06:56:53 2012 PST using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"
        [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1-sources.jar.asc
        gpg: Signature made Thu Jan 12 06:46:47 2012 PST using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"
        [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1.jar.asc
        gpg: Signature made Sat Oct 29 17:38:47 2011 PDT using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"
        [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1.pom.asc
        gpg: Signature made Sat Jan 28 06:42:43 2012 PST using RSA key ID 117B28A1
        gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"

        Show
        Craig L Russell added a comment - I was able to verify the signatures on the four artifacts: [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1-javadoc.jar.asc gpg: Signature made Thu Jan 12 06:56:53 2012 PST using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1-sources.jar.asc gpg: Signature made Thu Jan 12 06:46:47 2012 PST using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1.jar.asc gpg: Signature made Sat Oct 29 17:38:47 2011 PDT using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>" [CraigRussell-3:~/Downloads] clr% gpg --verify jdo-api-3.0.1.pom.asc gpg: Signature made Sat Jan 28 06:42:43 2012 PST using RSA key ID 117B28A1 gpg: Good signature from "Matthew Adams (CODE SIGNING KEY) <madams@apache.org>"
        Hide
        Juven Xu added a comment -

        Hi Craig,

        Sorry for replying late, I manually checked your signatures again and I found they are not detached signatures, so Nexus could not verify them.

        Please use commands like '$ gpg -ab jdo-api-3.0.1.pom' to sign your artifacts.

        Thanks,
        Juven

        Show
        Juven Xu added a comment - Hi Craig, Sorry for replying late, I manually checked your signatures again and I found they are not detached signatures, so Nexus could not verify them. Please use commands like '$ gpg -ab jdo-api-3.0.1.pom' to sign your artifacts. Thanks, Juven
        Hide
        Matthew Adams added a comment -

        It looks like that did it, Juven. I recreated the sigs using "gpg -ab ...", recreated the attached artifact bundle jdo-api-3.0.1-bundle-happy-worky.jar, and Nexus indicated successful staging at
        https://oss.sonatype.org/content/repositories/central_bundles-099/javax/jdo/jdo-api/3.0.1/

        Show
        Matthew Adams added a comment - It looks like that did it, Juven. I recreated the sigs using "gpg -ab ...", recreated the attached artifact bundle jdo-api-3.0.1-bundle-happy-worky.jar, and Nexus indicated successful staging at https://oss.sonatype.org/content/repositories/central_bundles-099/javax/jdo/jdo-api/3.0.1/
        Hide
        Juven Xu added a comment -

        cool, staging repository promoted, closing ticket.

        Show
        Juven Xu added a comment - cool, staging repository promoted, closing ticket.
        Hide
        Matthew Adams added a comment -

        Great. Juven, how long does it usually take after promotion to be visible in Maven central's site & search.maven.org?

        Show
        Matthew Adams added a comment - Great. Juven, how long does it usually take after promotion to be visible in Maven central's site & search.maven.org?
        Hide
        Juven Xu added a comment -

        around 2 hours

        Show
        Juven Xu added a comment - around 2 hours
        Hide
        Matthew Adams added a comment -

        I went to update the wiki page at https://docs.sonatype.org/display/Repository/Uploading+3rd-party+Artifacts+to+The+Central+Repository to include a note about using "gpg -ab ...", but I don't have permissions to do that, apparently. Please make a note of it for other first-time users, as I think it would be helpful.

        Show
        Matthew Adams added a comment - I went to update the wiki page at https://docs.sonatype.org/display/Repository/Uploading+3rd-party+Artifacts+to+The+Central+Repository to include a note about using "gpg -ab ...", but I don't have permissions to do that, apparently. Please make a note of it for other first-time users, as I think it would be helpful.
        Hide
        Juven Xu added a comment -

        wiki is updated, thanks for your advice.

        juven

        Show
        Juven Xu added a comment - wiki is updated, thanks for your advice. juven

          People

          • Assignee:
            Juven Xu
            Reporter:
            Matthew Adams
            Last Updated By:
            Juven Xu
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Date of First Response: