Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-25956

Signatures with ECC algorithm not being recognized

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.14.19
    • Fix Version/s: 2.14.20
    • Component/s: Repository, Staging
    • Labels:
      None

      Description

      Hello,

      I created a new OpenPGP key for my ASF mail address using a ECC algorithm for signing, curve25519.

      When I try to upload the artifacts to the ASF staging repository, I get the following error:

      Invalid Signature: '/org/apache/shiro/shiro-cache/1.7.1/shiro-cache-1.7.1.jar.asc' is not a valid signature for 'shiro-cache-1.7.1.jar'.

      ASF infra suggested to open a ticket here. For more information see: https://issues.apache.org/jira/browse/INFRA-21141

        Attachments

          Activity

            People

            Assignee:
            dsawa Dawid Sawa
            Reporter:
            bmhm Benjamin Marwell
            Last Updated By:
            Andrew Taylor
            Team:
            NXRM - Operations/Groot
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title