Details

    • Type: Publishing Support
    • Status: Closed
    • Priority: Major
    • Resolution: Cannot Reproduce
    • Labels:
      None
    • Group Id:
      null
    • Publishing Hostname:
      oss.sonatype.org
    • Modify publishing permissions?:
      No

      Description

      Hi,

      I tried 4 times to release my artifact today, and although release process completes, i cannot close the repo, i keep getting the following:

      -Invalid Signature: '/com/ning/killbill/zuora-plugin/1.0.3/zuora-plugin-1.0.3.jar.asc' is not a valid signature for 'zuora-plugin-1.0.3.jar'.

      Steps taken:
      > mvn release:clean release:prepare
      > mvn release:perform

      Then on the UI 'Close'.

      I also tried to download the zuora-plugin-1.0.3.jar.asc from sonatype, and i can verify that it is a valid signature file:
      gpg --verify zuora-plugin-1.0.3.jar.asc
      gpg: Signature made Fri Mar 15 17:04:04 2013 PDT using RSA key ID 49FADD55
      gpg: Good signature from "Stephane Brossier (Ning pgp Key) <stephane@ning.com>"

      So i am confused on what to do next in order to be able to release this artifact. Could please advise me?

      Thanks in advance.

      S.

        Attachments

        1. activity.commadgag-1010.xml
          23 kB
        2. killbill-zuora-plugin-release-perform.out
          449 kB
        3. killbill-zuora-plugin-release-prepare.out
          112 kB
        4. perform.out
          481 kB
        5. perform.out
          481 kB
        6. signature validation.PNG
          signature validation.PNG
          92 kB

          Activity

            People

            Assignee:
            jalarcon Julian Alarcon [X] (Inactive)
            Reporter:
            sbrossie stephane brossier
            Votes:
            3 Vote for this issue
            Watchers:
            12 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                tigCommentSecurity.panel-title