Hi Justin, Did you import the key CF80A055A2AD28E9EFBF942A73129F58DE61ECBD [1] ?
[1] https://github.com/apache/openwebbeans/blob/master/KEYS#L143 Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <https://rmannibucau.metawerx.net/> | Old Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book <https://www.packtpub.com/application-development/java-ee-8-high-performance> Le ven. 27 mars 2020 à 22:41, Justin Mclean <jus...@classsoftware.com> a écrit : > Hi, > > -1 (binding) > > It looks like there may be an issue here, when I verify the release > signature I get: > gpg: Signature made Fri 27 Mar 19:14:05 2020 AEDT > gpg: using RSA key CF80A055A2AD28E9EFBF942A73129F58DE61ECBD > gpg: key 73129F58DE61ECBD: new key but contains no user ID - skipped > gpg: Total number processed: 1 > gpg: w/o user IDs: 1 > gpg: Can't check signature: No public key > > Can someone else verify this? > > I checked: > - hash is fine > - signature may not be correct > - LICENSE is fine > - NOTICE has wrong year please fix > - No unexpected binary files > - A file is missing an ASF header [1] > > Thanks, > Justin > > 1. ./getrelease.sh > >