Hi Nicolas,
I don't see your key at https://dist.apache.org/repos/dist/dev/ofbiz/KEYS do I
miss something?
Anyway I have certified your key on Ubuntu using my own key and https://apps.kde.org/fr/kleopatra/ (installed following
https://cebulka.in/en/posts/pgp-kleopatra-linux/)
Then it's OK with me:
Verifying files...
sha check of file: apache-ofbiz-24.09.01.zip
Using sha file: apache-ofbiz-24.09.01.zip.sha512
apache-ofbiz-24.09.01.zip:AF08B63554B6803128C48DE399555F6EE280E4EBD44E63DF7918DB5266B92955A75EE8462257D3D4A8386CDAAFA40A9586469B268AC66695CCCF3079303DF70C
apache-ofbiz-24.09.01.zip:AF08B63554B6803128C48DE399555F6EE280E4EBD44E63DF7918DB5266B92955A75EE8462257D3D4A8386CDAAFA40A9586469B268AC66695CCCF3079303DF70C
[0;32msha checksum OK[0m
GPG verification output
gpg: Signature made mer. 02 avril 2025 09:59:55 CEST
gpg: using RSA key BE920554FD75553B7D9C64AFA2593327114C45E5
gpg: Good signature from "Nicolas Malin (PMC Apache OFBiz) <nma...@apache.org>"
[full]
Jacques
Le 04/04/2025 à 09:54, Nicolas Malin a écrit :
Hello Michael,
Le 03/04/2025 à 17:42, Michael Brohl a écrit :
@Nicolas: have you published your gpg public key to any keyserver?
I pushed my key on https://pgpkeys.mit.edu, present on my apache account https://people.apache.org/keys/committer/nmalin and added to the file KEYS
https://dist.apache.org/repos/dist/dev/ofbiz/KEYS
I hope it's help :)
Nicolas