Hi,

I'm getting an error with 
https://release-test.apache.org/report/db-jdo/jdo-3.3-SNAPSHOT-source-release/jdo-3.3-SNAPSHOT-source-release.tar.gz.asc

The message is not completely understandable. [1] What does "no valid signature 
found" mean?

I have verified the validity of the files:

clr% gpg --verify jdo-3.3-SNAPSHOT-source-release.tar.gz.asc 
jdo-3.3-SNAPSHOT-source-release.tar.gz
gpg: Signature made Mon May 18 18:52:55 2026 PDT
gpg:                using RSA key 4F66E2ED08DE0A8DDC4704C381ABAEA820DE9E54
gpg: Good signature from "Craig Laird Russell (CODE SIGNING KEY) 
<[email protected]>" [ultimate]

[1]
No valid signature found
Verified        No
Error   No valid signature found
Error Kind      missing_signature
(Debug) Key Id  81abaea820de9e54
(Debug) Fingerprint     Not available
(Debug) Pubkey Fingerprint      Not available
(Debug) Creation Date   1779155575
(Debug) Timestamp       1779155575
(Debug) Username        Not available
(Debug) Status  No valid signature found
(Debug) Valid   No
(Debug) Trust Level     Not available
(Debug) Trust Text      Not available
(Debug) Stderr  Not available
(Debug) Num Committee Keys      0
(Debug) Key Has Apache Uid      No
(Debug) Hash Algorithm  SHA512
(Debug) Signature Type  binary
(Debug) Public Key Algorithm    rsa


Craig L Russell
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to