mathjeff opened a new issue, #1850:
URL: https://github.com/apache/jena/issues/1850

   ### Version
   
   4.7.0
   
   ### What happened?
   
   I'm attempting to establish trust for Jena (in our Gradle build)
   
   When I check the signature of  jena-arg-4.7.0.pom.asc it tells me it was 
signed with RSA key D99038A1731B8B31B71549EF04C95136D236A58F :
   
   ```
    gpg --decrypt jena-arq-4.7.0.pom.asc
   gpg: assuming signed data in 'jena-arq-4.7.0.pom'
   gpg: Signature made Tue 27 Dec 2022 10:27:46 AM EST
   gpg:                using RSA key D99038A1731B8B31B71549EF04C95136D236A58F
   gpg: Can't check signature: No public key
   ```
   
   Then when I ask `gpg` to import this key:
   
   ```
   gpg --recv-keys D99038A1731B8B31B71549EF04C95136D236A58F
   gpg: key 04C95136D236A58F: new key but contains no user ID - skipped
   gpg: Total number processed: 1
   gpg:           w/o user IDs: 1
   ```
   
   it tells me that it is skipping importing the key because it contains no 
user ID
   
   Is it possible to make it easier to automatically import the key for this 
artifact?
   
   Thakns
   
   ### Relevant output and stacktrace
   
   _No response_
   
   ### Are you interested in making a pull request?
   
   None


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to