[JIRA] (JMVN-23) Missing keys for checking an M2 repository

Rod Widdowson (Jira) jira at shibboleth.atlassian.net
Mon Jan 17 16:07:58 UTC 2022


Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *created* an issue

Maven Enforcer ( https://shibboleth.atlassian.net/browse/JMVN?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/JMVN-23?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 ) JMVN-23 ( https://shibboleth.atlassian.net/browse/JMVN-23?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 ) Missing keys for checking an M2 repository ( https://shibboleth.atlassian.net/browse/JMVN-23?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 )

Issue Type: Task Affects Versions: 3,1.0 Assignee: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) Created: 17/Jan/22 11:07 AM Fix Versions: 3.1.1 Priority: Trivial Reporter: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 )

In the past two days I have tried to run an m2 repo check

For OpenSAML (mainline)
-----------------------

protobuf-java                 : 3.6.1          KeyId (0xB57BD58EF6D0A713) not found in keyring for com.google.protobuf
mysql-connector-java          : 8.0.19         KeyId (0x8C718D3B5072E1F5) not found in keyring for mysql
postgresql                    : 42.2.10.jre7   KeyId (0x38F47D3E410C47B1) not found in keyring for org.postgresql

Idp (4.1.5)
-----------

The build was these two phrases

mvn -Dmaven.repo.local=$REPO -DgenerateBackupPoms= false -DnewVersion=4.1.5 -Pcentral-disabled versions:set 
mvn -Dmaven.repo.local=$REPO -Pcentral-disabled,release clean verify

This was left uncheckable (and I suggest you look closely at some of the jars)

commons-cli                   : 1.2            KeyId (0x1241BC872C5E4EC0) not found in keyring for commons-cli
commons-collections           : 3.2.1          KeyId (0x1861C322C56014B2) not found in keyring for commons-collections
stax-api                      : 1.0-2          No keyring for group javax.xml.stream
log4j                         : 1.2.12         No keyring for group log4j
maven-javadoc-plugin          : 3.2.0          Could not find signature (group : net.shibboleth.maven.plugins)
doxia-core                    : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-decoration-model        : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-logging-api             : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-logging-api             : 1.7            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-module-fml              : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-module-xhtml            : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-sink-api                : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-sink-api                : 1.7            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
doxia-site-renderer           : 1.4            KeyId (0xC92C5FEC70161C62) not found in keyring for org.apache.maven.doxia
maven-antrun-plugin           : 1.3            KeyId (0xA8AD2A7E9A25CE21) not found in keyring for org.apache.maven.plugins
maven-gpg-plugin              : 1.6            KeyId (0x3B58205B9D7013A9) not found in keyring for org.apache.maven.plugins
maven-reporting-impl          : 2.2            KeyId (0x33CD6733AF5EC452) not found in keyring for org.apache.maven.reporting
maven-common-artifact-filters : 1.4            KeyId (0x9C4F7E9D98B1CC53) not found in keyring for org.apache.maven.shared
wagon-file                    : 2.5            KeyId (0x8DC6F3D0ABDBD017) not found in keyring for org.apache.maven.wagon
wagon-provider-api            : 2.5            KeyId (0x8DC6F3D0ABDBD017) not found in keyring for org.apache.maven.wagon
xbean-reflect                 : 3.4            KeyId (0xECDFEA3CB4493B94) not found in keyring for org.apache.xbean
versions-maven-plugin         : 2.2            No keyring for group org.codehaus.mojo
stax2-api                     : 3.1.1          Could not find signature (group : org.codehaus.woodstox)
woodstox-core-asl             : 4.2.0          KeyId (0x2D1F2506C6ECEDF4) not found in keyring for org.codehaus.woodstox
jacoco-maven-plugin           : 0.8.6          No keyring for group org.jacoco
jcl-over-slf4j                : 1.5.6          KeyId (0x378B845402277962) not found in keyring for org.slf4j
slf4j-api                     : 1.5.6          KeyId (0x378B845402277962) not found in keyring for org.slf4j
slf4j-jdk14                   : 1.5.6          KeyId (0x378B845402277962) not found in keyring for org.slf4j
xercesImpl                    : 2.9.1          No keyring for group xerces
xml-apis                      : 1.3.04         No keyring for group xml-apis

( https://shibboleth.atlassian.net/browse/JMVN-23#add-comment?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JMVN-23#add-comment?atlOrigin=eyJpIjoiZDRmNzgyNTI0NGFkNGQ4ZWIzZGZhODQxZTQ3NzJjN2IiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100188- sha1:935ca08 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220117/8cbc285e/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b84c5076-685e-4e04-94e9-aae8305eeaa3
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220117/8cbc285e/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-5f519115-3ea7-423c-827e-1b89f3c26d9c
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220117/8cbc285e/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-1064a903-44c5-4371-851b-ef9ae7dab843
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220117/8cbc285e/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-c29bcc79-74ad-40b8-b48d-40aaa5b637a1
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220117/8cbc285e/attachment-0007.png>


More information about the commits mailing list