[JIRA] (JPAR-198) Validate key 0xDDDAFA7674E54418 for org.testng

[Rod Widdowson (Jira)]

Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) *created* an issue

Java Parent Project ( https://shibboleth.atlassian.net/browse/JPAR?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/JPAR-198?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 ) JPAR-198 ( https://shibboleth.atlassian.net/browse/JPAR-198?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 ) Validate key 0xDDDAFA7674E54418 for org.testng ( https://shibboleth.atlassian.net/browse/JPAR-198?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 )

Issue Type: Task Affects Versions: 11.3.0 Assignee: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) Created: 17/Mar/22 10:50 AM Fix Versions: 11.3.0 Priority: Blocker Reporter: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 )

The key used to sign testNG changed for release 7.5

The testNG update got committed accidentally to the parent pom prior to validating the key and unpicking the change is difficult at this stage,

Before we ship 11.3.0 of the parent pom this key needs to be “validated”.

We are developing the process on the fly but what has been done so far is

* Check for the key on a website or in the usual places (on a website or in the SCM)
* Contact the owner by email
* Discuss among the committers prior to doing something else of a leap of faith TOFU.

Marking this as a blocker

( https://shibboleth.atlassian.net/browse/JPAR-198#add-comment?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JPAR-198#add-comment?atlOrigin=eyJpIjoiODMxODkyMGEwMDYzNDlhN2IzZjk2MDg3NDk3ZGY0NGMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:81e38da )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/f0abbbf9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-blocker-3497459c-57b8-480b-99e6-6c85a61ff852
Type: image/png
Size: 490 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/f0abbbf9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-99adde13-06e8-4a55-9bb0-614c7db7fd9a
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/f0abbbf9/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-37e4e5c3-1284-4c30-8bc3-6e206c60dc8c
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/f0abbbf9/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-961bd7c1-68c5-4f2c-8985-0628f6876275
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/f0abbbf9/attachment-0007.png>