<div dir="ltr"><div>Peter,</div><div><br></div><div>Thanks for the follow up and information!</div></div><div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br><table style="border-top:1px solid #d3d4de"><tr><td style="width:55px;padding-top:13px"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank"><img src="https://s-install.avcdn.net/ipm/preview/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" width="46" height="29" style="width: 46px; height: 29px;"></a></td><td style="width:470px;padding-top:12px;color:#41424e;font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px">Virus-free.<a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" style="color:#4453ea">www.avast.com</a></td></tr></table><a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1"></a></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Mar 25, 2025 at 6:23 AM Peter Schober via users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Peter Schober via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> [2025-03-25 11:16 CET]:<br>
> > cd /opt/shibboleth-idp/<br>
> > mkdir -p edit-webapp/WEB-INF/lib<br>
> > curl -O --output-dir edit-webapp/WEB-INF/lib/ <a href="https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/3.0.0/jakarta.servlet.jsp.jstl-api-3.0.0.jar" rel="noreferrer" target="_blank">https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/3.0.0/jakarta.servlet.jsp.jstl-api-3.0.0.jar</a><br>
> > ./bin/build.sh<br>
> <br>
> The latest version at this time seems to be 3.0.2:<br>
> <a href="https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/" rel="noreferrer" target="_blank">https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/</a><br>
> and there's a gpg signature file available for the jar:<br>
> <a href="https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/3.0.2/" rel="noreferrer" target="_blank">https://repo.maven.apache.org/maven2/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/3.0.2/</a><br>
> but the key from that signature is not available on a keyserver and so<br>
> there's no web-of-trust-checking of the trustworthiness of the key:<br>
<br>
<a href="https://keyserver.ubuntu.com/" rel="noreferrer" target="_blank">https://keyserver.ubuntu.com/</a> has the key. The only signature (other<br>
than a self-signature) on that is from Eclipse Webmaster <<a href="mailto:webmaster@eclipse.org" target="_blank">webmaster@eclipse.org</a>>.<br>
<br>
$ gpg --keyserver <a href="http://keyserver.ubuntu.com" rel="noreferrer" target="_blank">keyserver.ubuntu.com</a> --verify jakarta.servlet.jsp.jstl-api-3.0.2.jar.asc<br>
gpg: assuming signed data in 'jakarta.servlet.jsp.jstl-api-3.0.2.jar'<br>
gpg: Signature made Thu 22 Aug 2024 06:52:23 PM CEST<br>
gpg: using RSA key 36E1F5E7FF8824BA809BE239E8CAE3F985718751<br>
gpg: requesting key E8CAE3F985718751 from hkp://<a href="http://keyserver.ubuntu.com" rel="noreferrer" target="_blank">keyserver.ubuntu.com</a><br>
gpg: key 296863EC7506AB74: public key "Eclipse Project for JSTL <<a href="mailto:jstl-dev@eclipse.org" target="_blank">jstl-dev@eclipse.org</a>>" imported<br>
gpg: Total number processed: 1<br>
gpg: imported: 1<br>
gpg: Good signature from "Eclipse Project for JSTL <<a href="mailto:jstl-dev@eclipse.org" target="_blank">jstl-dev@eclipse.org</a>>" [unknown]<br>
gpg: WARNING: This key is not certified with a trusted signature!<br>
gpg: There is no indication that the signature belongs to the owner.<br>
Primary key fingerprint: 7BE1 BB0B 4DE4 CFB8 72E9 0E51 2968 63EC 7506 AB74<br>
Subkey fingerprint: 36E1 F5E7 FF88 24BA 809B E239 E8CA E3F9 8571 8751<br>
<br>
-peter<br>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>