[jira] [Created] (FLINK-20251) Can't import all release-signing keys

[Shang Yuanchun (Jira)]

Bob created FLINK-20251:
---------------------------

             Summary: Can't import all release-signing keys
                 Key: FLINK-20251
                 URL: https://issues.apache.org/jira/browse/FLINK-20251
             Project: Flink
          Issue Type: Improvement
         Environment: Tested on Centos 7 and Debian 10
            Reporter: Bob


When i try to import the release-signing keys ([https://flink.apache.org/downloads.html#verifying-hashes-and-signatures]) with gpg it can't import all keys.
{code:java}
$ wget https://dist.apache.org/repos/dist/release/flink/KEYS
$ gpg --import KEYS
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 04D9B832: public key "Alan Gates (No comment) <[hidden email]>" imported
gpg: key 0CBAAE9F: public key "Sean Owen (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 0410DA0C: public key "Ted Dunning (for signing Apache releases) <[hidden email]>" imported
gpg: key 3592721E: public key "Henry Saputra (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 3D0C92B9: public key "Owen O'Malley (Code signing) <[hidden email]>" imported
gpg: key D9839159: public key "Robert Metzger (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 9D403309: public key "Ufuk Celebi (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key D675A2E9: public key "Márton Balassi (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key C2909CBF: public key "Maximilian Michels <[hidden email]>" imported
gpg: key 34911D5A: public key "Fabian Hueske (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key B065B356: public key "Tzu-Li Tai (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 121D7293: public key "Aljoscha Krettek (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 11D464BA: public key "Chesnay Schepler (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 35C33D6A: public key "Tzu-Li Tai (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key A96CFFD5: public key "Till Rohrmann (stsffap) <[hidden email]>" imported
gpg: key D920A98C: public key "Thomas Weise <[hidden email]>" imported
gpg: key 3B79EA0E: public key "jincheng Sun (jincheng) <[hidden email]>" imported
gpg: key F7059BA4: public key "Kurt Young <[hidden email]>" imported
gpg: key EFAE3202: public key "Jark Wu (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 57B6476C: public key "Hequn Cheng (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key 89C115E8: public key "Gary Yao <[hidden email]>" imported
gpg: key 771AB743: public key "Yu Li (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key BF075300: public key "Dian Fu (CODE SIGNING KEY) <[hidden email]>" imported
gpg: key CEA00D0E: public key "Zhijiang Wang (CODE SIGNING KEY) <[hidden email]>" imported
mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: invalid armor header:
gpg: CRC error; 7B099A - C44677
gpg: read_block: read error: Invalid keyring
gpg: import from `KEYS' failed: Invalid keyring
gpg: Total number processed: 24
gpg:               imported: 24  (RSA: 23)
gpg: no ultimately trusted keys found {code}
Could someone check the key of [hidden email] please? When importing it as a single key, the import is working but there seems to still an issue. And the KEYS files can't be imported at once.
{code:java}
$ gpg --import xtsong.key
gpg: invalid armor header: mQINBF+GZ4gBEADtTxqpO1Hx66Rf848S5Az6SjRQQaImBFgYyi9Q1+G37eap03p+\n
gpg: key 9DFF40967ABFC5A4: public key "Xintong Song (CODE SIGNING KEY) <[hidden email]>" imported
gpg: Total number processed: 1
gpg:               imported: 1{code}
Thank you very much



--
This message was sent by Atlassian Jira
(v8.3.4#803005)