TomEE package verification not working

COURTAULT Francois <[email protected]> Thu, 11 Sep 2025 16:27:31 +0000

Newsgroups	gmane.comp.java.openejb.user
Message-ID	<MRYP264MB6335784DBD37D3842C39F9369D09A__3924.1978711047$1757608079$gmane$org@MRYP264MB6335.FRAP264.PROD.OUTLOOK.COM>

--_000_MRYP264MB6335784DBD37D3842C39F9369D09AMRYP264MB6335FRAP_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

THALES GROUP LIMITED DISTRIBUTION to email recipients

Hello everyone,

In our pipeline for building TomEE Docker base images, we do this:
+ gpg --batch --verify apache-tomee-10.1.1-plus.tar.gz.asc apache-tomee-10.=
1.1-plus.tar.gz
gpg: Signature made Sat Aug 16 12:18:25 2025 UTC
gpg: using RSA key 85FBBE98D6C37CDA8A7D8FF9F9FF83A48D339D37
gpg: Can't check signature: No public key

It was working with TomEE 10.1.0 but not anymore with TomEE 10.1.1.
The keys used are located at https://downloads.apache.org/tomee/KEYS
Is this location still valid for TomEE keys ?

What has changed between 10.1.0 and 10.1.1 ?
How to fix this issue ? any idea ?

Best Regards.




--_000_MRYP264MB6335784DBD37D3842C39F9369D09AMRYP264MB6335FRAP_--