https://bugzilla.redhat.com/show_bug.cgi?id=2005989 --- Comment #7 from Kaleb KEITHLEY <kkeithle@xxxxxxxxxx> --- (In reply to Didik Supriadi from comment #6) > Hi, > I just came across this package review. > > Since I saw BUILD_JAVA is off on the spec file, is there any usage of BR > maven? > I have removed the BR for maven. > Also, I'd recommend you use the source from this link for apache: > https://archive.apache.org/dist/orc/orc-1.7.0/ > and verify its signatures. in this case: > Source0: https://archive.apache.org/dist/orc/orc-1.7.0/orc-1.7.0.tar.gz I'm not building a later version at this time. I explained this in https://bugzilla.redhat.com/show_bug.cgi?id=2005989#c1 > Source1: https://archive.apache.org/dist/orc/orc-1.7.0/orc-1.7.0.tar.gz.asc > Source2: https://archive.apache.org/dist/orc/KEYS > … > BuildRequires: gnupg2 > … > %prep > %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' > --data='%{SOURCE0}' Except it doesn't work due to a bad signature in the KEYS file. See https://kojipkgs.fedoraproject.org//work/tasks/6218/76426218/build.log -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2005989 _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure