OFBiz comes with OOTB Gradle dependency verification. This means that it embeds a verification-metadata.xml file and a verification-keyring.gpg in OFBiz gradle sub-directory which is used during builds gradlew --write-verification-metadata pgp,sha256 help gradlew --write-verification-metadata pgp,sha256 --export-keys These command creates or updates the verification-metadata.xml and verification-keyring to work using metadata, though it’s better to check the situation in case of doubts (OK OTTB). You may use  gradlew build --refresh-keys To recreate the keys The verification-metadata.xml file contains

OFBiz comes with OOTB Gradle dependency verification. This means that it embeds a verification-metadata.xml file and a verification-keyring.gpg in OFBiz gradle sub-directory which is used during builds gradlew --write-verification-metadata pgp,sha256 help gradlew --write-verification-metadata pgp,sha256 --export-keys These command creates or updates the verification-metadata.xml and verification-keyring to work using metadata, though it’s better to check the situation in case of doubts (OK OTTB). You may use  gradlew build --refresh-keys To recreate the keys The verification-metadata.xml file contains

OFBiz comes with OOTB Gradle dependency verification. This means that it embeds a verification-metadata.xml file and a verification-keyring.gpg in OFBiz gradle sub-directory which is used during builds gradlew --write-verification-metadata pgp,sha256 help gradlew --write-verification-metadata pgp,sha256 --export-keys These command creates or updates the verification-metadata.xml and verification-keyring to work using metadata, though it’s better to check the situation in case of doubts (OK OTTB). You may use  gradlew build --refresh-keys To recreate the keys The verification-metadata.xml file contains