[BUG] PGP key expired from release 2.3.2.

[iodeslykos]

What is the bug?

Up until today's release of v2.3.2, we were receiving a warning that the PGP key used to sign the provider was expired. Now it's become an error and is causing our pipelines to fail.

How can one reproduce the bug?

Target any version of the OpenSearch provider, attempt to use tf init (OpenTofu or Terraform).

What is the expected behavior?

tf init pulls the provider package without error.

What is your host/environment?

OpenTofu v1.10.1, Linux.

Do you have any screenshots?

 Providers are signed by their developers.
 If you'd like to know more about provider signing, you can read about it here:
 https://opentofu.org/docs/cli/plugins/signing/
 ╷
 │ Error: Failed to install provider
 │ 
 │ Error while installing opensearch-project/opensearch v2.3.2: the provider
 │ is not signed with a valid signing key; please contact the provider author
 │ (authentication signature from unknown issuer)
 ╵

Do you have any additional context?

N/A.

[DanatMighty]

At least 2.3.1 still works!
opensearch = {
source = "opensearch-project/opensearch"
version = "2.3.1"
}

[moonpig-alexis-lowe]

We are seeing the same

[prudhvigodithi]

[Traige]
For the release https://github.com/opensearch-project/terraform-provider-opensearch/releases/tag/v2.3.2 we updated the provider key to use official OpenSearch GPG key https://opensearch.org/verify-signatures/. Adding @peterzhuamazon similar to past issue opentofu/registry#1296 we should create an issue in opentofu to update the key.
Thanks