Hello,
Antoine Levy-Lambert told me to write to you that I have problems
to verify his signature:
Error Message:
gpg: Signature made Thu 02 Jun 2005 03:40:50 PM CEST using DSA key
ID 265B4C63
gpg: BAD signature from "Antoine Levy-Lambert (Apache Ant
Committer) <[EMAIL PROTECTED]>
I use the 5.93 version of the 1.4.2.2 Version of gpg (GnuPG). So
can you please help.
I've just verified this on my machine:
OSX 10.4.7, gpg 1.4.1.
Spikefish:~/Desktop kj$ gpg --verify apache-ant-1.6.5-
bin.tar.gz.asc.txt apache-ant-1.6.5-bin.tar.gz
gpg: Signature made Thu Jun 2 20:40:50 2005 ICT using DSA key ID
265B4C63
gpg: Good signature from "Antoine Levy-Lambert (Apache Ant Committer)
<[EMAIL PROTECTED]>"
gpg: aka "Antoine Levy-Lambert (Apache Ant Committer)
<[EMAIL PROTECTED]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to
the owner.
Primary key fingerprint: 06A2 28AA B83A 18A8 DF7B 84B0 8614 D6AB
265B 4C63
So for me it looks good - did you download the KEYS file from here[1]
and import it with gpg --import KEYS first?
The steps I took were:
1 - download KEYS
2 - import KEYS
3 - download pgp signature (asc file)
4 - download tar.gz distribution file
5 - gpg --verify <asc> <tar.gz>
I downloaded the sig from the main site and the distribution from the
mirror http://mirrors.ccs.neu.edu/Apache/dist
Please retest your steps to see if anything is wrong with your
environment - if you think that the mirror is bad please also let us
know.
Thanks
Kev
[1] http://www.apache.org/dist/ant/KEYS
--
"I call it the State where everyone, good or bad, is a poison-
drinker: the State where universal slow suicide is called - life" -
Friedrich Nietzsche
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
