Hi Dave,

The key must have been uploaded to a public key server. Then you need to import the key into your local key ring using the gpg command, e.g.

[Bruiser:~/apache/foundation/board] clr% gpg --recv-keys 13BE2497
gpg: requesting key 13BE2497 from hkp server subkeys.pgp.net
gpgkeys: key 13BE2497 not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

Apparently Janne's key has not been uploaded to a public key server (the servers, like DNS servers, talk to each other).

So, Janne, you need to upload your key, e.g. (use your own key 13BE2497)

[Bruiser:~/apache/foundation/board] clr% gpg --send-keys 65461B79
gpg: sending key 65461B79 to hkp server subkeys.pgp.net

Craig

On Dec 19, 2007, at 12:08 PM, Dave wrote:

On Dec 16, 2007 3:44 PM, Janne Jalkanen <[EMAIL PROTECTED]> wrote:
I think it's perhaps time-of-year for a lot of people that has
affected this. I'll have a good part of this week to finally get around to some
more testing.

I downloaded 2.6.0-rc1 and tested with Java 5, Tomcat 5.5.23 and the
FCKEditor plugin (sweet!). Everything seems to be working fine.
However, when I tried to verify the signature I got this:

$ gpg --verify JSPWiki-2.6.0-rc1-bin.zip.asc JSPWiki-2.6.0-rc1-bin.zip
gpg: Signature made Thu Dec 13 13:56:43 2007 EST using DSA key ID 13BE2497
   gpg: Can't check signature: public key not found

Are there some docs on how to verify the release file?

- Dave

Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:[EMAIL PROTECTED]
P.S. A good JDO? O, Gasp!

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to