I've decided I'd like to try out Freenet, so I downloaded the .jar file and the GPG-signature file. When I check out the gpg-signature, I get the following results:
gpg --verify new_installer_offline_1238.jar.sig new_installer_offline_1238.jar gpg: Signature made Tue 27 Oct 2009 01:22:14 PM EDT using RSA key ID BEC4F4C3 gpg: BAD signature from "Matthew John Toseland (2008-2010 key) <t...@amphibian.dyndns.org>" >From what I can see on the download site, there don't appear to be any hashes to verify whether the downloads are correct or not. I've made two download attempts, one using Firefox, and the other using wget, and I get the same results, so it's not the result of a failed download. Needless to say, I didn't attempt to install when the GPG-signature check failed. Any ideas? Here are the hashes of both the .jar file and the GPG-signature file: new_installer_offline_1238.jar: MD5: F1 F8 2C 1C 8A 08 0F 15 10 19 75 55 72 F6 BE 59 SHA1: CB29 1DA7 2EFC 2407 28D0 C6CA FF00 AF69 74C0 8303 SHA256: FF6BA594 1C80777E 81BF73ED 5C550663 8FA49A3B 96E7A6B4 A637E9A0 D7B56876 =========== new_installer_offline_1238.jar.sig: MD5: 68 71 78 A4 43 EB C4 4C F8 5A B5 C0 C6 CB C8 23 SHA1: DA34 8E12 BA11 913A 462E 72E8 D5B3 4B6D AC2F 0706 SHA256: 8172A0F6 1DAECFF8 0A1DEFD2 8A44BB4E 8DB51806 66BAB3D9 F80AF7F4 19216A24 Spetznaz _______________________________________________ Support mailing list Support@freenetproject.org http://news.gmane.org/gmane.network.freenet.support Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support Or mailto:support-requ...@freenetproject.org?subject=unsubscribe
