Hi,

I have never used gpg4win. I have used gpg on the command line.

May be this Status: BAD means actually something worrying ? Maybe not.

You could try to check your download based upon the md5sum. If you have cygwin on your PC you can use a md5sum executable to check your download.

here is the command line for my last download of eclipse :

md5sum -c eclipse-java-indigo-M4-win32-x86_64.zip.md5



Here is what I see when I run gpg from the command line :

$ gpg --verify apache-ant-1.8.2-bin.zip.asc
gpg: Signature made 12/20/10 13:50:22 using RSA key ID 82A7FBCD
gpg: Good signature from "Antoine Levy-Lambert (CODE SIGNING KEY) <anto...@apache.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 0BAD E59B 0EC2 4E68 C03C  A481 5EFA D9FE 82A7 FBCD

Antoine



On 2/16/2011 1:01 PM, IfElse wrote:
I am new to Ant and trying to install it in Windows 7. I'm also new to PGP. I
downloaded the current binary ant .zip, .asc, and KEY files from the Apache
site. Also downloaded and installed Gpg4win from GNU and installed it.

When I use GPA (the GnuGP assistant) to check the .asc file with the KEY
file I get the following information:

KeyID: 82A7FBCD
Status: BAD
User Name: Antoine Levy-Lambert (CODE_SIGNING_KEY)


I saw that there are past posts about this, but I couldn't tell from them
what I should do now. Should I go ahead and unzip the ant.zip file anyway?

I did cross post this on the JGuru Ant forum- sorry if that's bad etiquette,
but there did not seem to be much traffic there and I didn't see how to
delete the post.


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@ant.apache.org
For additional commands, e-mail: user-h...@ant.apache.org

Reply via email to