It appears that httpd-2.0.58.tar.gz is signed by Colm MacCarthaigh rather than William Rowe (who is listed on the page http://httpd.apache.org/download.cgi as being the signer for 2.0.55, and has signed past releases I believe).

The public key for Colm MacCarthaigh is in the current KEYS file, but was not availaible in the version I last downloaded - Can anyone (officially) confirm that Colm MacCarthaigh is now signing the 2.0.x releases?

$ gpg --verify httpd-2.0.58.tar.gz.asc
gpg: Signature made Mon 24 Apr 2006 10:32:09 AM AKDT using DSA key ID F39B3750
gpg: Can't check signature: public key not found

From the current keys file:

pub   1024D/F39B3750 2005-07-14
     Key fingerprint = 29A2 BA84 8177 B738 7827  7FA4 75CA A2A3 F39B 3750
uid                  Colm MacCarthaigh <[EMAIL PROTECTED]>
uid                  Colm MacCarthaigh <[EMAIL PROTECTED]>
uid                  Colm MacCarthaigh <[EMAIL PROTECTED]>
sub   2048g/2C7157D3 2005-07-14


Thanks



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to