Hi Mike,
This is not really a Xalan specific question and is not appropriate for
this lst. There are plenty of sources of PGP information on the web.
If you look at the result of your verification you can see the signature is
good.
The warning relates to the fact that you do not if the signature really
belongs to the named owner (in this case: Neil Graham). You have no
trusted paths to this signature to vouch that this is actually Neil's key
(other than the fact his public key was available on the Xerces page).
For more information refer to the GnuPG manual:
http://www.gnupg.org/gph/en/manual.html#AEN385.
-Matt.
"Conmackie, Mike"
<[EMAIL PROTECTED]
ompuware.com> To
"'[email protected]'"
04/21/2004 10:21 <[email protected]>
AM cc
Subject
Please respond to GPG signature verification for
xalan-c-users Xerces-c 2.4.0
Hello Everyone,
In the process of installing Xalan-c 1.7.0 I am also installing Xerces-c
2.4.0. I am attempting to validate the contents of the Xerces-c distro
using GPG. The KEYS (retrieved from
http://www.apache.org/dist/xml/xerces-c/KEYS) have been imported using:
gpg --import KEYS
But the verification command:
gpg --verify xerces-c2_4_0-windows_nt-msvc_60.zip.asc
produces the following output:
gpg: Signature made 12/02/03 22:06:48 using DSA key ID 95597B05
gpg: Good signature from "Neil Graham (this key is primarily for
signing Xerces-J releases) <[EMAIL PROTECTED]>"
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 93ED 2646 814E 5072 5BC6 F748 8BF6 F975 9559
7B05
Can anyone tell me what I'm doing wrong? I'm a GPG neophyte so be kind ;-)
Regards,
Mike Conmackie
The contents of this e-mail are intended for the named addressee only. It
contains information that may be confidential. Unless you are the named
addressee or an authorized designee, you may not copy or use it, or
disclose
it to anyone else. If you received it in error please notify us immediately
and then destroy it.
