Mailing-List: contact dev-help@ant.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Ant Developers List" <dev@ant.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of foamdino@gmail.com designates
 64.233.162.195 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:mime-version:in-reply-to:references:content-type:message-id:content-transfer-encoding:from:subject:date:to:x-mailer;
        b=Pm2lwK/eARwI+LzPgNYaieHrLDHQmGNb3tJhuqkhVaWXg/2vgshFL4UTckkMT1j6cdp480STXPKTkca4O6FbQLQbNwhQHT3yyAa/jzbcO8UpC7WXl/gsSKH0AmS+PxBf1tigTKdrebXKt6qexrFGOlzTuQ4AUQ8eHnBBzIX6g0Y=
Mime-Version: 1.0 (Apple Message framework v752.2)
In-Reply-To: <44CD1996.9090103@web.de>
References: <44C7B0A3.6090206@web.de> <44C7E3AB.2000003@gmx.de>
 <44CD1996.9090103@web.de>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <22B49512-DB63-4FE1-A1A6-89DA9DFD7BC5@gmail.com>
Content-Transfer-Encoding: 7bit
From: Kev Jackson <foamdino@gmail.com>
Subject: Re: Bad Signature APACHE-ANT [s]
Date: Mon, 31 Jul 2006 12:23:02 +0700
To: "Ant Developers List" <dev@ant.apache.org>

Hello,

> Antoine Levy-Lambert told me to write to you that I have problems  
> to verify his signature:
>
> Error Message:
>
>  gpg: Signature made Thu 02 Jun 2005 03:40:50 PM CEST using DSA key
> ID 265B4C63
>   gpg: BAD signature from "Antoine Levy-Lambert (Apache Ant
> Committer) <antoine@apache.org>
>
>
> I use the 5.93 version of the 1.4.2.2 Version of  gpg (GnuPG). So  
> can you please help.

I've just verified this on my machine:
OSX 10.4.7, gpg 1.4.1.

Spikefish:~/Desktop kj$ gpg --verify apache-ant-1.6.5- 
bin.tar.gz.asc.txt apache-ant-1.6.5-bin.tar.gz
gpg: Signature made Thu Jun  2 20:40:50 2005 ICT using DSA key ID  
265B4C63
gpg: Good signature from "Antoine Levy-Lambert (Apache Ant Committer)  
<antoine@apache.org>"
gpg:                 aka "Antoine Levy-Lambert (Apache Ant Committer)  
<antoine@antbuild.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to  
the owner.
Primary key fingerprint: 06A2 28AA B83A 18A8 DF7B  84B0 8614 D6AB  
265B 4C63

So for me it looks good - did you download the KEYS file from here[1]  
and import it with gpg --import KEYS first?

The steps I took were:

1 - download KEYS
2 - import KEYS
3 - download pgp signature (asc file)
4 - download tar.gz distribution file
5 - gpg --verify <asc> <tar.gz>

I downloaded the sig from the main site and the distribution from the  
mirror http://mirrors.ccs.neu.edu/Apache/dist

Please retest your steps to see if anything is wrong with your  
environment - if you think that the mirror is bad please also let us  
know.

Thanks
Kev

[1] http://www.apache.org/dist/ant/KEYS

--
"I call it the State where everyone, good or bad, is a poison- 
drinker: the State where universal slow suicide is called - life" -  
Friedrich Nietzsche


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org