ant-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Bodewig <bode...@apache.org>
Subject Re: "gpg: BAD signature" on Ant download
Date Thu, 13 Mar 2008 12:56:52 GMT
On Thu, 13 Mar 2008, Aaron Tovo <aaron@tovo.net> wrote:

> I found a bad signature in the ant repository:
> 
> Computer:~ $ gpg --verify apache-ant-1.7.0-bin.zip.asc apache- 
> ant-1.7.0-bin.zip
> gpg: Signature made Wed Dec 13 04:33:32 2006 PST using DSA key ID
> 265B4C63
> gpg: BAD signature from "Antoine Levy-Lambert (Apache Ant Committer)
> <antoine@apache.org>"

I just grabbed the ZIP from Apache's main site as well as Antoine's
signature of it:

stefan@v30161:/tmp> wget http://www.apache.org/dist/ant/binaries/apache-ant-1.7.0-bin.zip.asc
--13:54:09--  http://www.apache.org/dist/ant/binaries/apache-ant-1.7.0-bin.zip.asc
           => `apache-ant-1.7.0-bin.zip.asc'
Resolving www.apache.org... 140.211.11.130
Connecting to www.apache.org|140.211.11.130|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 186 [text/plain]

100%[====================================>] 186           --.--K/s             

13:54:10 (14.78 MB/s) - `apache-ant-1.7.0-bin.zip.asc' saved [186/186]

stefan@v30161:/tmp> gpg --verify apache-ant-1.7.0-bin.zip.asc 
gpg: Signature made Wed 13 Dec 2006 01:33:32 PM CET using DSA key ID 265B4C63
gpg: Good signature from "Antoine Levy-Lambert (Apache Ant Committer) <antoine@apache.org>"
gpg:                 aka "Antoine Levy-Lambert (Apache Ant Committer) <antoine@antbuild.com>"

So the signature is good.

Do you remember which mirror you used to download the file from?
Maybe the file got damaged during the transfer or the mirror got
currupted.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
For additional commands, e-mail: user-help@ant.apache.org


Mime
View raw message