freemarker-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alex Athanasopoulos (JIRA)" <>
Subject [jira] [Created] (FREEMARKER-98) bad sh1512 and asc signatures for 2.3.28 tar files
Date Mon, 11 Jun 2018 07:41:00 GMT
Alex Athanasopoulos created FREEMARKER-98:

             Summary: bad sh1512 and asc signatures for 2.3.28 tar files
                 Key: FREEMARKER-98
             Project: Apache Freemarker
          Issue Type: Bug
          Components: site
    Affects Versions: 2.3.28
            Reporter: Alex Athanasopoulos

The signatures for the 2.3.28 release tars don't seem to match the files.

I downloaded apache-freemarker-2.3.28-bin.tar.gz from []
and also the .sha512 and .asc files.

I run "sha512sum apache-freemarker-2.3.28-bin.tar.gz" and got:


which is different from apache-freemarker-2.3.28-bin.tar.gz.sha512:


I then tried the .asc and it also failed:

gpg --verify apache-freemarker-2.3.28-bin.tar.gz.asc
gpg: assuming signed data in 'apache-freemarker-2.3.28-bin.tar.gz'
gpg: Signature made Sat 31 Μαρ 2018 12:11:30 am EEST
gpg:                using RSA key 1939A2520BAB1D90

gpg: BAD signature from "Daniel Dekany <>" [unknown]


Similarly for the src tar.

This message was sent by Atlassian JIRA

View raw message