pdfbox-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Maruan Sahyoun <sahy...@fileaffairs.de>
Subject Re: BAD SIGNATUREs on pdfbox/fontbox downloads
Date Wed, 09 Jul 2014 17:23:35 GMT
Dear Mark,

I did try the verification on OSX Maverick and Fedora 20  wo any issues. Is it possible to
use a different system to verify that you still get the same error?

BR
Maruan Sahyoun

Am 08.07.2014 um 18:00 schrieb Mark Bobick, CTO <m.bobick@correlationconcepts.com>:

> Downloaded KEYS and PDFBOX and FONTBOX files from
> https://pdfbox.apache.org/downloads.html.
> 
> OS: Linux Fedora 20 (Heisenbug)  
> 
> 
> 
> This is outcome from posted on same page "Verify" protocol.  Please advise
> my error or other, and recommended action.
> 
> 
> 
> [developer3@bf19650mdfl ~]$ cd Downloads
> [developer3@bf19650mdfl Downloads]$ ls KEYS
> -rw-r--r--. 1 developer3 developer3 11822 Jul  8 11:15 KEYS
> [developer3@bf19650mdfl Downloads]$ ls pdfbox*
> -rw-r--r--. 1 developer3 developer3 33476 Jul  8 11:13 pdfbox-1.8.6.jar
> -rw-r--r--. 1 developer3 developer3   181 Jul  8 11:13 pdfbox-1.8.6.jar.asc
> [developer3@bf19650mdfl Downloads]$ ls fontbox*
> -rw-r--r--. 1 developer3 developer3 33596 Jul  8 11:14 fontbox-1.8.6.jar
> -rw-r--r--. 1 developer3 developer3   181 Jul  8 11:14 fontbox-1.8.6.jar.asc
> [developer3@bf19650mdfl Downloads]$ gpg --import KEYS
> gpg: key A355A63E: public key "Jukka Zitting <jukka@apache.org>" imported
> gpg: key 8A26D9A6: public key "Jukka Zitting <jukka.zitting@gmail.com>"
> imported
> gpg: key 1DFDBF44: public key "Andreas Lehmkuehler (CODE SIGNING KEY)
> <lehmi@apache.org>" imported
> gpg: Total number processed: 3
> gpg:               imported: 3
> gpg: no ultimately trusted keys found
> [developer3@bf19650mdfl Downloads]$ sudo gpg --verify pdfbox-1.8.6.jar.asc
> [sudo] password for developer3: 
> gpg: Signature made Thu 19 Jun 2014 07:57:08 AM EDT using DSA key ID
> 1DFDBF44
> gpg: BAD signature from "Andreas Lehmkuehler (CODE SIGNING KEY)
> <lehmi@apache.org>"
> [developer3@bf19650mdfl Downloads]$ sudo gpg --verify fontbox-1.8.6.jar.asc
> gpg: Signature made Thu 19 Jun 2014 07:54:19 AM EDT using DSA key ID
> 1DFDBF44
> gpg: BAD signature from "Andreas Lehmkuehler (CODE SIGNING KEY)
> <lehmi@apache.org>"
> [developer3@bf19650mdfl Downloads]$
> 
> 
> 
> Thanks & Regards,
> 
> 
> 
> -mark bobick
> <http://www.linkedin.com/pub/mark-bobick/2/306/816/> LinkedIn
> 
> 
> 
> CTO, Correlation Concepts
> 
> <http://www.correlationconcepts.com/> www.correlationconcepts.com
> 
> 2880 David Walker Dr. #407
> 
> Eustis, Florida  32726
> 
> 702.882.5664
> 
> 
> 
> "We will find a way, or we will make one." - Hannibal
> 
> 
> 


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message