On 2008-12-21 20:49, [email protected] wrote:
> I have downloaded clamAV 94.2 and its signature from clamAV.net but
> I am unable to verify the signature and get this: 
>
> [quote]gpg: requesting key 985A444B from hkp server blackhole.pca.dfn.de
> gpg: key 985A444B: "Tomasz Kojm <[email protected]>" 3 new signatures
> gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
> gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
> gpg: Total number processed: 1
> gpg:         new signatures: 3$ gpg --verify /clamav-0.94.2.tar.gz.sig 
> /clamav-0.94.2.tar
> gpg: Signature made Wed Nov 26 12:54:05 2008 GMT using DSA key ID 985A444B
> gpg: BAD signature from "Tomasz Kojm <[email protected]>"[/quote] 
>   

You need to verify the signature on the .tar.gz, not on the .tar

Best regards,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to