On 3/17/07, George Aroush <[EMAIL PROTECTED]> wrote:

...Can someone
please take a look at : http://people.apache.org/~aroush/Lucene.Net-2.0-004/
and tell me if the KEYS is right as well as if the *.asc files validate?...

The KEYS file is in the correct format, I was able to import it with
"gpg --import".

The md5 file

Incubating-Apache-Lucene.Net-2.0-004-11Mar07.src.zip.md5

is IMHO in a funny format, I was expected the standard md5sum format (A):

248dcf867ae08d76f542cbe986a91796
Incubating-Apache-Lucene.Net-2.0-004-11Mar07.src.zip

but yours is (B):

Incubating-Apache-Lucene.Net-2.0-004-11Mar07.src.zip:
24 8D CF 86 7A E0 8D 76  F5 42 CB E9 86 A9 17 96

So attempting to check it with

 md5sum -c Incubating-Apache-Lucene.Net-2.0-004-11Mar07.src.zip.md5

fails, although one can check the md5 "by hand".

I *think* the (A) format is the one we want, but I'm not sure where
this is specified. I'd say your md5 info is correct, but in an
unexpected format (there might be various flavors around though, but
I've always seen this (A) format).

About the .asc files, I have tried

 gpg --verify Incubating-Apache-Lucene.Net-2.0-004-11Mar07.src.zip.as

And the signature is ok, but AFAICS your key is hasn't been signed by
anyone, it'd be good to have it signed if you're at an ApacheCon or
another ASF gathering.

I'm not familiar with the sha format, I'll let others comment on that.

Hope this helps,
-Bertrand

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to