On Thu, 13 Mar 2008, Aaron Tovo <[EMAIL PROTECTED]> wrote: > I found a bad signature in the ant repository: > > Computer:~ $ gpg --verify apache-ant-1.7.0-bin.zip.asc apache- > ant-1.7.0-bin.zip > gpg: Signature made Wed Dec 13 04:33:32 2006 PST using DSA key ID > 265B4C63 > gpg: BAD signature from "Antoine Levy-Lambert (Apache Ant Committer) > <[EMAIL PROTECTED]>"
I just grabbed the ZIP from Apache's main site as well as Antoine's signature of it: [EMAIL PROTECTED]:/tmp> wget http://www.apache.org/dist/ant/binaries/apache-ant-1.7.0-bin.zip.asc --13:54:09-- http://www.apache.org/dist/ant/binaries/apache-ant-1.7.0-bin.zip.asc => `apache-ant-1.7.0-bin.zip.asc' Resolving www.apache.org... 140.211.11.130 Connecting to www.apache.org|140.211.11.130|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 186 [text/plain] 100%[====================================>] 186 --.--K/s 13:54:10 (14.78 MB/s) - `apache-ant-1.7.0-bin.zip.asc' saved [186/186] [EMAIL PROTECTED]:/tmp> gpg --verify apache-ant-1.7.0-bin.zip.asc gpg: Signature made Wed 13 Dec 2006 01:33:32 PM CET using DSA key ID 265B4C63 gpg: Good signature from "Antoine Levy-Lambert (Apache Ant Committer) <[EMAIL PROTECTED]>" gpg: aka "Antoine Levy-Lambert (Apache Ant Committer) <[EMAIL PROTECTED]>" So the signature is good. Do you remember which mirror you used to download the file from? Maybe the file got damaged during the transfer or the mirror got currupted. Stefan --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
