I've downloaded the following from several mirrors:
33068436 Apr 14 09:12 apache-activemq-5.3.1-bin.tar.gz
197 Apr 14 09:51 apache-activemq-5.3.1-bin.tar.gz.asc
14086 Apr 14 09:24 KEYS.txt
and performed these steps:
gpg --import KEYS.txt
gpg: key F5BA7E4F: "Hiram Chirino <hi...@hiramchirino.com>" not changed
gpg: key 56F3E01B: "David Jencks (geronimo) <david_jen...@yahoo.com>" not
changed
gpg: key 456DFEA9: "David M. Johnson (Dave Johnson) <snoopd...@apache.org>"
not changed
gpg: key 17AA5B25: "David Johnson <snoopd...@apache.org>" not changed
gpg: key 69CC103E: "Gary Tully (key for apache releases)
<gary.tu...@gmail.com>" not changed
gpg: key 2C983957: "Bruce Snyder <bsny...@apache.org>" not changed
gpg: key 6852C7DA: "Dejan Bosanac <de...@nighttale.net>" not changed
gpg: Total number processed: 7
gpg: unchanged: 7
gpg --verify apache-activemq-5.3.1-bin.tar.gz.asc
gpg: Signature made Thu Mar 18 10:38:14 2010 EDT using DSA key ID 6852C7DA
gpg: BAD signature from "Dejan Bosanac <de...@nighttale.net>"
Anyone else hitting this issue? I'm reluctant to proceed with installing
this release.
gpg --version
gpg (GnuPG) 1.4.7
Copyright (C) 2006 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.
Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2
--
View this message in context:
http://old.nabble.com/BAD-signature-on-ActiveMQ-5.3.1-unix-binary-download--tp28243080p28243080.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.
