Am I doing something wrong? $ gpg --import KEYS gpg: directory '/Users/jwoehr/.gnupg' created gpg: keybox '/Users/jwoehr/.gnupg/pubring.kbx' created gpg: /Users/jwoehr/.gnupg/trustdb.gpg: trustdb created gpg: key B4C1940FEA9364F1: public key "Jan Lahoda (Key for signing Apache NetBeans & co. releases.) <jlah...@apache.org>" imported gpg: key 13E9F7AE3A4FD551: public key "geert...@apache.org (Key for signing Apache NetBeans & co. releases.) <geert...@apache.org>" imported gpg: key CF7BA0AB1CCF4647: public key "Emilian Marius Bold <e...@apache.org>" imported gpg: key B2BF814FA145CB2D: public key "Laszlo Kishalmi (CODE SIGNING KEY) < lkisha...@apache.org>" imported gpg: key 4A2601CEDA9382F3: public key "Eric Barboni (Signing Key) < sk...@apache.org>" imported gpg: key 3703AC389A12A9D4: public key "Neil C Smith <neilcsm...@apache.org>" imported gpg: key 57D5896CD86C1320: public key "Reema Taneja (Code Signing Key) < rtan...@apache.org>" imported gpg: key E860B148D27236F9: public key "Jaroslav Tulach (Key for signing Apache NetBeans & co. releases.) <jtul...@apache.org>" imported gpg: Total number processed: 8 gpg: imported: 8 $ gpg --verify Apache-NetBeans-11.2-bin-macosx.dmg.asc Apache-NetBeans-11.2-bin-macosx.dmg gpg: Signature made Fri Oct 25 02:04:06 2019 MDT gpg: using RSA key D0410592D20D84582E23D7F057D5896CD86C1320 gpg: issuer "rtan...@apache.org" gpg: BAD signature from "Reema Taneja (Code Signing Key) <rtan...@apache.org>" [unknown] $ gpg --verify netbeans-11.2-bin.zip.asc netbeans-11.2-bin.zip gpg: Signature made Sun Oct 20 05:17:32 2019 MDT gpg: using RSA key 7B037EEBE0F0DEDFEE65B6983703AC389A12A9D4 gpg: issuer "neilcsm...@apache.org" gpg: BAD signature from "Neil C Smith <neilcsm...@apache.org>" [unknown]
--- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1.
