All links are on the netbeans download page
https://netbeans.apache.org/front/main/download/nb23/.
The magenta words such as 'PGP ASC'  are links to the actual pgp signature
files.
[image: image.png]
Follow the link 'here' and save the file as KEYS or KEYS.txt in your
download directory.
>From there you can do this: (Example for the binary zip file I tend to use
on my Ubuntu box).


----
cd Downloads/nb
gpg --import KEYS.txt
gpg --verify netbeans-23-bin.zip.asc netbeans-23-bin.zip
less KEYS.txt
----
The download is signed by *Eric Barboni, * who is one of the maintainers
and is to be trusted.
When you download a different file or installer, you should adapt the
downloaded file above accordingly.

Met vriendelijke groet,
Pieter van den Hombergh.
Kerboschstraat 12
5913 WH Venlo


On Sat, Nov 30, 2024 at 7:55 PM Zulfi Khan <zulfi6...@yahoo.com> wrote:

> Hi Pier - Good Morning,
>
> Thanks. Please provide me the link to download the KEYS file for ASC or
> any other method.
>
>
> Zulfi.
>
> On Saturday, November 30, 2024 at 11:40:38 AM CST, Pieter van den Hombergh
> <pieter.van.den.hombe...@gmail.com> wrote:
>
>
> Hello Zufi,
> The KEYS word should be substituted with the actual key file names.
>
> Met vriendelijke groet,
> Pieter van den Hombergh.
> Kerboschstraat 12
> 5913 WH Venlo
>
>
> On Sat, Nov 30, 2024 at 4:55 PM Zulfi Khan <zulfi6...@yahoo.com.invalid>
> wrote:
>
> Apache netbeans installation on Ubuntu 22.04:
>
>
> I am trying to install latest version of apache netbeans. I downloaded the
> Ubunntu version from the link:
>
>
> https://www.apache.org/dyn/closer.lua/netbeans/netbeans-installers/23/apache-netbeans_23-1_all.deb#verify
>
>
> The “Verify the integrity of the files” section on the above link says:
> Verify the integrity of the files ¶
> <https://www.apache.org/dyn/closer.lua/netbeans/netbeans-installers/23/apache-netbeans_23-1_all.deb#verify>
>
> It is essential that you verify the integrity of the downloaded file using
> the PGP signature ( .asc file) or a hash ( .md5 or .sha* file). Please
> read Verifying Apache Software Foundation Releases
> <https://www.apache.org/info/verification.html> for more information on
> why you should verify our releases.
>
> Verifying Apache Software Foundation Releases
>
> Home page of The Apache Software Foundation
> <https://www.apache.org/info/verification.html>
>
>
> The PGP signature can be verified using PGP or GPG. First download the
> KEYS as well as the asc signature file for the relevant distribution.
> Make sure you get these files from the main distribution site, rather than
> from a mirror. Then verify the signatures using (given 2 commands).
>
> But when I am executing :
>
> “% gpg --import KEYS”
>
> om my ‘$” prompt , I am getting the error:
>
>
>
> $ gpg --import KEYS
>
> gpg: can't open 'KEYS': No such file or directory
>
> gpg: Total number processed: 0Somebody please guide me.
>
>
>
> Zulfi.
>
>
>
>

Reply via email to