Arno,
On 8/28/22 22:38, Arno Hautala wrote:
You aren't using the KEYS file in the above command. gpg works with
keyrings, and you have to import then use it:
# Import
$ gpg --import --no-default-keyring --primary-keyring apache-9.0-keys < KEYS
# Verify against the custom key ring
$ gpg --keyring apache-9-keys --no-default-keyring --verify
apache-tomcat-9.0.65.tar.gz.asc
Ah, the KEYS files are different for each Tomcat release.
Correct.
I must have downloaded the file for 8 or 10 and tried to use it with 9.
That will do it :)
And some of the keys aren’t published to a server.
Can you give me an example?
I re-downloaded and was able to verify the files.
And thanks for the tip about the alternate keyring. That keeps things organized.
Sure. It's part of how I test each release. [1]
-chris
[1]
https://github.com/ChristopherSchultz/apache-tomcat-stuff/blob/master/bin/test-tomcat-release.sh
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
