ant-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kev Jackson <>
Subject Re: Bad Signature APACHE-ANT [s]
Date Mon, 31 Jul 2006 05:23:02 GMT

> Antoine Levy-Lambert told me to write to you that I have problems  
> to verify his signature:
> Error Message:
>  gpg: Signature made Thu 02 Jun 2005 03:40:50 PM CEST using DSA key
> ID 265B4C63
>   gpg: BAD signature from "Antoine Levy-Lambert (Apache Ant
> Committer) <>
> I use the 5.93 version of the Version of  gpg (GnuPG). So  
> can you please help.

I've just verified this on my machine:
OSX 10.4.7, gpg 1.4.1.

Spikefish:~/Desktop kj$ gpg --verify apache-ant-1.6.5- 
bin.tar.gz.asc.txt apache-ant-1.6.5-bin.tar.gz
gpg: Signature made Thu Jun  2 20:40:50 2005 ICT using DSA key ID  
gpg: Good signature from "Antoine Levy-Lambert (Apache Ant Committer)  
gpg:                 aka "Antoine Levy-Lambert (Apache Ant Committer)  
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to  
the owner.
Primary key fingerprint: 06A2 28AA B83A 18A8 DF7B  84B0 8614 D6AB  
265B 4C63

So for me it looks good - did you download the KEYS file from here[1]  
and import it with gpg --import KEYS first?

The steps I took were:

1 - download KEYS
2 - import KEYS
3 - download pgp signature (asc file)
4 - download tar.gz distribution file
5 - gpg --verify <asc> <tar.gz>

I downloaded the sig from the main site and the distribution from the  

Please retest your steps to see if anything is wrong with your  
environment - if you think that the mirror is bad please also let us  



"I call it the State where everyone, good or bad, is a poison- 
drinker: the State where universal slow suicide is called - life" -  
Friedrich Nietzsche

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message