Janne Jalkanen schrieb:
I wasn't able to verify the build file:
   rocker:Desktop dave$ gpg --verify
JSPWiki-2.6.2-rc-4-bin.zip.asc.txt JSPWiki-2.6.2-rc-4-bin.zip
gpg: Signature made Mon Mar 24 12:28:59 2008 EDT using DSA key ID 13BE2497
   gpg: Can't check signature: public key not found

This worries me, because I *have* submitted the key to the keyservers.

Can anyone else get the signature checked?

gpg --recv-key 13BE2497
gpg: Schlüssel 13BE2497 von hkp Server subkeys.pgp.net anfordern
gpg: Schlüssel 13BE2497: Öffentlicher Schlüssel "Janne Jalkanen <[EMAIL PROTECTED]>" importiert

gpg --verify JSPWiki-2.6.2-rc-4-bin.zip.asc
gpg: Signature made Mon Mar 24 17:28:59 2008 CET using DSA key ID 13BE2497
gpg: Good signature from "Janne Jalkanen <[EMAIL PROTECTED]>"
gpg:                 aka "Janne Jalkanen <[EMAIL PROTECTED]>"
gpg:                 aka "Janne Jalkanen <[EMAIL PROTECTED]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 85D0 2F40 B99F EF5B A9F8  3153 0698 1B9C 13BE 2497


Looks like your key hasn't been synced to all keyservers
(for example pgp.mit.edu doesn't have it yet)

--
Christian

Reply via email to