Re: [verification] Neither gpg nor sha512 verifies integrity of Apache-NetBeans-12.4-bin-linux-x64.sh

2021-08-23 Thread Christian Kruggel
Thanks for your feedback. After I droped all GPG-Keys by hand an 
reimported https://downloads.apache.org/netbeans/KEYS I still cann't 
verify Apache-NetBeans-12.4-bin-linux-x64.sh


The sha512 differs for all downloads I had this far (a bit of a miracle 
to me as I assumed that the file is the same throughout all mirrors) and 
like to know, how I can get a dedicated download that uses the file Emi 
managed to verify via sha512 for I'd like to do so too.


Am 22.08.21 um 19:57 schrieb Emilian Bold:

Just tested:

$ shasum -c Apache-NetBeans-12.4-bin-linux-x64.sh.sha512.txt
./Apache-NetBeans-12.4-bin-linux-x64.sh: OK

Not sure which server the CDN pointed me to. Maybe your mirror is corrupted.


--emi

On Sun, Aug 22, 2021 at 4:41 PM Christian Kruggel  wrote:


Hello everyone,

I downloaded Apache-NetBeans-12.4-bin-linux-x64.sh from
https://netbeans.apache.org/download/nb124/nb124.html several times and
tried to verify integrity the way that's described here
https://www.apache.org/dyn/closer.cgi#verify

However I can not verify any download and my fail goes like this (pls
excuse nasty German in between):

gpg --import KEYS.txt

gpg: Schlüssel B4C1940FEA9364F1: "Jan Lahoda (Key for signing Apache
NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel 13E9F7AE3A4FD551: "geert...@apache.org (Key for signing
Apache NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel CF7BA0AB1CCF4647: "Emilian Marius Bold "
nicht geändert
gpg: Schlüssel B2BF814FA145CB2D: "Laszlo Kishalmi (CODE SIGNING KEY)
" nicht geändert
gpg: Schlüssel 4A2601CEDA9382F3: "Eric Barboni (Signing Key)
" nicht geändert
gpg: Schlüssel 3703AC389A12A9D4: "Neil C Smith "
nicht geändert
gpg: Schlüssel 57D5896CD86C1320: "Reema Taneja (Code Signing Key)
" nicht geändert
gpg: Schlüssel E860B148D27236F9: "Jaroslav Tulach (Key for signing
Apache NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel 6FA863B0C32A18B1: "Arunava Sinha (CODE SIGNING KEY)
" nicht geändert
gpg: Schlüssel 3ED477750C09D18D: "John McDonnell (CODE SIGNING KEY)
" nicht geändert
gpg: Schlüssel 5CDA98F97CD37A42: "Anton Epple "
nicht geändert
gpg: Schlüssel 13548D7CCAFAE80D: "Jaroslav Tulach (2nd key for signing
NetBeans releases) " nicht geändert
gpg: Schlüssel 7022397A0BFA52E9: "Geertjan Wielenga
" nicht geändert
gpg: Anzahl insgesamt bearbeiteter Schlüssel: 13
gpg: unverändert: 13

gpg --verify Apache-NetBeans-12.4-bin-linux-x64.sh.asc
Apache-NetBeans-12.4-bin-linux-x64.sh

gpg: Signatur vom Mi 19 Mai 2021 13:03:21 CEST
gpg:mittels RSA-Schlüssel
8FE1C26F15E0320E740BAED84A2601CEDA9382F3
gpg: FALSCHE Signatur von "Eric Barboni (Signing Key)
" [unbekannt]

diff -u Apache-NetBeans-12.4-bin-linux-x64.sh.sha512 <(sha512sum
Apache-NetBeans-12.4-bin-linux-x64.sh)

--- Apache-NetBeans-12.4-bin-linux-x64.sh.sha5122021-08-21
10:08:34.242825939 +0200
+++ /dev/fd/63  2021-08-21 10:22:04.844541870 +0200
@@ -1 +1 @@
-4866f7bcc0fcc42eb5d00f3ff153b669d84e4b59ba32c776628757d03255d19fff85be364ec1ba9a3559872838103f7074d94d52e6de2039d49208f84b1c59d5
   ./Apache-NetBeans-12.4-bin-linux-x64.sh
+7cf418e70ed85c6ab52b79091178a343be9fedb094f1d29538a353cf22ed1f8f62e955ee0ab3d1b09e2be679148c9fc4898bc23eacfdf8262db739bd519676c0
   Apache-NetBeans-12.4-bin-linux-x64.sh

Is the file Apache-NetBeans-12.4-bin-linux-x64.sh indeed corrupted or am
I missing something very basic again?

Any help / hint is highly appreciated.

Chris

-
To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org
For additional commands, e-mail: users-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



-
To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org
For additional commands, e-mail: users-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists






OpenPGP_signature
Description: OpenPGP digital signature


[verification] Neither gpg nor sha512 verifies integrity of Apache-NetBeans-12.4-bin-linux-x64.sh

2021-08-22 Thread Christian Kruggel

Hello everyone,

I downloaded Apache-NetBeans-12.4-bin-linux-x64.sh from 
https://netbeans.apache.org/download/nb124/nb124.html several times and 
tried to verify integrity the way that's described here 
https://www.apache.org/dyn/closer.cgi#verify


However I can not verify any download and my fail goes like this (pls 
excuse nasty German in between):


gpg --import KEYS.txt

gpg: Schlüssel B4C1940FEA9364F1: "Jan Lahoda (Key for signing Apache 
NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel 13E9F7AE3A4FD551: "geert...@apache.org (Key for signing 
Apache NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel CF7BA0AB1CCF4647: "Emilian Marius Bold " 
nicht geändert
gpg: Schlüssel B2BF814FA145CB2D: "Laszlo Kishalmi (CODE SIGNING KEY) 
" nicht geändert
gpg: Schlüssel 4A2601CEDA9382F3: "Eric Barboni (Signing Key) 
" nicht geändert
gpg: Schlüssel 3703AC389A12A9D4: "Neil C Smith " 
nicht geändert
gpg: Schlüssel 57D5896CD86C1320: "Reema Taneja (Code Signing Key) 
" nicht geändert
gpg: Schlüssel E860B148D27236F9: "Jaroslav Tulach (Key for signing 
Apache NetBeans & co. releases.) " nicht geändert
gpg: Schlüssel 6FA863B0C32A18B1: "Arunava Sinha (CODE SIGNING KEY) 
" nicht geändert
gpg: Schlüssel 3ED477750C09D18D: "John McDonnell (CODE SIGNING KEY) 
" nicht geändert
gpg: Schlüssel 5CDA98F97CD37A42: "Anton Epple " 
nicht geändert
gpg: Schlüssel 13548D7CCAFAE80D: "Jaroslav Tulach (2nd key for signing 
NetBeans releases) " nicht geändert
gpg: Schlüssel 7022397A0BFA52E9: "Geertjan Wielenga 
" nicht geändert

gpg: Anzahl insgesamt bearbeiteter Schlüssel: 13
gpg: unverändert: 13

gpg --verify Apache-NetBeans-12.4-bin-linux-x64.sh.asc 
Apache-NetBeans-12.4-bin-linux-x64.sh


gpg: Signatur vom Mi 19 Mai 2021 13:03:21 CEST
gpg:mittels RSA-Schlüssel 
8FE1C26F15E0320E740BAED84A2601CEDA9382F3
gpg: FALSCHE Signatur von "Eric Barboni (Signing Key) 
" [unbekannt]


diff -u Apache-NetBeans-12.4-bin-linux-x64.sh.sha512 <(sha512sum 
Apache-NetBeans-12.4-bin-linux-x64.sh)


--- Apache-NetBeans-12.4-bin-linux-x64.sh.sha5122021-08-21 
10:08:34.242825939 +0200

+++ /dev/fd/63  2021-08-21 10:22:04.844541870 +0200
@@ -1 +1 @@
-4866f7bcc0fcc42eb5d00f3ff153b669d84e4b59ba32c776628757d03255d19fff85be364ec1ba9a3559872838103f7074d94d52e6de2039d49208f84b1c59d5 
 ./Apache-NetBeans-12.4-bin-linux-x64.sh
+7cf418e70ed85c6ab52b79091178a343be9fedb094f1d29538a353cf22ed1f8f62e955ee0ab3d1b09e2be679148c9fc4898bc23eacfdf8262db739bd519676c0 
 Apache-NetBeans-12.4-bin-linux-x64.sh


Is the file Apache-NetBeans-12.4-bin-linux-x64.sh indeed corrupted or am 
I missing something very basic again?


Any help / hint is highly appreciated.

Chris

-
To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org
For additional commands, e-mail: users-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists