Hi,

Is this the right list for this question?

I'm trying to verify the PGP ASC and KEY file but I get a bad signature
message.

I'm here: https://netbeans.apache.org/download/nb90/nb90-beta.html

In Terminal:
wget
https://dist.apache.org/repos/dist/dev/incubator/netbeans/incubating-netbeans-java/incubating-9.0-beta/incubating-netbeans-java-9.0-beta-bin.zip.asc

wget https://dist.apache.org/repos/dist/release/incubator/netbeans/KEYS

pgp --import KEYS

gpg --verify incubating-netbeans-java-9.0-beta-bin.zip.asc
Downloads/incubating-netbeans-java-9.0-beta-bin.zip


output:

gpg: Signature made Wed 10 Jan 2018 03:41:31 PM MST
gpg:                using RSA key B4C1940FEA9364F1
gpg: BAD signature from "Jan Lahoda (Key for signing Apache NetBeans & co.
releases.) <jlah...@apache.org>" [unknown]

What did I forget to do?

Reply via email to