Downloaded KEYS and PDFBOX and FONTBOX files from https://pdfbox.apache.org/downloads.html.
OS: Linux Fedora 20 (Heisenbug) This is outcome from posted on same page "Verify" protocol. Please advise my error or other, and recommended action. [developer3@bf19650mdfl ~]$ cd Downloads [developer3@bf19650mdfl Downloads]$ ls KEYS -rw-r--r--. 1 developer3 developer3 11822 Jul 8 11:15 KEYS [developer3@bf19650mdfl Downloads]$ ls pdfbox* -rw-r--r--. 1 developer3 developer3 33476 Jul 8 11:13 pdfbox-1.8.6.jar -rw-r--r--. 1 developer3 developer3 181 Jul 8 11:13 pdfbox-1.8.6.jar.asc [developer3@bf19650mdfl Downloads]$ ls fontbox* -rw-r--r--. 1 developer3 developer3 33596 Jul 8 11:14 fontbox-1.8.6.jar -rw-r--r--. 1 developer3 developer3 181 Jul 8 11:14 fontbox-1.8.6.jar.asc [developer3@bf19650mdfl Downloads]$ gpg --import KEYS gpg: key A355A63E: public key "Jukka Zitting <[email protected]>" imported gpg: key 8A26D9A6: public key "Jukka Zitting <[email protected]>" imported gpg: key 1DFDBF44: public key "Andreas Lehmkuehler (CODE SIGNING KEY) <[email protected]>" imported gpg: Total number processed: 3 gpg: imported: 3 gpg: no ultimately trusted keys found [developer3@bf19650mdfl Downloads]$ sudo gpg --verify pdfbox-1.8.6.jar.asc [sudo] password for developer3: gpg: Signature made Thu 19 Jun 2014 07:57:08 AM EDT using DSA key ID 1DFDBF44 gpg: BAD signature from "Andreas Lehmkuehler (CODE SIGNING KEY) <[email protected]>" [developer3@bf19650mdfl Downloads]$ sudo gpg --verify fontbox-1.8.6.jar.asc gpg: Signature made Thu 19 Jun 2014 07:54:19 AM EDT using DSA key ID 1DFDBF44 gpg: BAD signature from "Andreas Lehmkuehler (CODE SIGNING KEY) <[email protected]>" [developer3@bf19650mdfl Downloads]$ Thanks & Regards, -mark bobick <http://www.linkedin.com/pub/mark-bobick/2/306/816/> LinkedIn CTO, Correlation Concepts <http://www.correlationconcepts.com/> www.correlationconcepts.com 2880 David Walker Dr. #407 Eustis, Florida 32726 702.882.5664 "We will find a way, or we will make one." - Hannibal
