> You aren't using the KEYS file in the above command. gpg works with > keyrings, and you have to import then use it: > > # Import > $ gpg --import --no-default-keyring --primary-keyring apache-9.0-keys < KEYS > > # Verify against the custom key ring > $ gpg --keyring apache-9-keys --no-default-keyring --verify > apache-tomcat-9.0.65.tar.gz.asc
Ah, the KEYS files are different for each Tomcat release. I must have downloaded the file for 8 or 10 and tried to use it with 9. And some of the keys aren’t published to a server. I re-downloaded and was able to verify the files. And thanks for the tip about the alternate keyring. That keeps things organized. Thanks, –Arno -- arno s hautala /-| a...@fracas.net pgp b2c9d448 --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org