> You aren't using the KEYS file in the above command. gpg works with 
> keyrings, and you have to import then use it:
> 
> # Import
> $ gpg --import --no-default-keyring --primary-keyring apache-9.0-keys < KEYS
> 
> # Verify against the custom key ring
> $ gpg --keyring apache-9-keys --no-default-keyring --verify 
> apache-tomcat-9.0.65.tar.gz.asc


Ah, the KEYS files are different for each Tomcat release. I must have 
downloaded the file for 8 or 10 and tried to use it with 9. And some of the 
keys aren’t published to a server.

I re-downloaded and was able to verify the files.

And thanks for the tip about the alternate keyring. That keeps things organized.

Thanks,
–Arno

-- 
arno  s  hautala    /-|   a...@fracas.net

pgp b2c9d448





---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to