https://issues.apache.org/bugzilla/show_bug.cgi?id=57103

--- Comment #1 from Konstantin Kolinko <knst.koli...@gmail.com> ---
The HTTPD page does it wrong.

The following command is seriously broken:
% gpg --verify httpd-2.2.0.tar.gz.asc

It must be
% gpg --verify httpd-2.2.0.tar.gz.asc httpd-2.2.0.tar.gz

per
http://blog.terryburton.co.uk/2006/11/falling-into-trap-with-gpg.html
https://www.gnupg.org/gph/en/manual/x135.html

It makes little sense for each project to maintain a "how to verify PGP" page.
There is an ASF-wide one,
http://www.apache.org/info/verification.html

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to