https://issues.apache.org/bugzilla/show_bug.cgi?id=57103
--- Comment #1 from Konstantin Kolinko <knst.koli...@gmail.com> --- The HTTPD page does it wrong. The following command is seriously broken: % gpg --verify httpd-2.2.0.tar.gz.asc It must be % gpg --verify httpd-2.2.0.tar.gz.asc httpd-2.2.0.tar.gz per http://blog.terryburton.co.uk/2006/11/falling-into-trap-with-gpg.html https://www.gnupg.org/gph/en/manual/x135.html It makes little sense for each project to maintain a "how to verify PGP" page. There is an ASF-wide one, http://www.apache.org/info/verification.html -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org