Hi,

I downloaded Netbeans 11[1] and got an error when verifying the signature[3] of 
the downloaded zip.
I got the KEYS from [2].

[1] - 
https://us.mirrors.quenda.co/apache/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-bin.zip
[2] - https://www.apache.org/dist/incubator/netbeans/KEYS
[3] - 
https://www.apache.org/dist/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-source.zip.asc

I opened a Command Line in Windows 10 and executed GnuPG for Windows version 
2.2.11:

gpg --import KEYS.txt
gpg --verify incubating-netbeans-11.0-source.zip.asc.txt 
incubating-netbeans-11.0-bin.zip

Output:
gpg: Signature made 03/20/19 02:27:54 Central Standard Time (Mexico)
gpg:                using RSA key 79C8F02A726E9EF53646D712B2BF814FA145CB2D
gpg: BAD signature from "Laszlo Kishalmi (CODE SIGNING KEY) 
<lkisha...@apache.org>" [unknown]

Is the validation process correct? Is there an error with the KEYS or the 
downloaded file?

Best regards,
Eduardo Quintanilla
Software Developer



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon, this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.
La informaci?n transmitida est? destinada ?nicamente a la persona o entidad a 
quien que va dirigida y puede contener informaci?n confidencial y/o material 
privilegiado. Cualquier revisi?n, retransmisi?n, difusi?n u otros usos, o 
cualquier acci?n tomada por personas o entidades distintas al destinatario 
bas?ndose en esta informaci?n est? prohibida. Si usted recibe este mensaje por 
error, por favor contacte al remitente y elimine el material de cualquier 
computadora.

Reply via email to