That warning says there is no chain of trust to the key. But considering you got the key from https://www.apache.org/dist/incubator/netbeans/KEYS you can ignore that warning.
--emi On Wed, May 22, 2019 at 5:23 PM Eduardo Quintanilla <equintani...@bnext.mx> wrote: > Hi, > > > > I downloaded Netbeans 11[1] and got an error when verifying the > signature[3] of the downloaded zip. > > I got the KEYS from [2]. > > > > [1] - > https://us.mirrors.quenda.co/apache/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-bin.zip > > [2] - https://www.apache.org/dist/incubator/netbeans/KEYS > > [3] - > https://www.apache.org/dist/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-source.zip.asc > > > > I opened a Command Line in Windows 10 and executed GnuPG for Windows > version 2.2.11: > > > > gpg --import KEYS.txt > > gpg --verify incubating-netbeans-11.0-source.zip.asc.txt > incubating-netbeans-11.0-bin.zip > > > > Output: > > gpg: Signature made 03/20/19 02:27:54 Central Standard Time (Mexico) > > gpg: using RSA key 79C8F02A726E9EF53646D712B2BF814FA145CB2D > > gpg: BAD signature from "Laszlo Kishalmi (CODE SIGNING KEY) < > lkisha...@apache.org>" [unknown] > > > > Is the validation process correct? Is there an error with the KEYS or the > downloaded file? > > > > Best regards, > > *Eduardo Quintanilla * > > *Software Developer* > > > > > The information transmitted is intended only for the person or entity to > which it is addressed and may contain confidential and/or privileged > material. Any review, retransmission, dissemination or other use of, or > taking of any action in reliance upon, this information by persons or > entities other than the intended recipient is prohibited. If you received > this in error, please contact the sender and delete the material from any > computer. > La información transmitida está destinada únicamente a la persona o > entidad a quien que va dirigida y puede contener información confidencial > y/o material privilegiado. Cualquier revisión, retransmisión, difusión u > otros usos, o cualquier acción tomada por personas o entidades distintas al > destinatario basándose en esta información está prohibida. Si usted recibe > este mensaje por error, por favor contacte al remitente y elimine el > material de cualquier computadora. >