Ok, thanks.

Eduardo Quintanilla
Software Developer

From: Emilian Bold <emilian.b...@gmail.com>
Sent: miércoles, 22 de mayo de 2019 11:23 a. m.
To: Eduardo Quintanilla <equintani...@bnext.mx>
Cc: users@netbeans.apache.org
Subject: Re: Netbeans 11 - Integrity of the release

That warning says there is no chain of trust to the key. But considering you 
got the key from https://www.apache.org/dist/incubator/netbeans/KEYS you can 
ignore that warning.

--emi


On Wed, May 22, 2019 at 5:23 PM Eduardo Quintanilla 
<equintani...@bnext.mx<mailto:equintani...@bnext.mx>> wrote:
Hi,

I downloaded Netbeans 11[1] and got an error when verifying the signature[3] of 
the downloaded zip.
I got the KEYS from [2].

[1] - 
https://us.mirrors.quenda.co/apache/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-bin.zip
[2] - https://www.apache.org/dist/incubator/netbeans/KEYS
[3] - 
https://www.apache.org/dist/incubator/netbeans/incubating-netbeans/incubating-11.0/incubating-netbeans-11.0-source.zip.asc

I opened a Command Line in Windows 10 and executed GnuPG for Windows version 
2.2.11:

gpg --import KEYS.txt
gpg --verify incubating-netbeans-11.0-source.zip.asc.txt 
incubating-netbeans-11.0-bin.zip

Output:
gpg: Signature made 03/20/19 02:27:54 Central Standard Time (Mexico)
gpg:                using RSA key 79C8F02A726E9EF53646D712B2BF814FA145CB2D
gpg: BAD signature from "Laszlo Kishalmi (CODE SIGNING KEY) 
<lkisha...@apache.org<mailto:lkisha...@apache.org>>" [unknown]

Is the validation process correct? Is there an error with the KEYS or the 
downloaded file?

Best regards,
Eduardo Quintanilla
Software Developer



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon, this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.
La información transmitida está destinada únicamente a la persona o entidad a 
quien que va dirigida y puede contener información confidencial y/o material 
privilegiado. Cualquier revisión, retransmisión, difusión u otros usos, o 
cualquier acción tomada por personas o entidades distintas al destinatario 
basándose en esta información está prohibida. Si usted recibe este mensaje por 
error, por favor contacte al remitente y elimine el material de cualquier 
computadora.



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon, this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.
La información transmitida está destinada únicamente a la persona o entidad a 
quien que va dirigida y puede contener información confidencial y/o material 
privilegiado. Cualquier revisión, retransmisión, difusión u otros usos, o 
cualquier acción tomada por personas o entidades distintas al destinatario 
basándose en esta información está prohibida. Si usted recibe este mensaje por 
error, por favor contacte al remitente y elimine el material de cualquier 
computadora.

Reply via email to