Re: tar file for version 1.4.3--- bad signature?

2 msg	Delete uid from keyserver
2 msg	Cipher Question
1 msg	new (2006-05-14) keyanalyze results (+sigcheck)

tar file for version 1.4.3--- bad signature?
\ Charles Blair (20 May 2006)
. \ Alphax (20 May 2006)

1 msg	My email Address
2 msg	unable to verify gpg 1.4.3 tar file
8 msg	Fedora Core 5 and SCR335
4 msg	auto-key-locate
1 msg	PET 2006: Call for Participation
5 msg	Problems decrypting a mail with my openpgp card
3 msg	Re: smart card + gpg only root
2 msg	feature request // option during decryption of ...
9 msg	Getting KMail to let me encrypt to an unsigned ...
2 msg	Porting source code
2 msg	list-packets: raw data: unknown length
3 msg	gpg --list-packets strange behaviour
1 msg	GnuPG 1.4.3 manual...
3 msg	clearsign a variable?
2 msg	smart card usage on multiple workstations
7 msg	Upgrading from 1.2.1 to 1.4.4

Subject:	Re: tar file for version 1.4.3--- bad signature?
Group:	Gnupg-users
From:	Alphax
Date:	20 May 2006

Charles Blair wrote:
> I am unable to verify the gpg 1.4.3 tar file. Can
> somebody tell me what I am doing wrong?
>
> I have downloaded the files:
>
> -rw-r--r-- 4354218 Apr 26 17:54 gnupg-1.4.3.tar.gz
> -rw-r--r-- 158 May 1 19:13 gnupg-1.4.3.tar.gz.sig
>
> When I tried gpg --verify gnupg-1.4.3.tar.gz.sig
> using version 1.4.1, I got:
>
> gpg: Signature made Mon 03 Apr 2006 05:42:26 AM CDT
> using RSA key ID 1CE0C630
> gpg: BAD signature from
> "Werner Koch (dist sig) <dd9jn>"
>
> The key was downloaded from the MIT keyserver:
>
> pub 1024R/1CE0C630 2006-01-01 [expires: 2008-12-31]
> Key fingerprint =
> 7B96 D396 E647 1601 754B E4DB 53B6 20D0 1CE0 C630
> uid Werner Koch (dist sig) <dd9jn>
>
>

Try the .bz2 version - at my end it has checksums of:

MD5 = D2 37 D8 FE 1C 4A FA 37 9F 56 DB DA 0E 0B 40 E4
SHA1 = 9E96 B36E 4F4D 1E8B C502 8C99 FAC6 7448 2CBD B370
RMD160 = F6D3 2878 5F41 B74F 97D2 5305 C6FE 95AD 45BB 70A5

Of course, you should check the detached sig for that one rather than
trust me on it... :)

--
Alphax
Death to all fanatics!
Down with categorical imperative!
OpenPGP key: http://tinyurl.com/lvq4g

_______________________________________________
Gnupg-users mailing list
Gnupg-users
http://lists.gnupg.org/mailman/listinfo/gnupg-users