[Mediawiki-l] Bad signature for 1.13.2
Andre Bonhote
andre at bonhote.org
Mon Oct 6 09:38:38 UTC 2008
Hi
I might be paranoid AND stupid, but to me, it appears that the files on
download.wikimedia.org are wrong. What I did:
- downloaded
http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.2.tar.gz
- checked md5sum and compared it to
http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-October/000078.html
- result: e10f791ba9ecd02dd751a5676cc84405 mediawiki-1.13.2.tar.gz
- downloaded the .sig file from
http://download.wikimedia.org/mediawiki/1.13/mediawiki-1.13.2.tar.gz.sig
- downloaded the keys (https://secure.wikimedia.org/keys.txt) and imported
them
- ran gpg --verify on the sig file
- result:
[ apache at zrhsrv06.ch.eu.colt ] [ bash ]: gpg --verify
mediawiki-1.13.2.tar.gz.sig
gpg: Signature made Thu 02 Oct 2008 05:48:30 PM METDST using DSA key ID
E8A3FEC4
gpg: BAD signature from "Tim Starling <tstarling at wikimedia.org>"
What's wrong here?
Cheers
André
More information about the MediaWiki-l
mailing list