kernel.org signer broken?

Jeremy M. Dolan (jmd@foozle.turbogeek.org)
Thu, 11 Jan 2001 18:08:35 -0600

The signature on man-pages-1.34.tar.gz is bad:

gpg: Signature made Sun Dec 24 10:56:01 2000 CST using DSA key ID
517D0F0E
gpg: BAD signature from "Linux Kernel Archives Verification Key
<ftpadmin@kernel.org>"

I retrieved the man pages from ftp.kernel.org and ftp.us.kernel.org
with ftp(1) from NetKit and lftp. The md5sum's of all match:

13d544485d6021e3b0585ad963bfd814 man-pages-1.34.tar.gz
29f314640ef28a47f0ed15247c1efcd7 man-pages-1.34.tar.gz.sign

(transfered the .sign file in both bin and ascii modes, no differance)

Everything else I've gotten recently has had a valid signature;
linux-2.4.0.tar.gz and patch-2.4.1-pre1.gz.

Since man pages can be used as trojans, this may be a problem.

-- 
Jeremy M. Dolan <jmd@turbogeek.org>
OpenPGP key = http://turbogeek.org/openpgp-key
OpenPGP fingerprint = 494C 7A6E 19FB 026A 1F52  E0D5 5C5D 6228 DC43 3DEE
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/