Hi Roberto,
Thank you a lot for your advices.
I'm not familiar with signatures, but here is what I did (I tested that procedure on several other versions, but none worked...)
silvere@silvere-Linux:~/dev/src$ wget http://www.cs.unipr.it/~bagnara/pgp_public_key
silvere@silvere-Linux:~/dev/src$ ls
MD5SUMS pgp_public_key ppl-0.11.2.tar.bz2 ppl-0.11.2.tar.bz2.sign ppl-0.11.2.tar.lzma
silvere@silvere-Linux:~/dev/src$ gpg --import pgp_public_key
gpg: key 517D0F0E: "Linux Kernel Archives Verification Key <ftpadmin@kernel.org>" not changed
gpg: key B5944392: "Roberto Bagnara <bagnara@cs.unipr.it>" not changed
gpg: Total number processed: 2
gpg: unchanged: 2
silvere@silvere-Linux:~/dev/src$ gpg --verify ppl-0.11.2.tar.bz2.sign ppl-0.11.2.tar.bz2
gpg: Signature made Sun 27 Feb 2011 09:57:07 GMT using DSA key ID B5944392
gpg: BAD signature from "Roberto Bagnara <bagnara@cs.unipr.it>"
silvere@silvere-Linux:~/dev/src$
What do you think I did wrong ?
Thank you very much,
Albert.
Hello Albert.We need more details about what you observe. Here are the
On 01/21/13 18:54, Albert Cluster wrote:
I know it's not particularly a development issue, but I'm trying to
download ppl sources to compile a cross-compilation tool chain but
What ever the source I download from the ftp server, i'm not able to
extract the source. It says that the file is corrupted.
Do you have any idea on how I could solve that issue ?
result of a small experiment performed just a few minutes ago:
$ mkdir /tmp/test
$ cd /tmp/test/
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/ppl-1.0.tar.bz2
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/MD5SUMS
$ md5sum --check MD5SUMS
ppl-1.0.tar.bz2: OK
md5sum: ppl-1.0.tar.gz: No such file or directory
ppl-1.0.tar.gz: FAILED open or read
md5sum: ppl-1.0.tar.xz: No such file or directory
ppl-1.0.tar.xz: FAILED open or read
md5sum: ppl-1.0.zip: No such file or directory
ppl-1.0.zip: FAILED open or read
md5sum: WARNING: 3 listed files could not be read
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/ppl-1.0.tar.bz2.sign
$ ls -l
total 15056
-rw-rw-r-- 1 roberto roberto 194 Jan 22 08:43 MD5SUMS
-rw-rw-r-- 1 roberto roberto 15405300 Jan 22 08:43 ppl-1.0.tar.bz2
-rw-rw-r-- 1 roberto roberto 198 Jan 22 08:44 ppl-1.0.tar.bz2.sign
$ gpg --verify ppl-1.0.tar.bz2.sign ppl-1.0.tar.bz2
gpg: Signature made Thu Jun 28 13:02:51 2012 CEST using DSA key ID B5944392
gpg: Good signature from "Roberto Bagnara <bagnara@cs.unipr.it>"
...
To reproduce the last step, please see
http://bugseng.com/products/ppl/download#verification
Of course, this only tested the bzip2 tarball. Which is the one
you found corrupted?Thanks to you for the report.
Have a nice day, and thank you for that software.
Kind regards,
Roberto
--
Prof. Roberto Bagnara
Applied Formal Methods Laboratory - University of Parma, Italy
mailto:bagnara@cs.unipr.it
BUGSENG srl - http://bugseng.com
mailto:roberto.bagnara@bugseng.com