Hi Roberto,
Thank you a lot for your advices.

I'm not familiar with signatures, but here is what I did (I tested that procedure on several other versions, but none worked...)

silvere@silvere-Linux:~/dev/src$ wget http://www.cs.unipr.it/~bagnara/pgp_public_key
silvere@silvere-Linux:~/dev/src$ ls
MD5SUMS  pgp_public_key  ppl-0.11.2.tar.bz2  ppl-0.11.2.tar.bz2.sign  ppl-0.11.2.tar.lzma
silvere@silvere-Linux:~/dev/src$ gpg --import pgp_public_key
gpg: key 517D0F0E: "Linux Kernel Archives Verification Key <ftpadmin@kernel.org>" not changed
gpg: key B5944392: "Roberto Bagnara <bagnara@cs.unipr.it>" not changed
gpg: Total number processed: 2
gpg:              unchanged: 2
silvere@silvere-Linux:~/dev/src$ gpg --verify ppl-0.11.2.tar.bz2.sign ppl-0.11.2.tar.bz2
gpg: Signature made Sun 27 Feb 2011 09:57:07 GMT using DSA key ID B5944392
gpg: BAD signature from "Roberto Bagnara <bagnara@cs.unipr.it>"
silvere@silvere-Linux:~/dev/src$

What do you think I did wrong ?

Thank you very much,

Albert.

2013/1/22 Roberto Bagnara <bagnara@cs.unipr.it>

Hello Albert.


On 01/21/13 18:54, Albert Cluster wrote:
I know it's not particularly a development issue, but I'm trying to
download ppl sources to compile a cross-compilation tool chain but
What ever the source I download from the ftp server, i'm not able to
extract the source. It says that the file is corrupted.

Do you have any idea on how I could solve that issue ?

We need more details about what you observe.  Here are the
result of a small experiment performed just a few minutes ago:

$ mkdir /tmp/test
$ cd /tmp/test/
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/ppl-1.0.tar.bz2
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/MD5SUMS
$ md5sum --check MD5SUMS
ppl-1.0.tar.bz2: OK
md5sum: ppl-1.0.tar.gz: No such file or directory
ppl-1.0.tar.gz: FAILED open or read
md5sum: ppl-1.0.tar.xz: No such file or directory
ppl-1.0.tar.xz: FAILED open or read
md5sum: ppl-1.0.zip: No such file or directory
ppl-1.0.zip: FAILED open or read
md5sum: WARNING: 3 listed files could not be read
$ wget -q ftp://ftp.cs.unipr.it/pub/ppl/releases/LATEST/ppl-1.0.tar.bz2.sign
$ ls -l
total 15056
-rw-rw-r-- 1 roberto roberto      194 Jan 22 08:43 MD5SUMS
-rw-rw-r-- 1 roberto roberto 15405300 Jan 22 08:43 ppl-1.0.tar.bz2
-rw-rw-r-- 1 roberto roberto      198 Jan 22 08:44 ppl-1.0.tar.bz2.sign
$ gpg --verify ppl-1.0.tar.bz2.sign ppl-1.0.tar.bz2
gpg: Signature made Thu Jun 28 13:02:51 2012 CEST using DSA key ID B5944392
gpg: Good signature from "Roberto Bagnara <bagnara@cs.unipr.it>"
...

To reproduce the last step, please see

  http://bugseng.com/products/ppl/download#verification

Of course, this only tested the bzip2 tarball.  Which is the one
you found corrupted?


Have a nice day, and thank you for that software.

Thanks to you for the report.
Kind regards,

    Roberto

--
     Prof. Roberto Bagnara

Applied Formal Methods Laboratory - University of Parma, Italy
mailto:bagnara@cs.unipr.it
                              BUGSENG srl - http://bugseng.com
                              mailto:roberto.bagnara@bugseng.com