Re: log4j 2.15.0 signature and sha512 hash
Matt Sicker <[email protected]>
| Newsgroups | gmane.comp.jakarta.log4j.user |
|---|---|
| Message-ID | <CACmp6koxBo8nkiYOGW_q_qf-_=JvATe-wM+vcRGNU7aNaOdvZg@mail.gmail.com> |
Did you import the keys from our keys file? That should make the signatures authenticate. On Mon, Dec 13, 2021 at 10:52 AM Daniel Savard <[email protected]> wrote: > > Hi everyone, > > I am trying to authenticate the log4j-2.15 code downloaded from the > apache.org site and the sha512 file doesn't contain a sha512 hash at all > and the signature file (.asc) failed to authenticate the parent file. > > Anyone can fix this? I cannot patch our system with unauthenticated code. > Please, provide correct files and authentication files. > > Regards, > ----------------- > Daniel Savard