Subject: | MISMATCHED content between SIGNATURE and distribution files |
~/.cpan/build/SSN-Validate-0.13% cpansign -v
Executing gpg --verify --batch --no-tty --keyserver=hkp://pgp.mit.edu:11371 --keyserver-options=auto-key-retrieve SIGNATURE
gpg: Signature made Tue Sep 2 18:38:21 2003 CEST using DSA key ID 69C11924
gpg: Good signature from "Kevin Meltzer <kevin@saratogaperlguy.com>"
gpg: aka "Kevin Meltzer <perlguy@perlguy.com>"
gpg: aka "Kevin Meltzer <kevin@kevinmeltzer.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 0E51 765B BC43 F770 ACDF C3D8 5651 1C4C 69C1 1924
--- SIGNATURE Tue Sep 2 18:38:21 2003
+++ (current) Sun Jan 1 22:08:21 2006
@@ -1,16 +1,18 @@
-SHA1 d075eed9ebe5fbd51590f57a8525876c30f1e908 Changes
-SHA1 573dc0f5a85cc6469e860c316f40d772fec56713 MANIFEST
+SHA1 b00cbbd954abdd07f287bad4092e37d06508646a Changes
+SHA1 6df8dfe230444247859cde8003bf89ebce0afe2b MANIFEST
SHA1 381989652c51cdd78ab33a7e37d0f04f6dc93da7 MANIFEST.SKIP
+SHA1 fd047fbf78990ad91ce2f96c9826a1a7cbd792cb META.yml
Please note that newer MakeMaker versions support SIGNATURE better so that
you always sign during 'make dist' and such mismatch cannot occur anymore