Subject: | broken signature again |
% cpansign -v
Executing gpg --verify --batch --no-tty
--keyserver=hkp://pgp.mit.edu:11371
--keyserver-options=auto-key-retrieve SIGNATURE
gpg: Signature made Mon Oct 23 08:25:45 2006 CEST using DSA key ID 108E4046
gpg: Good signature from "Jesse Vincent <jesse@cpan.org>"
gpg: aka "Jesse Vincent <jesse@fsck.com>"
gpg: aka "Jesse Vincent <jesse@bestpractical.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the
owner.
Primary key fingerprint: AB4A 62CF 1A1A 119A 0462 39D6 122F 5DF7 108E 4046
--- SIGNATURE Mon Oct 23 08:25:45 2006
+++ (current) Fri Nov 24 22:24:47 2006
@@ -1,6 +1,6 @@
-SHA1 3a345c84d4a5a678e457a1b3681ab75f4a1bb78d Changes
+SHA1 4a93e5126f3ef5d3501fb5d9df184ddf3741fef4 Changes
SHA1 0ac508c50476dcc2bf8fe3094cb341425291e1ee MANIFEST
-SHA1 35ad715e6f91b8692d8c183daca803bd61301b4e META.yml
+SHA1 0f36516cb5fb209a0f9342bcb8f2bf61b0a1d451 META.yml
SHA1 490f3fd115e09cb05b725580e5ed5cdd58241049 Makefile.PL
SHA1 ed0c107672daac3bc9e266876666e1059dbe44b7 README
SHA1 4ea1e9072ca87399184a46233df52a21e285604d ex/sample_server
@@ -12,9 +12,9 @@
SHA1 381bb98ea3877bba49ae85e7a7ea130645fd3dbf
inc/Module/Install/Metadata.pm
SHA1 0c2118868ef82ac517eb6d9c3bd93e6eb9bbf83e inc/Module/Install/Win32.pm
SHA1 e827d6d43771032fa3df35c0ad5e5698d0e54cda
inc/Module/Install/WriteAll.pm
-SHA1 eb4801495bff8da5254b1b8e6b4a1516946f64fe lib/HTTP/Server/Simple.pm
+SHA1 850419cbf149e9ff839572261233dac5e029d019 lib/HTTP/Server/Simple.pm
SHA1 40f24374f2b5845a3025e14ca4b91bd58298de03 lib/HTTP/Server/Simple/CGI.pm
-SHA1 d35644a882953f699442654299cac16fa158b502
lib/HTTP/Server/Simple/CGI/Environment.pm
+SHA1 47ef836a1cdd03add505dd4c90819cafb61dc565
lib/HTTP/Server/Simple/CGI/Environment.pm
SHA1 db064af54cab345a71daec576e32e64b8fb1033d t/00smoke.t
SHA1 b64150ac4ebc772f8b1f69455039e7ea3e067b3f t/01live.t
SHA1 aca95653cfce68912e08c57b3a4566207e2f99b3 t/02pod.t
==> MISMATCHED content between SIGNATURE and distribution files! <==
Best