svn-cur.01000xEmpty.xz.sig: BAD signature from "CTM Generator <ctm at freebsd.org>"

[Stephen Montgomery-Smith]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/08/2012 09:33 AM, Stephen Montgomery-Smith wrote:
> On 12/08/2012 07:00 AM, Gereon Kaiping wrote:
>> Hi,
> 
>> Switching my machine to svn-ctm, I encountered the following 
>> problem:
> 
>> $ gpg --verify svn-cur.01000xEmpty.xz.sig svn-cur.01000xEmpty.xz
>>  gpg: Signature made Fri Dec  7 21:57:25 2012 GMT using DSA key
>> ID C380B4D8 gpg: BAD signature from "CTM Generator
>> <ctm at freebsd.org>"
> 
>> The svn-cur.01000xEmpty.xz was obtained using $ fetch 
>> ftp://ftp.freebsd.org/pub/FreeBSD/CTM/svn-cur/svn-cur.01000xEmpty.xz
>
>> 
> 
> (with the same error also occurring when I tried
>> $ wget 
>> http://ftp.freebsd.org/pub/FreeBSD/CTM/svn-cur/svn-cur.01000xEmpty.xz
>
>> 
> 
> instead to obtain the file)
> 
>> The delta I got has SHA256 (svn-cur.01000xEmpty.xz) = 
>> 4bbe5a0eb8393a3b8050e8657ab1cdec4d36f887353d94d0e26b367bb573bfb8
> 
>> Has anybody else encountered this problem?
> 
> Yes:
> 
> http://lists.freebsd.org/pipermail/ctm-users/2012-December/000375.html
>
>  I am trying to fix it right now.
> 
> Your sha256 number looks good, so if you trust me, you should
> trust your xEmpty file.
> 

And if you don't trust me, svn-cur.00900xEmpty.xz looks like it has a
good signature.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJQw1/4AAoJEC3xK9GaktgHz+kIAI6rplO337E8Fa24yufHKUOS
Zd6jtVOWEc3GBfvbzvAIvRFB5+jPI8KpLJu2bufMpyVRiq8kGK7ZuJ7dAaEWs1cX
w4xzc5edBSTHsc6v/rkbfnTZYHgz5puY8NAHDQouDXVdaYckMyegzAgH9Xc0Ms6+
/rmqszCZBEUP9ia3uG8qQt1tblkFDeYyOm734rRJhYCdQzwYII0wkIfpbs1slTSm
PlkSM4ewx/DmkRgFJB1BqAI3RehuEVgR/3GcxQyL/01RozFbdFUfC9mc/rMEtDMb
9GtIRF3AnGVDrSJMVSMNWlUZZ9Cqe4w8TEf9/uD/Jb/yEU45rmpXXx/d4Jgc/5E=
=NSgS
-----END PGP SIGNATURE-----