RAT (Release Audit Tool) results

The following document contains the results of RAT (Release Audit Tool).

*****************************************************
Summary
-------
Generated at: 2013-08-11T00:16:04+02:00
Notes: 3
Binaries: 3
Archives: 0
Standards: 48

Apache Licensed: 22
Generated Documents: 0

JavaDocs are generated and so license header is optional
Generated files do not required license headers

26 Unknown Licenses

*******************************

Unapproved licenses:

  ant-task-verifier.xml
  ant-task.xml
  build.xml
  pom.xml
  src/main/resources/org/apache/commons/openpgp/ant/antlib.xml
  src/site/apt/index.apt
  src/site/apt/signer.apt
  src/site/apt/usage.apt
  src/site/apt/verifier.apt
  src/site/site.xml
  src/test/resources/test-input
  src/test/resources/test-input-both-good.asc
  src/test/resources/test-input-both-missing.asc
  src/test/resources/test-input-dual-bad.asc
  src/test/resources/test-input-dual-both-good.asc
  src/test/resources/test-input-dual-both-missing.asc
  src/test/resources/test-input-dual-one-good-one-missing.asc
  src/test/resources/test-input-dual-one-missing-one-good.asc
  src/test/resources/test-input-one-bad-one-good.asc
  src/test/resources/test-input-one-good-one-bad.asc
  src/test/resources/test-input-one-good-one-missing.asc
  src/test/resources/test-input-one-missing-one-good.asc
  src/test/resources/test-input.asc
  src/test/resources/test-input.sig
  velocity.log
  verify-sigs.bat

*******************************

Archives:

*****************************************************
  Files with Apache License headers will be marked AL
  Binary files (which do not require AL headers) will be marked B
  Compressed archives will be marked A
  Notices, licenses etc will be marked N
 !????? ant-task-verifier.xml
 !????? ant-task.xml
 !????? build.xml
  N     LICENSE.txt
  N     NOTICE.txt
 !????? pom.xml
  N     README
  AL    src/main/assembly/bin.xml
  AL    src/main/assembly/src.xml
  AL    src/main/java/org/apache/commons/openpgp/ant/OpenPgpSignerTask.java
  AL    src/main/java/org/apache/commons/openpgp/ant/OpenPgpVerifierTask.java
  AL    src/main/java/org/apache/commons/openpgp/BouncyCastleKeyRing.java
  AL    src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSignatureVerifier.java
  AL    src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSigner.java
  AL    src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpStreamingSignatureVerifier.java
  AL    src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpStreamingSigner.java
  AL    src/main/java/org/apache/commons/openpgp/KeyRing.java
  AL    src/main/java/org/apache/commons/openpgp/OpenPgpException.java
  AL    src/main/java/org/apache/commons/openpgp/OpenPgpSignatureVerifier.java
  AL    src/main/java/org/apache/commons/openpgp/OpenPgpSigner.java
  AL    src/main/java/org/apache/commons/openpgp/OpenPgpStreamingSignatureVerifier.java
  AL    src/main/java/org/apache/commons/openpgp/OpenPgpStreamingSigner.java
  AL    src/main/java/org/apache/commons/openpgp/SignatureStatus.java
  AL    src/main/java/org/apache/commons/openpgp/UnknownKeyException.java
 !????? src/main/resources/org/apache/commons/openpgp/ant/antlib.xml
 !????? src/site/apt/index.apt
 !????? src/site/apt/signer.apt
 !????? src/site/apt/usage.apt
 !????? src/site/apt/verifier.apt
 !????? src/site/site.xml
  AL    src/site/xdoc/issue-tracking.xml
  AL    src/site/xdoc/mail-lists.xml
  AL    src/test/java/org/apache/commons/openpgp/BouncyCastleKeyRingTest.java
  AL    src/test/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSignerTest.java
  AL    src/test/java/org/apache/commons/openpgp/BouncyCastleOpenPgpStreamingSignerTest.java
  B     src/test/resources/pubring.gpg
  B     src/test/resources/secring.gpg
 !????? src/test/resources/test-input
 !????? src/test/resources/test-input-both-good.asc
 !????? src/test/resources/test-input-both-missing.asc
 !????? src/test/resources/test-input-dual-bad.asc
 !????? src/test/resources/test-input-dual-both-good.asc
 !????? src/test/resources/test-input-dual-both-missing.asc
 !????? src/test/resources/test-input-dual-one-good-one-missing.asc
 !????? src/test/resources/test-input-dual-one-missing-one-good.asc
 !????? src/test/resources/test-input-one-bad-one-good.asc
 !????? src/test/resources/test-input-one-good-one-bad.asc
 !????? src/test/resources/test-input-one-good-one-missing.asc
 !????? src/test/resources/test-input-one-missing-one-good.asc
 !????? src/test/resources/test-input.asc
  B     src/test/resources/test-input.bpg
 !????? src/test/resources/test-input.sig
 !????? velocity.log
 !????? verify-sigs.bat
 
 *****************************************************
 Printing headers for files without AL header...
 
 
 =======================================================================
 ==ant-task-verifier.xml
 =======================================================================
<project name="test1" xmlns:openpgp="antlib:org.apache.commons.openpgp.ant">
  <property environment="env"/>
  <taskdef resource="org/apache/commons/openpgp/ant/antlib.xml" uri="antlib:org.apache.commons.openpgp.ant"/>
  <openpgp:verifier secring="${env.USERPROFILE}\Application Data\gnupg\secring.gpg"
    pubring="${env.USERPROFILE}\Application Data\gnupg\pubring.gpg"
    password="secret"
    artefact="target\commons-openpgp-1.0-SNAPSHOT.jar"
    asciiarmor="true"
    verifyproperty="isValidSignature"/>
  <echo message="The signature is vaild: ${isValidSignature}"/>
</project>

 =======================================================================
 ==ant-task.xml
 =======================================================================
<project name="test1" xmlns:openpgp="antlib:org.apache.commons.openpgp.ant">
  <property environment="env"/>
  <taskdef resource="org/apache/commons/openpgp/ant/antlib.xml" uri="antlib:org.apache.commons.openpgp.ant"/>
  <!--<openpgp:signer secring="${env.USERPROFILE}\Application Data\gnupg\secring.gpg"-->
    <!--pubring="${env.USERPROFILE}\Application Data\gnupg\pubring.gpg"-->
    <!--password="Scaspivi" keyid="AF5EC452"-->
    <!--artefact="target\commons-openpgp-1.0-SNAPSHOT.jar"-->
    <!--asciiarmor="true"/>-->
  <openpgp:verifier secring="${env.USERPROFILE}\Application Data\gnupg\secring.gpg"
    pubring="${env.USERPROFILE}\Application Data\gnupg\pubring.gpg"
    password="Scaspivi"
    artefact="target\commons-openpgp-1.0-SNAPSHOT.jar"
    asciiarmor="true"
    verifyproperty="isValidSignature"/>
  <echo message="The signature is vaild: ${isValidSignature}"/>
</project>

 =======================================================================
 ==build.xml
 =======================================================================
<?xml version="1.0"?>

<!--
  =======================================================================
   Minimal Apache Ant build file for commons-openpgp

   Copyright (c) 2005 The Apache Software Foundation.  All rights
   reserved.

  =======================================================================
-->
<project name="commons-openpgp" default="jar" basedir=".">

  <target name="properties">
    <property name="build.target.dir" location="target"/>
    <property name="build.classes.dir" location="${build.target.dir}/classes"/>
    <property name="build.tests.dir"
              location="${build.target.dir}/test-classes"/>

    <property name="build.junit.fork" value="false"/>
    <property name="build.junit.forkmode" value="once"/>
    <property name="build.jar.basename" value="commons-openpgp"/>
    <property name="build.jar.version" value="0.1"/>
    <property name="build.jar.name"
      value="${build.target.dir}/${build.jar.basename}-${build.jar.version}.jar"/>
  </target>

  <target name="setup" depends="properties">
    <mkdir dir="${build.classes.dir}"/>
    <mkdir dir="${build.tests.dir}"/>

    <!-- feel free to get fancy using the Maven 2 Ant tasks, this is
         just a placeholder for now -->
    <path id="compilation-dependencies">
    </path>
    <path id="test-dependencies">
    </path>
  </target>

  <target name="compile" depends="setup">
    <javac srcdir="src/main/java" destdir="${build.classes.dir}"
      source="1.3" target="1.3" debug="true">
      <classpath refid="compilation-dependencies"/>
    </javac>
  </target>

  <target name="compile-tests" depends="compile" unless="skip.tests!">
    <javac srcdir="src/test/java" destdir="${build.tests.dir}"
      source="1.3" target="1.3" debug="true">
      <classpath id="test-classpath">

 =======================================================================
 ==pom.xml
 =======================================================================
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  <modelVersion>4.0.0</modelVersion>
  <parent>
    <groupId>org.apache.commons</groupId>
    <artifactId>commons-sandbox-parent</artifactId>
    <version>10</version>
  </parent>
  <artifactId>commons-openpgp</artifactId>
  <version>1.0-SNAPSHOT</version>
  <name>Commons OpenPGP (Sandbox)</name>
  <url>http://commons.apache.org/sandbox/openpgp/</url>
  <inceptionYear>2005</inceptionYear>

  <dependencies>
    <dependency>
      <groupId>org.bouncycastle</groupId>
      <artifactId>bcpg-jdk15on</artifactId>
      <version>1.49</version>
    </dependency>
    <dependency>
      <groupId>junit</groupId>
      <artifactId>junit</artifactId>
      <version>4.11</version>
      <scope>test</scope>
    </dependency>
    <dependency>
      <groupId>org.apache.ant</groupId>
      <artifactId>ant</artifactId>
      <version>1.8.4</version>
      <scope>provided</scope>
    </dependency>
  </dependencies>

  <build>
    <resources>
      <resource>
        <directory>src/main/resources</directory>
        <filtering>true</filtering>
      </resource>
    </resources>
    <plugins>
      <plugin>
        <!-- create the source and binary assemblies -->
        <artifactId>maven-assembly-plugin</artifactId>
        <configuration>
          <descriptors>
            <descriptor>src/main/assembly/bin.xml</descriptor>
            <descriptor>src/main/assembly/src.xml</descriptor>
          </descriptors>

 =======================================================================
 ==src/main/resources/org/apache/commons/openpgp/ant/antlib.xml
 =======================================================================
<?xml version="1.0"?>
<antlib>
   <taskdef name="signer"
            classname="org.apache.commons.openpgp.ant.OpenPgpSignerTask"
            />
   <taskdef name="verifier"
            classname="org.apache.commons.openpgp.ant.OpenPgpVerifierTask"
            />
</antlib>

 =======================================================================
 ==src/site/apt/index.apt
 =======================================================================
 -----
 Home
 -----
 Brett Porter
 -----
 10 December 2005
 -----
 
Commons OpenPGP
 
  Commons OpenPGP was started to produce a common and simple interface for generating
  and verifying OpenPGP signatures.
  
  Currently implemented using {{{http://www.bouncycastle.org} BouncyCastle}}, it is
  intended to allow pluggable providers so that alternate open source and commercial
  providers can be used.
  
* History

  The library was started by Maven and Ant committers to enable the use of OpenPGP
  from these tools. Currently, Maven uses it in its development version to sign
  libraries released to the repository.
 
* Using the Library

  * {{{./usage.html} Usage Instructions}}
  

 =======================================================================
 ==src/site/apt/signer.apt
 =======================================================================
 -----
 Signer Ant Task
 -----
 Antoine Levy-Lambert
 -----
 12 October 2006
 -----

Signer Ant Task

 This task will be packaged in the <<<commons-openpgp.jar>>>.
 It will use the BouncyCastle JARs at runtime. It has been tested with <<<bcpg-jdk12-134.jar>>> and <<<bcprov-jdk12-134.jar>>>.
 The generated signatures can be verified with GPG.

 The <<<signer>>> task can sign one or more files at once.

* Attributes

*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
|| Attribute       || Description                                                             || Required                                       |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<secring>>>    | Secret key ring file.                                                    | Yes                                             |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<pubring>>>    | Public key ring file.                                                    | Yes                                             |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<password>>>   | Password of the secret key ring.                                         | Yes                                             |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<keyid>>>      | Id of the key used to sign.                                              | Yes                                             |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<asciiarmor>>> | Whether to use ASCII armor. Boolean, defaults to <<<true>>>.             | No                                              |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<artefact>>>   | The file that you want to sign.                                          | No, if a fileset nested element is present.     |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+

  The task must also take either one or more nested <<<fileset>>> elements, or an <<<artefact>>> attribute.

** <<<fileset>>> nested element

  The task can take one or more <<<fileset>>> nested elements.
  See the {{{http://ant.apache.org/manual/CoreTypes/fileset.html} Ant manual}} for an explanation.
  If you want to sign just one file, the <<<artefact>>> attribute can be used instead.

** <<<mapper>>> nested element

  The task may take a {{{http://ant.apache.org/manual/CoreTypes/mapper.html} mapper}} nested element.
  This nested element tells the task how the signature files should be named.
  If you do not supply this element, the signature files will be located in the same directory as the files that
  you sign. An ending of <<<.asc>>> will be appended to the file name for ASCII armored output (the default).
  If you set <<<asciiarmor>>> to false, the ending will be <<<.sig>>>


 =======================================================================
 ==src/site/apt/usage.apt
 =======================================================================
 -----
 Usage
 -----
 Brett Porter
 -----
 10 December 2005
 -----
 
Usage Instructions
 
  Currently only creation and verification of detached signatures is supported. This can be done in streaming and
  non-streaming mode.

  Both modes require that you have created a key ring.
  
* Creating a Key Ring

  A key ring object needs to be created, containing an input stream for both the public and secret key rings.
  The password for the secret key ring also needs to be passed in for creating signatures.
  
  For example, to create the Bouncy Castle key ring, the constructor is used:

-----
BouncyCastleKeyRing( InputStream secretKeyRing, InputStream publicKeyRing, char[] password );
-----

* Non-streaming Mode

  ~~TODO: link to Javadoc

  To sign data with a detached signature, create a <<<OpenPgpSigner>>>.
  
-----
signer = new BouncyCastleOpenPgpSigner();

signer.detachedSign(
  getClass().getResourceAsStream( "/test-input" ),  // binary input file
  signature,                                        // outputstream for the signature
  keyId,                                            // key ID
  keyRing,
  true );                                           // ascii armor?
-----

  Verifying the signature is similar.

-----
verifier = new BouncyCastleOpenPgpSignatureVerifier();

SignatureStatus status = verifier.verifyDetachedSignature(
  getClass().getResourceAsStream( "/test-input" ),  // binary input file

 =======================================================================
 ==src/site/apt/verifier.apt
 =======================================================================
 -----
 Verifier Ant Task
 -----
 Dennis Lundberg
 -----
 2010-04-17
 -----

Verifier Ant Task

 This task is packaged in <<<commons-openpgp.jar>>>.
 It will use the BouncyCastle JARs at runtime. It has been tested with <<<bcpg-jdk12-134.jar>>> and <<<bcprov-jdk12-134.jar>>>.

 The <<<verifier>>> task can verify one file at a time.

* Attributes

*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
|| Attribute           || Description                                                             || Required                                       |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<secring>>>        | Secret key ring file.                                                    | Yes                                             |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<pubring>>>        | Public key ring file.                                                    | Yes                                             |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<password>>>       | Password of the secret key ring.                                         | Yes                                             |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<asciiarmor>>>     | Whether the signature is ASCII armored. Boolean, defaults to <<<true>>>. | No                                              |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<artefact>>>       | The file that you want to verify.                                        | Yes                                             |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<<verifyproperty>>> | The name of the property that will hold the result of the verification.  | Yes                                             |
*----------------------+--------------------------------------------------------------------------+-------------------------------------------------+

** <<<mapper>>> nested element

  The task may take a {{{http://ant.apache.org/manual/CoreTypes/mapper.html} mapper}} nested element.
  This nested element tells the task how the signature files should be named.
  If you do not supply this element, the signature files should be located in the same directory as the file that
  you verify. An ending of <<<.asc>>> will be used for the file name for ASCII armored input (the default).
  If you set <<<asciiarmor>>> to false, the ending will be <<<.sig>>>


* Example

-----
<project name="test1" xmlns:openpgp="antlib:org.apache.commons.openpgp.ant">
  <property environment="env"/>
  <taskdef resource="org/apache/commons/openpgp/ant/antlib.xml" uri="antlib:org.apache.commons.openpgp.ant"/>
  <openpgp:verifier secring="${env.USERPROFILE}\Application Data\gnupg\secring.gpg"
    pubring="${env.USERPROFILE}\Application Data\gnupg\pubring.gpg"

 =======================================================================
 ==src/site/site.xml
 =======================================================================
<?xml version="1.0" encoding="ISO-8859-1"?>
<project name="Commons OpenPGP">
  <body>
    <links>
      <item name="Bouncy Castle" href="http://www.bouncycastle.org" />
      <!-- 
      <item name="OpenPGP" href="http://www.openpgp.org"/>
       -->
    </links>

    <menu name="Commons OpenPGP">
      <item name="Overview" href="/index.html" />
      <item name="Usage" href="/usage.html" />
    </menu>

    <menu name="Ant Tasks">
      <item name="Signer" href="/signer.html"/>
      <item name="Verifier" href="/verifier.html"/>
    </menu>

    <menu name="Development">
      <item name="Mailing Lists"           href="/mail-lists.html"/>
      <item name="Issue Tracking"          href="/issue-tracking.html"/>
      <item name="Team"                    href="/team-list.html"/>
      <item name="Source Repository"       href="/source-repository.html"/>
      <item name="Javadoc (latest)"        href="/apidocs/index.html"/>
    </menu>

  </body>
</project>

 =======================================================================
 ==src/test/resources/test-input
 =======================================================================
The quick brown fox jumps over the lazy dog
quick brown fox jumps over the lazy dog The
brown fox jumps over the lazy dog The quick
fox jumps over the lazy dog The quick brown
jumps over the lazy dog The quick brown fox
over the lazy dog The quick brown fox jumps
the lazy dog The quick brown fox jumps over
lazy dog The quick brown fox jumps over the
dog The quick brown fox jumps over the lazy


 =======================================================================
 ==src/test/resources/test-input-both-good.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK4HcACgkQCtKsbObCq2gIdgCg5wHhcFDpyV+NL/aHgCjasqKT
D98AoMQpyypSxgBa7YfWJYSxl8sFTa8b
=0FaX
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK2z4ACgkQTusOMqfRa9RyaACgqlksDFIk0d+QPdKU/SbILziV
lI0AoLc96b0qxW4ATj0jCAVfPvjF6FGi
=pKye
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-both-missing.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK22oACgkQxbsDNW2stZYkXwCfaPVm6RtlnipJKqCl0HS1lHmK
g/4AoJmi7Y3soNucEvzUd3RcYGtZKfG0
=1I3h
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK238ACgkQBZj5naYwbBqOOwCfTyaDEAh5R/X1KcBDhtE+Ad0n
dtYAn2NcP5HrZd1u1eniye9Mu+bP/7id
=GLaF
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-dual-bad.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK7HAACgkQTusOMqfRa9ShnwCcC3ePdig3dJl2LUHIKshpDISQ
fNQAoJBEF9h+A6q5RYtJ85gsy5ouwEK6iEYEABECAAYFAkiK7HAACgkQCtKsbObC
q2ihnwCgxLzsxpkuNFXSmqDYr6FVQjLCRNYAnR397d1XkRGAl3+MkTwlxXDd84TE
=REvD
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-dual-both-good.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK7L0ACgkQTusOMqfRa9SErACfTXAvqffjiEuo3NAWe8yyLq4W
zD4An3Bahy/AotWAsxEwIR5JpcUedykdiEYEABECAAYFAkiK7L0ACgkQCtKsbObC
q2iErACg3uLtPlq2gVMj1C1s4kZ9vWAzA4IAn3qhEAxmjwl02uqLPRd9yFnT0r6Q
=87kc
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-dual-both-missing.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK7WYACgkQxbsDNW2stZbyegCbBRTFzYNwZ7276aFKm/3EyGj5
7V4AoIIVHZSNRVSlXOGHemI5q20fwkTjiEYEABECAAYFAkiK7WYACgkQBZj5naYw
bBryegCfR4i/Ey2V0/BIikXBlpJi7qu3i9YAnRTox0uVh1Kcmp1/TFhXkcS6OUcd
=kilw
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-dual-one-good-one-missing.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK7SYACgkQxbsDNW2stZaDsQCePz9bg/LS1ZpjwoBAMAbhIvFb
/KkAnR92Rq42/NAN5Clubp3f8ESeURuGiEYEABECAAYFAkiK7SYACgkQTusOMqfR
a9SDsQCg17TBUS+FCNDYKU95ZFQtecSg/fgAnilXfAeFaelG+HHgg1lfP0yJpVSF
=XvTx
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-dual-one-missing-one-good.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK7OgACgkQTusOMqfRa9T6nACglTPtDb3O3SZUzweVpBD1D2FI
HMkAoLSaB41kzDCNYIihEJQMNZg3+4IriEYEABECAAYFAkiK7OgACgkQxbsDNW2s
tZb6nACdGVPYzUB58q3ZWK3m3vQSYyG9NH4AmwcYsUsKSO7wsrhJeot6t7Loz5uw
=DB9I
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-one-bad-one-good.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK6o4ACgkQTusOMqfRa9Se9wCeJGrkiHCFCgRDDPTpehRFkHny
98EAoIz4/ZE+olTPHGk8tcaBluSXByoX
=qCN7
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK2z4ACgkQTusOMqfRa9RyaACgqlksDFIk0d+QPdKU/SbILziV
lI0AoLc96b0qxW4ATj0jCAVfPvjF6FGi
=pKye
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-one-good-one-bad.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK2z4ACgkQTusOMqfRa9RyaACgqlksDFIk0d+QPdKU/SbILziV
lI0AoLc96b0qxW4ATj0jCAVfPvjF6FGi
=pKye
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK6o4ACgkQTusOMqfRa9Se9wCeJGrkiHCFCgRDDPTpehRFkHny
98EAoIz4/ZE+olTPHGk8tcaBluSXByoX
=qCN7
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-one-good-one-missing.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK2z4ACgkQTusOMqfRa9RyaACgqlksDFIk0d+QPdKU/SbILziV
lI0AoLc96b0qxW4ATj0jCAVfPvjF6FGi
=pKye
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK22oACgkQxbsDNW2stZYkXwCfaPVm6RtlnipJKqCl0HS1lHmK
g/4AoJmi7Y3soNucEvzUd3RcYGtZKfG0
=1I3h
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input-one-missing-one-good.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK22oACgkQxbsDNW2stZYkXwCfaPVm6RtlnipJKqCl0HS1lHmK
g/4AoJmi7Y3soNucEvzUd3RcYGtZKfG0
=1I3h
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkiK2z4ACgkQTusOMqfRa9RyaACgqlksDFIk0d+QPdKU/SbILziV
lI0AoLc96b0qxW4ATj0jCAVfPvjF6FGi
=pKye
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input.asc
 =======================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEABECAAYFAkh1iI4ACgkQTusOMqfRa9TqvwCggGd9MXU4+9YKAohx+n2HIvKZ
8S4An1yw871Lq44DnNaI6U4BXTnD6knm
=84SX
-----END PGP SIGNATURE-----

 =======================================================================
 ==src/test/resources/test-input.sig
 =======================================================================
ˆF????????Huˆ‚?
	?Në?2§ÑkÔ“K? ›i£=¼ÉP? ??hTÛ™úŽ$z?? Äk¥p5↩?IJГèÐÃG{#

 =======================================================================
 ==velocity.log
 =======================================================================
Sat Jan 13 01:17:15 CET 2007  [debug] AvalonLogSystem initialized using logfile 'velocity.log'
Sat Jan 13 01:17:15 CET 2007   [info] ************************************************************** 
Sat Jan 13 01:17:15 CET 2007   [info] Starting Jakarta Velocity v1.4
Sat Jan 13 01:17:15 CET 2007   [info] RuntimeInstance initializing.
Sat Jan 13 01:17:15 CET 2007   [info] Default Properties File: org\apache\velocity\runtime\defaults\velocity.properties
Sat Jan 13 01:17:15 CET 2007   [info] Trying to use logger class org.apache.velocity.runtime.log.AvalonLogSystem
Sat Jan 13 01:17:15 CET 2007   [info] Using logger class org.apache.velocity.runtime.log.AvalonLogSystem
Sat Jan 13 01:17:15 CET 2007   [info] Default ResourceManager initializing. (class org.apache.velocity.runtime.resource.ResourceManagerImpl)
Sat Jan 13 01:17:15 CET 2007   [info] Resource Loader Instantiated: org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] FileResourceLoader : initialization starting.
Sat Jan 13 01:17:15 CET 2007   [info] FileResourceLoader : adding path 'C:\Documents and Settings\dlg01\.maven\cache\maven-xdoc-plugin-1.9.2\plugin-resources/templates'
Sat Jan 13 01:17:15 CET 2007   [info] FileResourceLoader : initialization complete.
Sat Jan 13 01:17:15 CET 2007   [info] ResourceCache : initialized. (class org.apache.velocity.runtime.resource.ResourceCacheImpl)
Sat Jan 13 01:17:15 CET 2007   [info] Default ResourceManager initialization complete.
Sat Jan 13 01:17:15 CET 2007   [info] Loaded System Directive: org.apache.velocity.runtime.directive.Literal
Sat Jan 13 01:17:15 CET 2007   [info] Loaded System Directive: org.apache.velocity.runtime.directive.Macro
Sat Jan 13 01:17:15 CET 2007   [info] Loaded System Directive: org.apache.velocity.runtime.directive.Parse
Sat Jan 13 01:17:15 CET 2007   [info] Loaded System Directive: org.apache.velocity.runtime.directive.Include
Sat Jan 13 01:17:15 CET 2007   [info] Loaded System Directive: org.apache.velocity.runtime.directive.Foreach
Sat Jan 13 01:17:15 CET 2007   [info] Created: 20 parsers.
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : initialization starting.
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : adding VMs from VM library template : VM_global_library.vm
Sat Jan 13 01:17:15 CET 2007  [error] ResourceManager : unable to find resource 'VM_global_library.vm' in any resource loader.
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : error using  VM library template VM_global_library.vm : org.apache.velocity.exception.ResourceNotFoundException: Unable to find resource 'VM_global_library.vm'
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro :  VM library template macro registration complete.
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : allowInline = true : VMs can be defined inline in templates
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : allowInlineToOverride = false : VMs defined inline may NOT replace previous VM definitions
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : allowInlineLocal = false : VMs defined inline will be  global in scope if allowed.
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : messages on  : VM system will output logging messages
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : autoload off  : VM system will not automatically reload global library macros
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : initialization complete.
Sat Jan 13 01:17:15 CET 2007   [info] Velocity successfully started.
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found cvs-usage.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007  [error] RHS of #set statement is null. Context will not be modified. cvs-usage.xml [line 31, column 9]
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found index.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found maven-reports.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007  [error] RHS of #set statement is null. Context will not be modified. maven-reports.xml [line 43, column 1]
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found dependencies.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found issue-tracking.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] Velocimacro : added new VM : #displayLink( label link ) : source = mail-lists.xml
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found mail-lists.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found project-info.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader
Sat Jan 13 01:17:15 CET 2007   [info] ResourceManager : found team-list.xml with loader org.apache.velocity.runtime.resource.loader.FileResourceLoader

 =======================================================================
 ==verify-sigs.bat
 =======================================================================
gpg --verify %1.asc %1