From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Lizzie Dixon <_@lizzie.io> Newsgroups: gmane.emacs.bugs Subject: bug#22440: 25.1.50; package.el fails to install with package-check-signature t Date: Wed, 18 May 2016 21:39:05 -0700 Message-ID: <20160519043905.GA26569@empress> References: <87a8nxxgqu.fsf@udel.edu> <57381F2D.70007@cs.ucla.edu> <3ea72c05-4bdb-3301-aead-ea7eb25947bc@yandex.ru> <5738A8D5.5030206@cs.ucla.edu> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1463638403 29084 80.91.229.3 (19 May 2016 06:13:23 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 19 May 2016 06:13:23 +0000 (UTC) Cc: Mark Oteiza , 22440@debbugs.gnu.org, Artur Malabarba , Dmitry Gutov To: Paul Eggert Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu May 19 08:13:15 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1b3HCr-0002wp-0o for geb-bug-gnu-emacs@m.gmane.org; Thu, 19 May 2016 08:13:13 +0200 Original-Received: from localhost ([::1]:48507 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b3HCq-0003Y5-7k for geb-bug-gnu-emacs@m.gmane.org; Thu, 19 May 2016 02:13:12 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:60026) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b3HCk-0003Xm-CN for bug-gnu-emacs@gnu.org; Thu, 19 May 2016 02:13:07 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b3HCg-0007Si-2e for bug-gnu-emacs@gnu.org; Thu, 19 May 2016 02:13:05 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:45219) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b3HCf-0007SV-UX for bug-gnu-emacs@gnu.org; Thu, 19 May 2016 02:13:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1b3HCf-0003t3-Ls for bug-gnu-emacs@gnu.org; Thu, 19 May 2016 02:13:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lizzie Dixon <_@lizzie.io> Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 19 May 2016 06:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 22440 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 22440-submit@debbugs.gnu.org id=B22440.146363837714928 (code B ref 22440); Thu, 19 May 2016 06:13:01 +0000 Original-Received: (at 22440) by debbugs.gnu.org; 19 May 2016 06:12:57 +0000 Original-Received: from localhost ([127.0.0.1]:57556 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1b3HCX-0003se-F9 for submit@debbugs.gnu.org; Thu, 19 May 2016 02:12:56 -0400 Original-Received: from mail.lizzie.io ([192.241.221.211]:46482) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <_@lizzie.io>) id 1b3Fjw-0001Vz-95 for 22440@debbugs.gnu.org; Thu, 19 May 2016 00:39:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=lizzie.io; s=mail-lizzie-io; t=1463632750; bh=9gS9xw027e1neW0Mh3AHLrzAh8Zy0fRvJ6JUvHA0HAc=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=G964bLTMLDIyGvSJZLd3SYamkB7AH/EOMYhNoXB/eovF1TC448gtt13cBSd4NtPi4 h7vzNb4l6M9GnRFVhQxlVySSo+JoOcOB/U0BaUEKJ85y1Hz6OVWp1dlSko4S3vaCtS 6EX98TVB8BNAfJH0j/YbloWBeeLCRjIZcyurMmr0= Content-Disposition: inline In-Reply-To: <5738A8D5.5030206@cs.ucla.edu> X-Mailman-Approved-At: Thu, 19 May 2016 02:12:53 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:118443 Archived-At: On 05/15, Paul Eggert wrote: > Dmitry Gutov wrote: > > On 05/15/2016 10:03 AM, Paul Eggert wrote: > > > >> package-check-signature t means check package signatures when installing, and do > >> not install a package if it is unsigned. Which is what is happening, right? > > > > Aren't packages coming from GNU ELPA supposed to all be signed? > > Sorry, I don't know. I don't even know how to determine whether that particular > package is signed. You can tell because http://elpa.gnu.org/packages/async-1.9.tar.sig exists. $ curl -O 'http://elpa.gnu.org/packages/async-1.9.tar' % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 61440 100 61440 0 0 98420 0 --:--:-- --:--:-- --:--:-- 98304 $ curl -O 'http://elpa.gnu.org/packages/async-1.9.tar.sig' % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 96 100 96 0 0 254 0 --:--:-- --:--:-- --:--:-- 253 $ gpg --no-default-keyring --keyring /usr/share/emacs/25.0.93/etc/package-keyring.gpg --verify async-1.9.tar.sig gpg: assuming signed data in 'async-1.9.tar' gpg: Signature made Wed 18 May 2016 02:05:02 PM PDT using DSA key ID 7FBDEF9B gpg: Good signature from "GNU ELPA Signing Agent " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: CA44 2C00 F917 74F1 7F59 D9B0 474F 0583 7FBD EF9B