From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Daniel Mendler via "Bug reports for GNU Emacs, the Swiss army knife of text editors" Newsgroups: gmane.emacs.bugs Subject: bug#72319: ELPA archive download fails with signature error during rebuild Date: Sat, 27 Jul 2024 12:51:07 +0200 Message-ID: <8734nvrtus.fsf@daniel-mendler.de> Reply-To: Daniel Mendler Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="6234"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: Stefan Monnier To: 72319@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Sat Jul 27 12:52:24 2024 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1sXf2F-0001TO-9C for geb-bug-gnu-emacs@m.gmane-mx.org; Sat, 27 Jul 2024 12:52:23 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sXf1r-0007sa-9i; Sat, 27 Jul 2024 06:51:59 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sXf1l-0007s8-MJ for bug-gnu-emacs@gnu.org; Sat, 27 Jul 2024 06:51:53 -0400 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sXf1l-0004bn-D0 for bug-gnu-emacs@gnu.org; Sat, 27 Jul 2024 06:51:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:Subject; bh=2bgWHmS3KK48LjJfdM+tvYhdCc/aBgJ2nH2EAE8ysBI=; b=AB8fx38u1nocD9jYVIVH7bPt6LupVHxeTMHIW8r5W4mISQ2D07GZjlhOXpWs21gXRD26bQOOfVF1JwmKRopyyhcudu5l7PxSIJwgeZvYIpRHw/ivUu5z+VxWsXetlsO29t1/TW5ShyOZTlSlr+o5SV95CH35mzSWiiWNEMybMz3f53O8iiUEo5BJ1epdvmlR4Zdn/s6oUsr1oL2R5bA1k6d1Nb1PbIHY0smcfnE3eDmhGjRSDjrU6KgusABtHc3wM4+H703ygoVoy5Fv+okp0jfqfBpeWMaZud+FDBm0xSMeqeI9Yikld17CRvZKc6RE+7H+gbVG1QIHLsNSO1JyYQ==; Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sXf1u-0005zT-6A; Sat, 27 Jul 2024 06:52:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Daniel Mendler Original-Sender: "Debbugs-submit" Resent-CC: monnier@iro.umontreal.ca, bug-gnu-emacs@gnu.org Resent-Date: Sat, 27 Jul 2024 10:52:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 72319 X-GNU-PR-Package: emacs X-Debbugs-Original-To: bug-gnu-emacs@gnu.org X-Debbugs-Original-Xcc: Stefan Monnier Original-Received: via spool by submit@debbugs.gnu.org id=B.172207750322993 (code B ref -1); Sat, 27 Jul 2024 10:52:01 +0000 Original-Received: (at submit) by debbugs.gnu.org; 27 Jul 2024 10:51:43 +0000 Original-Received: from localhost ([127.0.0.1]:40615 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sXf1a-0005yV-OE for submit@debbugs.gnu.org; Sat, 27 Jul 2024 06:51:43 -0400 Original-Received: from lists.gnu.org ([209.51.188.17]:54610) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sXf1Y-0005xv-7E for submit@debbugs.gnu.org; Sat, 27 Jul 2024 06:51:41 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sXf1O-0007pL-1k for bug-gnu-emacs@gnu.org; Sat, 27 Jul 2024 06:51:30 -0400 Original-Received: from server.qxqx.de ([2a01:4f8:c012:9177::1] helo=mail.qxqx.de) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sXf1M-0004YE-4u for bug-gnu-emacs@gnu.org; Sat, 27 Jul 2024 06:51:29 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=daniel-mendler.de; s=key; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=2bgWHmS3KK48LjJfdM+tvYhdCc/aBgJ2nH2EAE8ysBI=; b=FgVCKje5uRuJNh63Maw/gd6DLN YIqwuV6Cd07CkjaftitPDoPV81/DEE4OwM4lX7vsBIG/N+/+TW7wqEuN8p4thpLS6fKsGywvo7WVq LSoY+0S7ghJ9f2z300Qe1utk5XTBA6FjMPChVslaQ+27DE5mNIvTtYSnoA1CH6oadtos=; Received-SPF: pass client-ip=2a01:4f8:c012:9177::1; envelope-from=mail@daniel-mendler.de; helo=mail.qxqx.de X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:289422 Archived-At: The ELPA archive download fails during package archive rebuilding. The rebuilding process on the ELPA server happens twice every day (e.g., in the morning at 09:00 UTC or 11:00 local time in my time zone). As a package maintainer I receive mails that new package releases have been created at that time. When I execute M-x package-upgrade-all shortly afterwards, approximately in the time frame from 11:00 to 11:10, I observe the following failures: Failed to download =E2=80=98gnu=E2=80=99 archive. Failed to download =E2=80=98nongnu=E2=80=99 archive. Failed to verify signature archive-contents.sig: Bad signature from 645357D2883A0966 GNU ELPA Signing Agent (2023) Command output: gpg: Signature made Fri 26 Jul 2024 11:10:06 AM CEST gpg: using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966 gpg: BAD signature from "GNU ELPA Signing Agent (2023) " [unknown] I've already discussed with Stefan about this problem. The issue seems to be that the archive-contents file is updated during the archive building process, while the signature is only updated in the end. Ideally the update of the archive-contents file should happen a little more atomically: First build a new archive-contents file, sign it, and then replace the old files as the final step.