unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed
* bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
@ 2023-03-17  0:16 Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
  2023-03-17  8:24 ` Philip Kaludercic
  0 siblings, 1 reply; 5+ messages in thread
From: Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors @ 2023-03-17  0:16 UTC (permalink / raw)
  To: 62230, philipk

Hello,

I have `package-check-signature` set to `all`. When I run the command
`package-vc-install`, it tries to download the file "elpa-package.eld"
from the archive.  However, this file is not signed, so the download fails.

When I disable the checking of signatures, the download succeeds.

It is possible to sign this file with the GNU ELPA key, just like the
file "archive-contents", which downloads successfully?

Thank you.






^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
  2023-03-17  0:16 bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
@ 2023-03-17  8:24 ` Philip Kaludercic
  2023-03-18 13:58   ` Stefan Monnier via Bug reports for GNU Emacs, the Swiss army knife of text editors
  0 siblings, 1 reply; 5+ messages in thread
From: Philip Kaludercic @ 2023-03-17  8:24 UTC (permalink / raw)
  To: Okamsn; +Cc: 62230, Stefan Monnier

Okamsn <okamsn@protonmail.com> writes:

> Hello,

Hi,

> I have `package-check-signature` set to `all`. When I run the command
> `package-vc-install`, it tries to download the file "elpa-package.eld"
> from the archive.  However, this file is not signed, so the download fails.
>
> When I disable the checking of signatures, the download succeeds.

I assume you have configured `package-check-signature' or something like
that?  Because I don't appear to have any issues fetching the file.

> It is possible to sign this file with the GNU ELPA key, just like the
> file "archive-contents", which downloads successfully?

It should be, but I actually don't know how it is generated or at least
I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
know.

> Thank you.

-- 
Philip Kaludercic





^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
  2023-03-17  8:24 ` Philip Kaludercic
@ 2023-03-18 13:58   ` Stefan Monnier via Bug reports for GNU Emacs, the Swiss army knife of text editors
  2023-03-18 17:14     ` Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
  0 siblings, 1 reply; 5+ messages in thread
From: Stefan Monnier via Bug reports for GNU Emacs, the Swiss army knife of text editors @ 2023-03-18 13:58 UTC (permalink / raw)
  To: Philip Kaludercic; +Cc: Okamsn, 62230

>> It is possible to sign this file with the GNU ELPA key, just like the
>> file "archive-contents", which downloads successfully?
> It should be, but I actually don't know how it is generated or at least
> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
> know.

Yes, that was an oversight  Should be fixed now,


        Stefan






^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
  2023-03-18 13:58   ` Stefan Monnier via Bug reports for GNU Emacs, the Swiss army knife of text editors
@ 2023-03-18 17:14     ` Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
  2023-03-18 17:28       ` Philip Kaludercic
  0 siblings, 1 reply; 5+ messages in thread
From: Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors @ 2023-03-18 17:14 UTC (permalink / raw)
  To: Stefan Monnier, Philip Kaludercic; +Cc: 62230

On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>> It is possible to sign this file with the GNU ELPA key, just like the
>>> file "archive-contents", which downloads successfully?
>> It should be, but I actually don't know how it is generated or at least
>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>> know.
>
> Yes, that was an oversight  Should be fixed now,
>
>
>          Stefan
>

The file now downloads successfully. I can see that it also downloaded
the signatures.

Thank you.






^ permalink raw reply	[flat|nested] 5+ messages in thread

* bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
  2023-03-18 17:14     ` Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
@ 2023-03-18 17:28       ` Philip Kaludercic
  0 siblings, 0 replies; 5+ messages in thread
From: Philip Kaludercic @ 2023-03-18 17:28 UTC (permalink / raw)
  To: Okamsn; +Cc: 62230-done, Stefan Monnier

Okamsn <okamsn@protonmail.com> writes:

> On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>>> It is possible to sign this file with the GNU ELPA key, just like the
>>>> file "archive-contents", which downloads successfully?
>>> It should be, but I actually don't know how it is generated or at least
>>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>>> know.
>>
>> Yes, that was an oversight  Should be fixed now,
>>
>>
>>          Stefan
>>
>
> The file now downloads successfully. I can see that it also downloaded
> the signatures.
>
> Thank you.

OK, I'll close this report then.  Thanks for noticing.





^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2023-03-18 17:28 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-03-17  0:16 bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
2023-03-17  8:24 ` Philip Kaludercic
2023-03-18 13:58   ` Stefan Monnier via Bug reports for GNU Emacs, the Swiss army knife of text editors
2023-03-18 17:14     ` Okamsn via Bug reports for GNU Emacs, the Swiss army knife of text editors
2023-03-18 17:28       ` Philip Kaludercic

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).