bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Van L]

Hello,

On a newly configured OS with basic emacs settings in ~/.emacs.d/init.el the following packages do install: which-key, hyperbole.

M-x list-packages updates the ~/.emacs.d/init.el with

--8<---------------cut here---------------start------------->8---
(package-initialize)
--8<---------------cut here---------------end--------------->8---

But, the Org Mode package fails to install leaving a mention of 'https://elpa.gnu.org/packages/org-9.2.3.tar' in the messages area where it is stuck in the muck.

After installing wget, I am able  

  wget https://elpa.gnu.org/packages/org-9.2.3.tar

to download ok.

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Lars Ingebrigtsen]

Van L <van@scratch.space> writes:

> On a newly configured OS with basic emacs settings in
> ~/.emacs.d/init.el the following packages do install: which-key,
> hyperbole.
>
> M-x list-packages updates the ~/.emacs.d/init.el with
>
> (package-initialize)
>
> But, the Org Mode package fails to install leaving a mention of
> 'https://elpa.gnu.org/packages/org-9.2.3.tar' in the messages area
> where it is stuck in the muck.

I'm not quite sure I follow -- you try to install org from ELPA, but it
fails?  Do you get any error messages?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[VanL]

> On 9 Jul 2019, at 12:06, Lars Ingebrigtsen <larsi@gnus.org> wrote:
> 
> I'm not quite sure I follow -- you try to install org from ELPA, but it
> fails?  Do you get any error messages?

Yes, there was an error message but I've forgotten it.

What I did was list and install packages without any settings for package-archives in the init.el.  This was possible for which-key and hyperbole.  The install process failed to complete for org from gnu/elpa.  

Setting the ("org" . "https://orgmode.org/elpa/") as part of package-archives enabled org from orgmode/elpa to install.

To be clear. Without the following section at the top of init.el, I was able to install which-key and hyperbole but not org.

--8<---------------cut here---------------start------------->8---
;;; package management
(require 'package)
(package-initialize)
(setq package-archives '(("gnu" . "https://elpa.gnu.org/packages/")
			 ("org" . "https://orgmode.org/elpa/")
			 ("melpa" . "https://melpa.org/packages/")))
--8<---------------cut here---------------end--------------->8---

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Lars Ingebrigtsen]

VanL <van@scratch.space> writes:

>> On 9 Jul 2019, at 12:06, Lars Ingebrigtsen <larsi@gnus.org> wrote:
>> 
>> I'm not quite sure I follow -- you try to install org from ELPA, but it
>> fails?  Do you get any error messages?
>
> Yes, there was an error message but I've forgotten it.
>
> What I did was list and install packages without any settings for
> package-archives in the init.el.  This was possible for which-key and
> hyperbole.  The install process failed to complete for org from
> gnu/elpa.
>
> Setting the ("org" . "https://orgmode.org/elpa/") as part of
> package-archives enabled org from orgmode/elpa to install.
>
> To be clear. Without the following section at the top of init.el, I
> was able to install which-key and hyperbole but not org.
>
> ;;; package management
> (require 'package)
> (package-initialize)
> (setq package-archives '(("gnu" . "https://elpa.gnu.org/packages/")
> 			 ("org" . "https://orgmode.org/elpa/")
> 			 ("melpa" . "https://melpa.org/packages/")))

I still don't quite understand -- you should be able to install the
packages without having any of that stuff in init.el, surely?

If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
list, and I can install it.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[VanL]

> On 9 Jul 2019, at 22:12, Lars Ingebrigtsen <larsi@gnus.org> wrote:
> 
> I still don't quite understand -- you should be able to install the
> packages without having any of that stuff in init.el, surely?

I was able to install which-key and hyperbole, only.

> If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
> list, and I can install it.

I am able to reproduce the problem after relabelling ~/.emacs.d to ~/__dot__emacs.d and invoking 'emacs -Q' then 'M-x list-packages'.

In trying to install org-9.2.3, a question in a dialogue box asks for Yes or No answer to 

  Buffer " *http elpa.gnu.org:443* has a running process; kill it?"

I say Yes and the error message is

  Failed to verify signature: "org-9.2.3.tar.sig"

The error help buffer has...

--8<---------------cut here---------------start------------->8---
Failed to verify signature org-9.2.3.tar.sig:
Bad signature from 474F05837FBDEF9B GNU ELPA Signing Agent <elpasign@elpa.gnu.org>
Command output:
gpg: Signature made Thu Apr 25 09:12:24 2019 AEST using DSA key ID 7FBDEF9B
gpg: BAD signature from "GNU ELPA Signing Agent <elpasign@elpa.gnu.org>"
--8<---------------cut here---------------end--------------->8---

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Lars Ingebrigtsen]

VanL <van@scratch.space> writes:

>> If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
>> list, and I can install it.
>
> I am able to reproduce the problem after relabelling ~/.emacs.d to
> ~/__dot__emacs.d and invoking 'emacs -Q' then 'M-x list-packages'.

(You shouldn't need to rename anything if you use "emacs -Q", I think?)

> In trying to install org-9.2.3, a question in a dialogue box asks for
> Yes or No answer to
>
>   Buffer " *http elpa.gnu.org:443* has a running process; kill it?"

Huh.  "http"?  Did Emacs 26.1 try to download from http instead of
https?  Perhaps that's the problem?  Does this ring a bell with anybody?

> I say Yes and the error message is
>
>   Failed to verify signature: "org-9.2.3.tar.sig"
>
> The error help buffer has...
>
> Failed to verify signature org-9.2.3.tar.sig:
> Bad signature from 474F05837FBDEF9B GNU ELPA Signing Agent <elpasign@elpa.gnu.org>
> Command output:
> gpg: Signature made Thu Apr 25 09:12:24 2019 AEST using DSA key ID 7FBDEF9B

That's natural, because you probably didn't get the package downloaded,
so it compares the signature of null with the expected signature...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Noam Postavsky]

Lars Ingebrigtsen <larsi@gnus.org> writes:

> VanL <van@scratch.space> writes:
>
>>> If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
>>> list, and I can install it.
>>
>> I am able to reproduce the problem after relabelling ~/.emacs.d to
>> ~/__dot__emacs.d and invoking 'emacs -Q' then 'M-x list-packages'.
>
> (You shouldn't need to rename anything if you use "emacs -Q", I think?)

Even with 'emacs -Q', package.el may consult cached downloads from
~/.emacs.d/elpa, so it's safest to rename, or use a temp HOME directory
to test this.

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Stefan Kangas]

Lars Ingebrigtsen <larsi@gnus.org> writes:
> > The error help buffer has...
> >
> > Failed to verify signature org-9.2.3.tar.sig:
> > Bad signature from 474F05837FBDEF9B GNU ELPA Signing Agent <elpasign@elpa.gnu.org>
> > Command output:
> > gpg: Signature made Thu Apr 25 09:12:24 2019 AEST using DSA key ID 7FBDEF9B
>
> That's natural, because you probably didn't get the package downloaded,
> so it compares the signature of null with the expected signature...

Shouldn't it say that it failed to download it, instead?

Thanks,
Stefan Kangas

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Lars Ingebrigtsen]

Stefan Kangas <stefan@marxist.se> writes:

>> That's natural, because you probably didn't get the package downloaded,
>> so it compares the signature of null with the expected signature...
>
> Shouldn't it say that it failed to download it, instead?

Yes, it should.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Andreas Schwab]

On Jul 09 2019, Lars Ingebrigtsen <larsi@gnus.org> wrote:

>> In trying to install org-9.2.3, a question in a dialogue box asks for
>> Yes or No answer to
>>
>>   Buffer " *http elpa.gnu.org:443* has a running process; kill it?"
>
> Huh.  "http"?  Did Emacs 26.1 try to download from http instead of
> https?

Port 443 is https.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Stefan Kangas]

VanL <van@scratch.space> writes:

> > If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
> > list, and I can install it.
>
> I am able to reproduce the problem after relabelling ~/.emacs.d to ~/__dot__emacs.d and invoking 'emacs -Q' then 'M-x list-packages'.
>
> In trying to install org-9.2.3, a question in a dialogue box asks for Yes or No answer to
>
>   Buffer " *http elpa.gnu.org:443* has a running process; kill it?"
>
> I say Yes and the error message is
>
>   Failed to verify signature: "org-9.2.3.tar.sig"

I'm trying to understand this bug, but I'm not sure exactly what is
happening.  Could you please provide an exact recipe for reproducing
this, starting from "emacs -Q"?

Best regards,
Stefan Kangas

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[VanL]

Stefan Kangas <stefan@marxist.se> writes:

> VanL <van@scratch.space> writes:
>
>> > If I say "emacs -Q" and `M-x package-list-packages', I get "org" in the
>> > list, and I can install it.
>>
>> I am able to reproduce the problem after relabelling ~/.emacs.d to
>> ~/__dot__emacs.d and invoking 'emacs -Q' then 'M-x list-packages'.
>>
>> In trying to install org-9.2.3, a question in a dialogue box asks
>> for Yes or No answer to
>>
>>   Buffer " *http elpa.gnu.org:443* has a running process; kill it?"
>>
>> I say Yes and the error message is
>>
>>   Failed to verify signature: "org-9.2.3.tar.sig"
>
> I'm trying to understand this bug, but I'm not sure exactly what is
> happening.  Could you please provide an exact recipe for reproducing
> this, starting from "emacs -Q"?

In the above I report I used M-x list-packages; in the following, I use
M-x package-list-packages

0. mv .emacs.d __dot_emacs_d__
1. emacs -Q
2. M-x package-list-packages

#+BEGIN_EXAMPLE
Failed to verify signature archive-contents.sig:
No public key for 066DAFCB81E42C40 created at 2019-10-11T08:10:02+1100 using RSA
Command output:
gpg: Signature made Fri Oct 11 08:10:02 2019 AEDT
gpg:                using RSA key C433554766D3DDC64221BFAA066DAFCB81E42C40
gpg: Can't check signature: No public key

#+END_EXAMPLE

The version details are:
GNU Emacs 26.1 (build 1, i386-unknown-openbsd, GTK+ Version 3.24.7)
 of 2019-04-15

-----

I muddled my way around using ~/.emacs.d/init.el as follows:

#+BEGIN_EXAMPLE
(package-initialize)

(require 'package)
(add-to-list 'package-archives
	     '("org" . "https://orgmode.org/elpa/"))

(add-to-list 'package-archives
	     '("melpa" . "https://melpa.org/packages/"))

#+END_EXAMPLE

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Stefan Kangas]

VanL <van@scratch.space> writes:

> In the above I report I used M-x list-packages; in the following, I use
> M-x package-list-packages
>
> 0. mv .emacs.d __dot_emacs_d__
> 1. emacs -Q
> 2. M-x package-list-packages
>
> #+BEGIN_EXAMPLE
> Failed to verify signature archive-contents.sig:
> No public key for 066DAFCB81E42C40 created at 2019-10-11T08:10:02+1100 using RSA
> Command output:
> gpg: Signature made Fri Oct 11 08:10:02 2019 AEDT
> gpg:                using RSA key C433554766D3DDC64221BFAA066DAFCB81E42C40
> gpg: Can't check signature: No public key
>
> #+END_EXAMPLE
>
> The version details are:
> GNU Emacs 26.1 (build 1, i386-unknown-openbsd, GTK+ Version 3.24.7)
>  of 2019-04-15

This is due to the new GNU ELPA key, I think.  See:
https://emacs.stackexchange.com/questions/233/how-to-proceed-on-package-el-signature-check-failure/52823#52823

Could you try to reproduce this on Emacs 26.3 instead?  Or
alternatively fix the local key ring in your installation as per the
instructions in the link above, and then try again?

Best regards,
Stefan Kangas

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[VanL]

Stefan Kangas <stefan@marxist.se> writes:

> VanL <van@scratch.space> writes:
>
>> In the above I report I used M-x list-packages; in the following, I use
>> M-x package-list-packages
>>
>> 0. mv .emacs.d __dot_emacs_d__
>> 1. emacs -Q
>> 2. M-x package-list-packages
>>
>8 ----- snipped
>
> This is due to the new GNU ELPA key, I think.  See:
> https://emacs.stackexchange.com/questions/233/how-to-proceed-on-package-el-signature-check-failure/52823#52823
>

A similar problem was reported to help-gnu-emacs which was solved by
Emacs 26.2.90.

> Could you try to reproduce this on Emacs 26.3 instead?

Emacs 26.3 lists org (9.1.9) as built-in.  The details of the package
shows 9.2.6 and I am able to gotothere to click the Install button.
And, it goes to the end without erroring.

> Or alternatively fix the local key ring in your installation as per
> the instructions in the link above, and then try again?

On Emacs 26.1 with package-check-signature set nil the steps allowed go
as far as clicking the Install button for 9.2.6 and progress stops.  The
Messages buffer has:

#+BEGIN_EXAMPLE
  Install package ‘org-9.2.6’? y
  Setting ‘package-selected-packages’ temporarily since "emacs -q" would overwrite customizations [2 times]
  Contacting host: elpa.gnu.org:443
  package-install-from-archive: https://elpa.gnu.org/packages/org-9.2.6.tar: Bad Request

#+END_EXAMPLE

bug#36127: 26.1, openbsd-6.5; org-9.2.3 package fails to install

[Stefan Kangas]

VanL <van@scratch.space> writes:

> > Could you try to reproduce this on Emacs 26.3 instead?
>
> Emacs 26.3 lists org (9.1.9) as built-in.  The details of the package
> shows 9.2.6 and I am able to gotothere to click the Install button.
> And, it goes to the end without erroring.

Good.

> > Or alternatively fix the local key ring in your installation as per
> > the instructions in the link above, and then try again?
>
> On Emacs 26.1 with package-check-signature set nil the steps allowed go
> as far as clicking the Install button for 9.2.6 and progress stops.  The
> Messages buffer has:
>
> #+BEGIN_EXAMPLE
>   Install package ‘org-9.2.6’? y
>   Setting ‘package-selected-packages’ temporarily since "emacs -q" would overwrite customizations [2 times]
>   Contacting host: elpa.gnu.org:443
>   package-install-from-archive: https://elpa.gnu.org/packages/org-9.2.6.tar: Bad Request
>
> #+END_EXAMPLE

It seems to me that the issue that remains to be fixed here is that the error
reporting should be better in this case.

Best regards,
Stefan Kangas