From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.bugs Subject: bug#17625: 24.4.50; All installed packages marked "unsigned", no archive listed Date: Sun, 22 Jun 2014 08:30:09 -0400 Message-ID: References: <87tx89ffax.fsf@pellet.i-did-not-set--mail-host-address--so-tickle-me> <2vvbsnrgpk.fsf@fencepost.gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1403440284 6667 80.91.229.3 (22 Jun 2014 12:31:24 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 22 Jun 2014 12:31:24 +0000 (UTC) Cc: 17625@debbugs.gnu.org To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Jun 22 14:31:18 2014 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1WygvW-0005Vo-Co for geb-bug-gnu-emacs@m.gmane.org; Sun, 22 Jun 2014 14:31:18 +0200 Original-Received: from localhost ([::1]:48749 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WygvW-0001aq-27 for geb-bug-gnu-emacs@m.gmane.org; Sun, 22 Jun 2014 08:31:18 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:58564) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WygvN-0001ZW-5y for bug-gnu-emacs@gnu.org; Sun, 22 Jun 2014 08:31:15 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1WygvH-0007Gz-9s for bug-gnu-emacs@gnu.org; Sun, 22 Jun 2014 08:31:09 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:37330) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1WygvH-0007Gv-6Z for bug-gnu-emacs@gnu.org; Sun, 22 Jun 2014 08:31:03 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1WygvG-00073b-B2 for bug-gnu-emacs@gnu.org; Sun, 22 Jun 2014 08:31:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 22 Jun 2014 12:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 17625 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 17625-submit@debbugs.gnu.org id=B17625.140344022227076 (code B ref 17625); Sun, 22 Jun 2014 12:31:02 +0000 Original-Received: (at 17625) by debbugs.gnu.org; 22 Jun 2014 12:30:22 +0000 Original-Received: from localhost ([127.0.0.1]:56713 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1Wygub-00072Z-0P for submit@debbugs.gnu.org; Sun, 22 Jun 2014 08:30:21 -0400 Original-Received: from ironport2-out.teksavvy.com ([206.248.154.181]:23011) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1WyguW-00072E-Ui for 17625@debbugs.gnu.org; Sun, 22 Jun 2014 08:30:18 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArYGAIDvNVNLd+D9/2dsb2JhbABZgwY7gw/APYEXF3SCJQEBAQECAVYjBQsLDiYSFBgNJIgECNIZF456B4Q4BJoBjxiBaoFxgVsh X-IPAS-Result: ArYGAIDvNVNLd+D9/2dsb2JhbABZgwY7gw/APYEXF3SCJQEBAQECAVYjBQsLDiYSFBgNJIgECNIZF456B4Q4BJoBjxiBaoFxgVsh X-IronPort-AV: E=Sophos;i="4.97,753,1389762000"; d="scan'208";a="69055786" Original-Received: from 75-119-224-253.dsl.teksavvy.com (HELO pastel.home) ([75.119.224.253]) by ironport2-out.teksavvy.com with ESMTP/TLS/ADH-AES256-SHA; 22 Jun 2014 08:30:10 -0400 Original-Received: by pastel.home (Postfix, from userid 20848) id D59B960359; Sun, 22 Jun 2014 08:30:09 -0400 (EDT) In-Reply-To: (Glenn Morris's message of "Sat, 21 Jun 2014 19:50:57 -0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:90661 Archived-At: >> I suggest creating a test package on elpa.gnu.org that is signed to see >> how it works. > Is anyone interested in doing this? > This feature seems like it might be almost there, so IMO it would seem > like a shame to release 24.4 without ever testing this in the wild. I could try if someone tells me what I need to do. >> If package-check-signature has its default value, `allow-unsigned', you >> can happily install a package with no signature, but trying to install >> one that _is_ signed, but for which you don't have the public key, fails >> with "Failed to verify signature". > I think that is a potential show-stopper. The "failed to verify" should distinguish the "we don't have the key" case from the "signature is invalid" case, indeed. > Perhaps archives could also provide keys for download in a standard location. > The first time you connect to a given archive, Emacs could offer to > download and import the key (with a suitable warning). Or is this crazy? No, it sounds reasonable. We'll also need support for updating the key, at some point. Stefan