From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Eric Abrahamsen Newsgroups: gmane.emacs.devel Subject: Key signature verification failure for ELPA installation Date: Sun, 08 Apr 2018 15:27:41 -0700 Message-ID: <87o9itmizm.fsf@ericabrahamsen.net> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: blaine.gmane.org 1523226510 16261 195.159.176.226 (8 Apr 2018 22:28:30 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sun, 8 Apr 2018 22:28:30 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Mon Apr 09 00:28:26 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1f5InR-00047G-LS for ged-emacs-devel@m.gmane.org; Mon, 09 Apr 2018 00:28:25 +0200 Original-Received: from localhost ([::1]:33685 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1f5IpV-0003nh-Q3 for ged-emacs-devel@m.gmane.org; Sun, 08 Apr 2018 18:30:33 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:42326) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1f5IpP-0003mT-De for emacs-devel@gnu.org; Sun, 08 Apr 2018 18:30:28 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1f5IpM-00042D-9j for emacs-devel@gnu.org; Sun, 08 Apr 2018 18:30:27 -0400 Original-Received: from [195.159.176.226] (port=50438 helo=blaine.gmane.org) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1f5IpL-00041M-Ox for emacs-devel@gnu.org; Sun, 08 Apr 2018 18:30:24 -0400 Original-Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1f5InC-0003rq-5q for emacs-devel@gnu.org; Mon, 09 Apr 2018 00:28:10 +0200 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 28 Original-X-Complaints-To: usenet@blaine.gmane.org Cancel-Lock: sha1:dDqg6F3pHI68ai5r7MTqj+ZDpdg= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 195.159.176.226 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:224442 Archived-At: I've had an EBDB bug report[1] from someone installing the package using package-install (with Emacs 25 on Ubuntu 17.10). EBDB requires seq (specifically, it requires seq>=2.15), which currently exists in the repos as 2.20. In fact, seq is built-in, though I don't understand all the implications of that. The error is as follows: Failed to verify signature seq-2.20.tar.sig: No public key for 474F05837FBDEF9B GNU ELPA Signing Agent elpasign@elpa.gnu.org created at 2017-05-05T00:05:02+0300 using DSA Command output: gpg: keyblock resource '/tmp/try28880WQE/gnupg/pubring.kbx': No such file or directory gpg: Signature made пт, 05-тра-2017 00:05:02 +0300 EEST gpg: using DSA key 474F05837FBDEF9B gpg: Can't check signature: No public key This looks weird to me for a few reasons, not least that gpg is looking for the public keyring under the /tmp directory, but I don't know enough about Emacs package signing to even triage this. I'm hoping someone can give me some first impressions, so I can either open a proper bug report, or go back to the user with a wontfix/need more info. Thanks! Eric [1]: https://github.com/girzel/ebdb/issues/65