can't connect to ELPA any more

can't connect to ELPA any more

[Uwe Brauer via Emacs development discussions.]

Hi

I just realized when I run 

Package-list-packages


MELPA, gnu and non-gnu packages are displayed but elpa not anymore.

The error is 
--8<---------------cut here---------------start------------->8---
Entering debugger...
package--check-signature-content: Failed to verify signature: "archive-contents.sig"
Mark set [3 times]
Importing package-keyring.gpg...done
package--check-signature-content: Failed to verify signature: "archive-contents.sig" [2 times]
Package refresh done
Packages that can be upgraded: 352;
--8<---------------cut here---------------end--------------->8---


How can I obtain a correct signature?
I have never seen that error before

Regards


Uwe Brauer 



-- 
I strongly condemn Hamas heinous despicable pogroms/atrocities on Israel
I strongly condemn Putin's war of aggression against Ukraine.
I support to deliver weapons to Ukraine's military. 
I support the EU and NATO membership of Ukraine. 

Re: can't connect to ELPA any more

[Eli Zaretskii]

Here's what I get from package-list-packages in "emacs -Q" (in the
*Error* buffer):

  Failed to verify signature archive-contents.sig:
  Bad signature from 645357D2883A0966 GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>
  Command output:
  gpg: Signature made 30/06/2024 12:10:02 Jerusalem Daylight Time
  gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
  gpg: BAD signature from "GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>" [unknown]

Stefan, Philip: could you please look into this?

Re: can't connect to ELPA any more

[Philip Kaludercic]

Eli Zaretskii <eliz@gnu.org> writes:

> Here's what I get from package-list-packages in "emacs -Q" (in the
> *Error* buffer):
>
>   Failed to verify signature archive-contents.sig:
>   Bad signature from 645357D2883A0966 GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>
>   Command output:
>   gpg: Signature made 30/06/2024 12:10:02 Jerusalem Daylight Time
>   gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
>   gpg: BAD signature from "GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>" [unknown]
>
> Stefan, Philip: could you please look into this?

I believe you can fix this by installing "gnu-elpa-keyring-update".

-- 
	Philip Kaludercic on peregrine

Re: can't connect to ELPA any more

[Uwe Brauer]

[-- Attachment #1: Type: text/plain, Size: 1210 bytes --]

>>> "PK" == Philip Kaludercic <philipk@posteo.net> writes:

> Eli Zaretskii <eliz@gnu.org> writes:
>> Here's what I get from package-list-packages in "emacs -Q" (in the
>> *Error* buffer):
>> 
>> Failed to verify signature archive-contents.sig:
>> Bad signature from 645357D2883A0966 GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>
>> Command output:
>> gpg: Signature made 30/06/2024 12:10:02 Jerusalem Daylight Time
>> gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
>> gpg: BAD signature from "GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>" [unknown]
>> 
>> Stefan, Philip: could you please look into this?

> I believe you can fix this by installing "gnu-elpa-keyring-update".


Well then I obtain 

Contacting host: elpa.gnu.org:443
package--with-response-buffer-1: https://elpa.gnu.org/packages/gnu-elpa-keyring-update-2022.12.tar: Not found
Updating buffer list...done


Catch 22?


-- 
I strongly condemn Hamas heinous despicable pogroms/atrocities on Israel
I strongly condemn Putin's war of aggression against Ukraine.
I support to deliver weapons to Ukraine's military. 
I support the EU and NATO membership of Ukraine. 


[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5673 bytes --]

Re: can't connect to ELPA any more

[Eli Zaretskii]

> From: Philip Kaludercic <philipk@posteo.net>
> Cc: Uwe Brauer <oub@mat.ucm.es>,  Stefan Monnier <monnier@iro.umontreal.ca>,
>   emacs-devel@gnu.org
> Date: Sun, 30 Jun 2024 10:12:34 +0000
> 
> Eli Zaretskii <eliz@gnu.org> writes:
> 
> > Here's what I get from package-list-packages in "emacs -Q" (in the
> > *Error* buffer):
> >
> >   Failed to verify signature archive-contents.sig:
> >   Bad signature from 645357D2883A0966 GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>
> >   Command output:
> >   gpg: Signature made 30/06/2024 12:10:02 Jerusalem Daylight Time
> >   gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
> >   gpg: BAD signature from "GNU ELPA Signing Agent (2023) <elpasign@elpa.gnu.org>" [unknown]
> >
> > Stefan, Philip: could you please look into this?
> 
> I believe you can fix this by installing "gnu-elpa-keyring-update".

How come this is suddenly required?  It's a nuisance to keep this
updated at all times.  I think I'd rather disable signature
verification.  Too bad.

Re: can't connect to ELPA any more

[Michael Heerdegen via Emacs development discussions.]

Philip Kaludercic <philipk@posteo.net> writes:

> I believe you can fix this by installing "gnu-elpa-keyring-update".

I do have installed this packages for a while; nonetheless did I get
this (or a very similar) error yesterday.  But _only_ yesterday, not on
any other day in the past couple of weeks.  And also not now.  So it may
be an intermediate problem.

Michael.

Re: can't connect to ELPA any more

[Eli Zaretskii]

> Date: Mon, 01 Jul 2024 03:32:46 +0200
> From:  Michael Heerdegen via "Emacs development discussions." <emacs-devel@gnu.org>
> 
> Philip Kaludercic <philipk@posteo.net> writes:
> 
> > I believe you can fix this by installing "gnu-elpa-keyring-update".
> 
> I do have installed this packages for a while; nonetheless did I get
> this (or a very similar) error yesterday.  But _only_ yesterday, not on
> any other day in the past couple of weeks.  And also not now.  So it may
> be an intermediate problem.

Not here, I still see the same error message and the text in the
buffer I posted earlier.  Annoying.

Re: can't connect to ELPA any more

[Mekeor Melire]

Is this related? "failure in installing xelb: ELPA signature
verification failure", 22 Apr 2024, help-gnu-emacs mailing-list:

https://lists.gnu.org/archive/html/help-gnu-emacs/2024-04/msg00210.html