HELP: problem with ELPA archive-contents.sig in list-packages ?

HELP: problem with ELPA archive-contents.sig in list-packages ?

[David Masterson]

Let's try again...

I am using Emacs 28.3 and have a problem with list-packages in the last
week or so.  After starting emacs, I run list-packages.  It appears to
be successful, but, after ~5 seconds, the following *Error* buffer pops
up:

================
Failed to verify signature archive-contents.sig:
No public key for 645357D2883A0966 created at 2024-05-15T14:05:06-0700 using EDDSA
Command output:
gpg: Signature made Wed May 15 14:05:06 2024 PDT
gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
gpg: Can't check signature: No public key
================

I cannot find archive-contents.sig on my system (I did find
archive-contents.signed in the .emacs.d/elpa/archive/elpa directory), so
I'm thinking this has to do with something on ELPA.

Did something change that I missed?  Any advice?

-- 
David Masterson

Re: HELP: problem with ELPA archive-contents.sig in list-packages ?

[Zhengyi Fu]

David Masterson <dsmasterson@gmail.com> writes:

> Let's try again...
>
> I am using Emacs 28.3 and have a problem with list-packages in the last
> week or so.  After starting emacs, I run list-packages.  It appears to
> be successful, but, after ~5 seconds, the following *Error* buffer pops
> up:
>
> ================
> Failed to verify signature archive-contents.sig:
> No public key for 645357D2883A0966 created at 2024-05-15T14:05:06-0700 using EDDSA
> Command output:
> gpg: Signature made Wed May 15 14:05:06 2024 PDT
> gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
> gpg: Can't check signature: No public key
> ================
>
> I cannot find archive-contents.sig on my system (I did find
> archive-contents.signed in the .emacs.d/elpa/archive/elpa directory), so
> I'm thinking this has to do with something on ELPA.
>
> Did something change that I missed?  Any advice?

I ran into the same problem today.  My solution is to temporarily
disabled signature checking by setting `package-check-signature' to nil
and installing the `gnu-elpa-keyring-update'[1] package, which helps to
update the public keys.

Footnotes:
[1]  https://elpa.gnu.org/packages/gnu-elpa-keyring-update.html

Re: HELP: problem with ELPA archive-contents.sig in list-packages ?

[David Masterson]

Zhengyi Fu <i@fuzy.me> writes:

> David Masterson <dsmasterson@gmail.com> writes:
>
>> Let's try again...
>>
>> I am using Emacs 28.3 and have a problem with list-packages in the last
>> week or so.  After starting emacs, I run list-packages.  It appears to
>> be successful, but, after ~5 seconds, the following *Error* buffer pops
>> up:
>>
>> ================
>> Failed to verify signature archive-contents.sig:
>> No public key for 645357D2883A0966 created at 2024-05-15T14:05:06-0700 using EDDSA
>> Command output:
>> gpg: Signature made Wed May 15 14:05:06 2024 PDT
>> gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
>> gpg: Can't check signature: No public key
>> ================
>>
>> I cannot find archive-contents.sig on my system (I did find
>> archive-contents.signed in the .emacs.d/elpa/archive/elpa directory), so
>> I'm thinking this has to do with something on ELPA.
>>
>> Did something change that I missed?  Any advice?
>
> I ran into the same problem today.  My solution is to temporarily
> disabled signature checking by setting `package-check-signature' to nil
> and installing the `gnu-elpa-keyring-update'[1] package, which helps to
> update the public keys.
>
> Footnotes:
> [1]  https://elpa.gnu.org/packages/gnu-elpa-keyring-update.html
>

Thanks, that seems to have worked.

-- 
David Masterson