From unknown Tue Jun 24 17:29:22 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21238: ELPA not available over TLS Resent-From: Glyph Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 11 Aug 2015 23:40:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 21238 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 21238@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.143933634611987 (code B ref -1); Tue, 11 Aug 2015 23:40:03 +0000 Received: (at submit) by debbugs.gnu.org; 11 Aug 2015 23:39:06 +0000 Received: from localhost ([127.0.0.1]:53537 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPJ8L-00037H-Gr for submit@debbugs.gnu.org; Tue, 11 Aug 2015 19:39:05 -0400 Received: from eggs.gnu.org ([208.118.235.92]:47248) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPJ8J-000379-6h for submit@debbugs.gnu.org; Tue, 11 Aug 2015 19:39:03 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZPJ8H-00068X-RJ for submit@debbugs.gnu.org; Tue, 11 Aug 2015 19:39:02 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, HTML_MESSAGE autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:49025) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZPJ8H-00068Q-OL for submit@debbugs.gnu.org; Tue, 11 Aug 2015 19:39:01 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:57239) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZPJ8G-0005Kv-Lz for bug-gnu-emacs@gnu.org; Tue, 11 Aug 2015 19:39:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZPJ8B-00067L-NF for bug-gnu-emacs@gnu.org; Tue, 11 Aug 2015 19:39:00 -0400 Received: from mail-pa0-f49.google.com ([209.85.220.49]:35607) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZPJ8B-000677-Hl for bug-gnu-emacs@gnu.org; Tue, 11 Aug 2015 19:38:55 -0400 Received: by pacgr6 with SMTP id gr6so735637pac.2 for ; Tue, 11 Aug 2015 16:38:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=from:content-type:subject:message-id:date:to:mime-version; bh=QO78ICg7IriYoTn2FcK3pZg0VnDPjSZijvZdETGa9Ok=; b=VMdqCyoygEw97Bydo2Z5r6hFGFMyTp4R6ZGi/u5PTpg+V56I8TIYXHP/17MeDkSMba FRfSqXkMrbJdZT47RrSYaBtu30PSHEmjHXiLAFmGoNKI9e1FFv7GPGH2YFu3pEswzv6U 8dHlBPCGuCPZT+caxvQ2PWg9aLLbKYJM/TTi9SC5aG+XHENDjFbQuRHhLB2Wn5mhGEIM YNQNDIZGg0KdkkLAGRO0gTJpAWjOX77PXr+Q5as3GI7EZAkEs5P0z08hh5J5491NW4W6 66LFrCsrNlluVJ3rqakbRXKz3PIsLRJfN6vueVN4sV+BcpG1yHjXHrgn2zUiS28plhIS m3dA== X-Received: by 10.66.97.105 with SMTP id dz9mr61035850pab.23.1439336333861; Tue, 11 Aug 2015 16:38:53 -0700 (PDT) Received: from ?IPv6:2604:5500:20:13f9:7191:d4:e50e:1653? ([2604:5500:20:13f9:7191:d4:e50e:1653]) by smtp.gmail.com with ESMTPSA id qp13sm4019521pbb.9.2015.08.11.16.38.52 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 11 Aug 2015 16:38:52 -0700 (PDT) From: Glyph Content-Type: multipart/alternative; boundary="Apple-Mail=_07ED7745-3189-448C-92C0-570412D68A8D" Message-Id: Date: Tue, 11 Aug 2015 16:38:50 -0700 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) X-Mailer: Apple Mail (2.2102) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.0 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.0 (----) --Apple-Mail=_07ED7745-3189-448C-92C0-570412D68A8D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Even if packages were signed and I could verify all of them, I still = don't think it's the NSA's business which packages I've requested from = ELPA. It would be nice if ELPA were available over TLS to provide both = an additional level of security, and to provide an interim solution = while we are waiting for package signing.= --Apple-Mail=_07ED7745-3189-448C-92C0-570412D68A8D Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii Even if packages were signed and I could verify all of them, I still don't think it's the NSA's business which packages I've requested from ELPA.  It would be nice if ELPA were available over TLS to provide both an additional level of security, and to provide an interim solution while we are waiting for package signing. --Apple-Mail=_07ED7745-3189-448C-92C0-570412D68A8D-- From unknown Tue Jun 24 17:29:22 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21238: ELPA not available over TLS Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 12 Aug 2015 02:26:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21238 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug To: Glyph Cc: 21238@debbugs.gnu.org Received: via spool by 21238-submit@debbugs.gnu.org id=B21238.143934631432756 (code B ref 21238); Wed, 12 Aug 2015 02:26:02 +0000 Received: (at 21238) by debbugs.gnu.org; 12 Aug 2015 02:25:14 +0000 Received: from localhost ([127.0.0.1]:53610 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPLj7-0008WF-SW for submit@debbugs.gnu.org; Tue, 11 Aug 2015 22:25:14 -0400 Received: from pruche.dit.umontreal.ca ([132.204.246.22]:36994) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPLj5-0008W5-KN for 21238@debbugs.gnu.org; Tue, 11 Aug 2015 22:25:12 -0400 Received: from fmsmemgm.homelinux.net (lechon.iro.umontreal.ca [132.204.27.242]) by pruche.DIT.UMontreal.CA (8.14.1/8.14.1) with ESMTP id t7C2P4IJ002099; Tue, 11 Aug 2015 22:25:04 -0400 Received: by fmsmemgm.homelinux.net (Postfix, from userid 20848) id D616CAE177; Tue, 11 Aug 2015 22:25:07 -0400 (EDT) From: Stefan Monnier Message-ID: References: Date: Tue, 11 Aug 2015 22:25:07 -0400 In-Reply-To: (glyph@twistedmatrix.com's message of "Tue, 11 Aug 2015 16:38:50 -0700") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-NAI-Spam-Flag: NO X-NAI-Spam-Level: X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0.2 X-NAI-Spam-Rules: 2 Rules triggered TRK_NCM1=0.2, RV5395=0 X-NAI-Spam-Version: 2.3.0.9393 : core <5395> : inlines <3612> : streams <1486988> : uri <2012019> X-Spam-Score: -1.6 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.6 (-) > Even if packages were signed and I could verify all of them, I still don't > think it's the NSA's business which packages I've requested from ELPA. > It would be nice if ELPA were available over TLS to provide both an > additional level of security, AFAIK you can already use "https://..." addresses. This should work for the GNU ELPA server, at least. > and to provide an interim solution while we are waiting for > package signing. All GNU ELPA packages are signed and Emacs-24.5 does check them if you have GPG installed. Stefan From unknown Tue Jun 24 17:29:22 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21238: ELPA not available over TLS Resent-From: Glyph Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 12 Aug 2015 17:24:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21238 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug To: Stefan Monnier Cc: 21238@debbugs.gnu.org Received: via spool by 21238-submit@debbugs.gnu.org id=B21238.14394001857926 (code B ref 21238); Wed, 12 Aug 2015 17:24:01 +0000 Received: (at 21238) by debbugs.gnu.org; 12 Aug 2015 17:23:05 +0000 Received: from localhost ([127.0.0.1]:54347 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPZk0-00023l-Ms for submit@debbugs.gnu.org; Wed, 12 Aug 2015 13:23:05 -0400 Received: from mail-pa0-f54.google.com ([209.85.220.54]:33439) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPZjy-00023b-Gs for 21238@debbugs.gnu.org; Wed, 12 Aug 2015 13:23:03 -0400 Received: by pabyb7 with SMTP id yb7so18606314pab.0 for <21238@debbugs.gnu.org>; Wed, 12 Aug 2015 10:23:01 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=CDE+dD20/eR+YQOEJ9LijhkcK7KGEshid0o9024dS/s=; b=Z8NaHYE2SNjwJq69/MQwtUSF3tj62P3Kv2C6Ag8luseccU56GnLo4WCdVx93C7d/MW s30rEjuxVi/F7YkkXuL8td9OLprJiG10nyKRq1Jtc59HxICfrtT08lvopJYCRaHDM1rg e5ra99hlFO0XnVNQjekoYOxdBsiLoBAGXa5Qu8axb+H8PdnK4YTIm7OKQrHmcALptPD4 PvtBUgPJCjr1OGhWm4AO12EKzCWoFdmtky5w3tCHkuPEUsEQ8oFnPxwgIz9trymAI5IZ X9SUjLSjQrObjUv9Pf3O0xHqWNY/r2+8uddocmiHZwRMEgtRufY87KNM5jnfjHqwQNgq l8dw== X-Received: by 10.66.192.162 with SMTP id hh2mr70177770pac.71.1439400181619; Wed, 12 Aug 2015 10:23:01 -0700 (PDT) Received: from ?IPv6:2604:5500:20:13f9:7191:d4:e50e:1653? ([2604:5500:20:13f9:7191:d4:e50e:1653]) by smtp.gmail.com with ESMTPSA id de2sm7143039pdb.15.2015.08.12.10.23.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 12 Aug 2015 10:23:00 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_4CE77E14-EC12-4716-92D6-94F1157C7864" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) From: Glyph In-Reply-To: Date: Wed, 12 Aug 2015 10:22:58 -0700 Message-Id: References: X-Mailer: Apple Mail (2.2102) X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --Apple-Mail=_4CE77E14-EC12-4716-92D6-94F1157C7864 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > On Aug 11, 2015, at 7:25 PM, Stefan Monnier = wrote: >=20 >> Even if packages were signed and I could verify all of them, I still = don't >> think it's the NSA's business which packages I've requested from = ELPA. >> It would be nice if ELPA were available over TLS to provide both an >> additional level of security, >=20 > AFAIK you can already use "https://..." addresses. This should work = for > the GNU ELPA server, at least. Okay, I was sure I'd hit https://elpa.gnu.org and it was a connection = error before I posted this bug. I just did again and it worked, so... I = must have been in error. >> and to provide an interim solution while we are waiting for >> package signing. >=20 > All GNU ELPA packages are signed and Emacs-24.5 does check them if you > have GPG installed. Thanks also for this bit of information. It should probably require = that GPG be installed if package.el is to be used then, but that is a = separate issue. Sorry for the bogus report!= --Apple-Mail=_4CE77E14-EC12-4716-92D6-94F1157C7864 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
On Aug 11, 2015, at 7:25 PM, Stefan Monnier <monnier@iro.umontreal.ca> wrote:

Even if packages were signed and I could verify = all of them, I still don't
think it's the NSA's business = which packages I've requested from ELPA.
It would be nice = if ELPA were available over TLS to provide both an
additional level of security,

AFAIK you can already use "https://..." addresses.  This = should work for
the GNU ELPA server, at least.

Okay, I was = sure I'd hit https://elpa.gnu.org and it was a connection error before = I posted this bug.  I just did again and it worked, so... I must = have been in error.

and to = provide an interim solution while we are waiting for
package= signing.

All GNU ELPA = packages are signed and Emacs-24.5 does check them if you
have GPG installed.

Thanks also for this bit of information.  It = should probably require that GPG be installed if package.el is to be = used then, but that is a separate issue.

Sorry for the bogus report!
= --Apple-Mail=_4CE77E14-EC12-4716-92D6-94F1157C7864-- From debbugs-submit-bounces@debbugs.gnu.org Wed Aug 12 13:47:31 2015 Received: (at control) by debbugs.gnu.org; 12 Aug 2015 17:47:31 +0000 Received: from localhost ([127.0.0.1]:54373 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPa7f-0002gi-7I for submit@debbugs.gnu.org; Wed, 12 Aug 2015 13:47:31 -0400 Received: from eggs.gnu.org ([208.118.235.92]:35708) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPa7d-0002gZ-Fw for control@debbugs.gnu.org; Wed, 12 Aug 2015 13:47:29 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZPa7c-0007OY-Ed for control@debbugs.gnu.org; Wed, 12 Aug 2015 13:47:29 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD autolearn=disabled version=3.3.2 Received: from fencepost.gnu.org ([2001:4830:134:3::e]:39349) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZPa7c-0007ON-BO for control@debbugs.gnu.org; Wed, 12 Aug 2015 13:47:28 -0400 Received: from rgm by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1ZPa7b-0007Ix-AQ for control@debbugs.gnu.org; Wed, 12 Aug 2015 13:47:27 -0400 Subject: control message for bug 21238 To: X-Mailer: mail (GNU Mailutils 2.99.98) Message-Id: From: Glenn Morris Date: Wed, 12 Aug 2015 13:47:27 -0400 X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::e X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) close 21238 From unknown Tue Jun 24 17:29:22 2025 X-Loop: help-debbugs@gnu.org Subject: bug#21238: ELPA not available over TLS Resent-From: Xue Fuqiao Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 13 Aug 2015 00:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 21238 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug To: 21238-done@debbugs.gnu.org Cc: Glyph , Stefan Monnier Received: via spool by 21238-done@debbugs.gnu.org id=D21238.143942635728559 (code D ref 21238); Thu, 13 Aug 2015 00:40:02 +0000 Received: (at 21238-done) by debbugs.gnu.org; 13 Aug 2015 00:39:17 +0000 Received: from localhost ([127.0.0.1]:54474 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPgY9-0007QZ-9x for submit@debbugs.gnu.org; Wed, 12 Aug 2015 20:39:17 -0400 Received: from mail-ig0-f169.google.com ([209.85.213.169]:35606) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1ZPgY7-0007QP-Rj for 21238-done@debbugs.gnu.org; Wed, 12 Aug 2015 20:39:16 -0400 Received: by igbjg10 with SMTP id jg10so54084560igb.0 for <21238-done@debbugs.gnu.org>; Wed, 12 Aug 2015 17:39:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=2RryOvfjN34MvvZ1dAmBcXElFepKJyxKaXEFyfTfc78=; b=Lfyvu2kHmlPuhTyYBm4c9F+g4smDIhiMG884GfBcBhP6Wj0zB2bwoyI49vafUGnRzk QHbL0aEG6YDEI/M/WuBKWMUh3UFcECr5q6nnMkDRFqUT4tJ7IYudh2/zT5j+swDrBB/S aCsr3KuVMuPO6IqyDBzLLcS3GZrjVN4yd6qgVijgvMzTKOCfBhB2OaxhIAVgab3DgEJS 40+sdG5rZe/Q90vff7bGupWCicbcEKb5nN8dy2VwO3j1f/YHfmhqYZvqn96c8zfN5a5B GI5qgd1CyoJeW/acMdQWiDaYwEI5oXBsBYi+z6XuPEFMekx98q7EHUrDOmRFw8LsTpQF ZJJA== MIME-Version: 1.0 X-Received: by 10.50.60.37 with SMTP id e5mr484751igr.91.1439426355108; Wed, 12 Aug 2015 17:39:15 -0700 (PDT) Received: by 10.79.95.5 with HTTP; Wed, 12 Aug 2015 17:39:15 -0700 (PDT) In-Reply-To: References: Date: Thu, 13 Aug 2015 08:39:15 +0800 Message-ID: From: Xue Fuqiao Content-Type: text/plain; charset=UTF-8 X-Spam-Score: -0.7 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) On Thu, Aug 13, 2015 at 1:22 AM, Glyph wrote: > Okay, I was sure I'd hit https://elpa.gnu.org and it was a connection error > before I posted this bug. I just did again and it worked, so... I must have > been in error. You're not alone: https://github.com/syl20bnr/spacemacs/issues/2596 Closing.