GNU bug report logs - #33825
25.2; Failing to verify signature for ELPA debbugs package

Previous Next

Full log

Message #14 received at 33825 <at> debbugs.gnu.org (full text, mbox):

From: Robert Pluim <rpluim <at> gmail.com>
To: clemera <clemens.radermacher <at> posteo.de>
Cc: rgm <at> gnu.org, 33825 <at> debbugs.gnu.org
Subject: Re: bug#33825: 25.2;
 , Failing to verify signature for ELPA debbugs package
Date: Sun, 30 Dec 2018 13:12:41 +0100

clemera <clemens.radermacher <at> posteo.de> writes:

>> FWIW, it verifies fine here with Emacs 25.2
>
> I tried it again and now it works for me, too. Strange..., what could
> have caused that it failed before?

There are 'transparent' proxies which will untar archives and then
retar them, resulting in a file that fails signature verification even
though the contents are identical. When you then repeat the download,
the proxy knows it has previously inspected the file, and thus lets
through the original. Using https solves this issue 99% of the time.

If youʼre using https already, then Iʼm out of ideas :-)

Robert

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.