GNU bug report logs - #33825
25.2; Failing to verify signature for ELPA debbugs package

Previous Next

Full log

View this message in rfc822 format

From: Stefan Kangas <stefan <at> marxist.se>
To: clemera <clemens.radermacher <at> posteo.de>
Cc: Glenn Morris <rgm <at> gnu.org>, 33825 <at> debbugs.gnu.org
Subject: bug#33825: 25.2; , Failing to verify signature for ELPA debbugs package
Date: Fri, 13 Sep 2019 21:50:27 +0200

Robert Pluim <rpluim <at> gmail.com> writes:

> clemera <clemens.radermacher <at> posteo.de> writes:
>
>>> FWIW, it verifies fine here with Emacs 25.2
>>
>> I tried it again and now it works for me, too. Strange..., what could
>> have caused that it failed before?
>
> There are 'transparent' proxies which will untar archives and then
> retar them, resulting in a file that fails signature verification even
> though the contents are identical. When you then repeat the download,
> the proxy knows it has previously inspected the file, and thus lets
> through the original. Using https solves this issue 99% of the time.
>
> If youʼre using https already, then Iʼm out of ideas :-)

The reporter verified he was indeed using http.  Is there anything
that can or should be done here, or is this to be closed as notabug?

Best regards,
Stefan Kangas

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.