From unknown Wed Jun 18 23:04:10 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#62230 <62230@debbugs.gnu.org> To: bug#62230 <62230@debbugs.gnu.org> Subject: Status: File "elpa-packages.eld" not signed, unlike file "archive-contents" Reply-To: bug#62230 <62230@debbugs.gnu.org> Date: Thu, 19 Jun 2025 06:04:10 +0000 retitle 62230 File "elpa-packages.eld" not signed, unlike file "archive-con= tents" reassign 62230 emacs submitter 62230 Okamsn severity 62230 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Mar 16 20:16:59 2023 Received: (at submit) by debbugs.gnu.org; 17 Mar 2023 00:17:00 +0000 Received: from localhost ([127.0.0.1]:43347 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pcxmF-000318-MV for submit@debbugs.gnu.org; Thu, 16 Mar 2023 20:16:59 -0400 Received: from lists.gnu.org ([209.51.188.17]:47248) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pcxmE-000311-JU for submit@debbugs.gnu.org; Thu, 16 Mar 2023 20:16:59 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pcxmE-0000Xr-D5 for bug-gnu-emacs@gnu.org; Thu, 16 Mar 2023 20:16:58 -0400 Received: from mail-40134.protonmail.ch ([185.70.40.134]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pcxm2-0005Fa-SN for bug-gnu-emacs@gnu.org; Thu, 16 Mar 2023 20:16:48 -0400 Date: Fri, 17 Mar 2023 00:16:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1679012204; x=1679271404; bh=lx8TgSuiSZaudARozbDJg87y/8YOy6f828JtOn14JMI=; h=Date:To:From:Subject:Message-ID:Feedback-ID:From:To:Cc:Date: Subject:Reply-To:Feedback-ID:Message-ID:BIMI-Selector; b=E4XppXV2KAIjOee1acx6QiqcYHFm4tRz+NGF242QCNfbWv13r4W6RFyCH+BhLCzPi b1tv3GS8YzTUwLmjCC04u5rR7UzpU2Mc+11inC7U/JqiIf1GYIJu04wRYOFpuvr+Im Izofhf9VnPQfglukfG77yh8AxX7D1SJXEmLqk91LzmotzN6yz+028fPH9z2UMpl+ml qjm1NHAaJW0LDUq7a0U9vq5briwl4hG1dFRlhRFEs12ME92AwDnfBMer8FJgZHMHTa 7IOS/z+GLoETPUxrjjaRun/PjBdqwAHhWsiKYCz3RfHgX6QHc6QgZqXm2AAsIshqv1 ps6nhL/a+KlJA== To: bug-gnu-emacs@gnu.org, Philip Kaludercic From: Okamsn Subject: File "elpa-packages.eld" not signed, unlike file "archive-contents" Message-ID: Feedback-ID: 25935600:user:proton MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=185.70.40.134; envelope-from=okamsn@protonmail.com; helo=mail-40134.protonmail.ch X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello, I have `package-check-signature` set to `all`. When I run the command `package-vc-install`, it tries to download the file "elpa-package.eld" from the archive. However, this file is not signed, so the download fails. When I disable the checking of signatures, the download succeeds. It is possible to sign this file with the GNU ELPA key, just like the file "archive-contents", which downloads successfully? Thank you. From debbugs-submit-bounces@debbugs.gnu.org Fri Mar 17 04:25:02 2023 Received: (at 62230) by debbugs.gnu.org; 17 Mar 2023 08:25:02 +0000 Received: from localhost ([127.0.0.1]:43574 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pd5OY-0007g3-Cm for submit@debbugs.gnu.org; Fri, 17 Mar 2023 04:25:02 -0400 Received: from mout02.posteo.de ([185.67.36.66]:34749) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pd5OX-0007fe-1w for 62230@debbugs.gnu.org; Fri, 17 Mar 2023 04:25:01 -0400 Received: from submission (posteo.de [185.67.36.169]) by mout02.posteo.de (Postfix) with ESMTPS id E8FB52405F8 for <62230@debbugs.gnu.org>; Fri, 17 Mar 2023 09:24:52 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1679041494; bh=Bs3O+ekYg8YOSds0v2gzDcg1Z2AypHCvf99J+ayeURQ=; h=From:To:Cc:Subject:Autocrypt:Date:From; b=mrVhCLYxtKgb0tniKFQ7HWmisWN6C5ohvB8EtBvxHW/fosDuQux742zwJIy5trnRd cEAIBpINB/FGnnggPpY5QzZnypmjzR1u/zpLNyQ/oxoIFIVBff0rEAfgAEp7BBj0kP jekmKQmjrpBK0LnoNYng7s2v9coEuOz2mXcPslYDcQSXiMK/av5dA9u4bo/1NfwArb dsty8uw1c401rwD52SOxfdd63uTc1w57dzpiyZ6V8+pSo+p8NtI5mLuN6w0BeEzuIE 4BW6rWkgySXATkAyRT9g3BriFCXjP9ku1WW6iK6RR/HenWx/F6RKTbmL1z/FBaJK9n tXG80PL3tsFEw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4PdHHP3gPhz6tmc; Fri, 17 Mar 2023 09:24:49 +0100 (CET) From: Philip Kaludercic To: Okamsn Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" In-Reply-To: (okamsn@protonmail.com's message of "Fri, 17 Mar 2023 00:16:30 +0000") References: Autocrypt: addr=philipk@posteo.net; keydata= mDMEZBBQQhYJKwYBBAHaRw8BAQdAHJuofBrfqFh12uQu0Yi7mrl525F28eTmwUDflFNmdui0QlBo aWxpcCBLYWx1ZGVyY2ljIChnZW5lcmF0ZWQgYnkgYXV0b2NyeXB0LmVsKSA8cGhpbGlwa0Bwb3N0 ZW8ubmV0PoiWBBMWCAA+FiEEDg7HY17ghYlni8XN8xYDWXahwukFAmQQUEICGwMFCQHhM4AFCwkI BwIGFQoJCAsCBBYCAwECHgECF4AACgkQ8xYDWXahwulikAEA77hloUiSrXgFkUVJhlKBpLCHUjA0 mWZ9j9w5d08+jVwBAK6c4iGP7j+/PhbkxaEKa4V3MzIl7zJkcNNjHCXmvFcEuDgEZBBQQhIKKwYB BAGXVQEFAQEHQI5NLiLRjZy3OfSt1dhCmFyn+fN/QKELUYQetiaoe+MMAwEIB4h+BBgWCAAmFiEE Dg7HY17ghYlni8XN8xYDWXahwukFAmQQUEICGwwFCQHhM4AACgkQ8xYDWXahwukm+wEA8cml4JpK NeAu65rg+auKrPOP6TP/4YWRCTIvuYDm0joBALw98AMz7/qMHvSCeU/hw9PL6u6R2EScxtpKnWof z4oM Date: Fri, 17 Mar 2023 08:24:48 +0000 Message-ID: <87pm97lr8v.fsf@posteo.net> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 62230 Cc: 62230@debbugs.gnu.org, Stefan Monnier X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Okamsn writes: > Hello, Hi, > I have `package-check-signature` set to `all`. When I run the command > `package-vc-install`, it tries to download the file "elpa-package.eld" > from the archive. However, this file is not signed, so the download fails. > > When I disable the checking of signatures, the download succeeds. I assume you have configured `package-check-signature' or something like that? Because I don't appear to have any issues fetching the file. > It is possible to sign this file with the GNU ELPA key, just like the > file "archive-contents", which downloads successfully? It should be, but I actually don't know how it is generated or at least I am missing something in elpa-admin.el. I have Cc'ed Stefan who should know. > Thank you. -- Philip Kaludercic From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 18 09:59:04 2023 Received: (at 62230) by debbugs.gnu.org; 18 Mar 2023 13:59:04 +0000 Received: from localhost ([127.0.0.1]:48840 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pdX5M-0004ix-BK for submit@debbugs.gnu.org; Sat, 18 Mar 2023 09:59:04 -0400 Received: from mailscanner.iro.umontreal.ca ([132.204.25.50]:49413) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pdX5K-0004iS-E4 for 62230@debbugs.gnu.org; Sat, 18 Mar 2023 09:59:03 -0400 Received: from pmg1.iro.umontreal.ca (localhost.localdomain [127.0.0.1]) by pmg1.iro.umontreal.ca (Proxmox) with ESMTP id 677FE1000DC; Sat, 18 Mar 2023 09:58:56 -0400 (EDT) Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1]) by pmg1.iro.umontreal.ca (Proxmox) with ESMTP id 18D8F1000BF; Sat, 18 Mar 2023 09:58:55 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; s=mail; t=1679147935; bh=oGCAPszvn4DM6b/ee3iXjMeKtMKYQnps1Nnt24XsKBI=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=n78Adob3h5AbzkjezijOxMJ7x6cgkwuuHyxrC9OTqCuwYJNfBS3QOcTd4dvEzo5eI ANLHor8SSMNvw1jZ311qzZ4pfm9+gryKn6VBmcmVaeOjc6/FkLn+7/kpidxFRgSsmM PQV7Krd1aAuYP/iCvTSJj18nHRYg46tb/9NnIfa/zrF5J/tDB55CFNilCQPwD0lkvW 1fdYoBuFY1SRt0POyYylOrZJ4o/qIrbt6dQFMnqXTFesvb/0oQiVPouGiw44tPZm47 3giXS30zCmm1zWxPLSiBjQJmbMqgg1crnUbyXLETQqsXCoYRuzCCp720X/5PsAd9w8 wNtkbdru7HfFQ== Received: from pastel (unknown [216.154.34.24]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id D81E9123261; Sat, 18 Mar 2023 09:58:54 -0400 (EDT) From: Stefan Monnier To: Philip Kaludercic Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" In-Reply-To: <87pm97lr8v.fsf@posteo.net> (Philip Kaludercic's message of "Fri, 17 Mar 2023 08:24:48 +0000") Message-ID: References: <87pm97lr8v.fsf@posteo.net> Date: Sat, 18 Mar 2023 09:58:54 -0400 User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain X-SPAM-INFO: Spam detection results: 0 ALL_TRUSTED -1 Passed through trusted hosts only via SMTP AWL -0.037 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain X-SPAM-LEVEL: X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 62230 Cc: Okamsn , 62230@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) >> It is possible to sign this file with the GNU ELPA key, just like the >> file "archive-contents", which downloads successfully? > It should be, but I actually don't know how it is generated or at least > I am missing something in elpa-admin.el. I have Cc'ed Stefan who should > know. Yes, that was an oversight Should be fixed now, Stefan From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 18 13:15:10 2023 Received: (at 62230) by debbugs.gnu.org; 18 Mar 2023 17:15:10 +0000 Received: from localhost ([127.0.0.1]:48970 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pda98-0001Zk-C4 for submit@debbugs.gnu.org; Sat, 18 Mar 2023 13:15:10 -0400 Received: from mail-4316.protonmail.ch ([185.70.43.16]:49365) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pda95-0001Yt-GT for 62230@debbugs.gnu.org; Sat, 18 Mar 2023 13:15:08 -0400 Date: Sat, 18 Mar 2023 17:14:54 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1679159701; x=1679418901; bh=Bsm7nfvWFqTPC0FHHJw5hzfh5XvMJ2qvPQtCPa07rFY=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=ftK3FLrhhrodifKRPLxJLagtk5bAImD9W6hnN+Saf786z+kRA9Djj3bcDDZSeOxo8 9uEiPum4vcv8wKNQdsa4eVyg2Uqp5ssY7SZ8x+4uwxb8iTDE70Zi/5vPE0FIrrRxqq P+4PICB2Rcngl5yK0BzP0//nX65lI3BYRRj339SCycrQ46YHf4WDJrbm77WKpB/a5v 4qH+ecWtL1j/ryDZVhMHg0MGDRpQaQS0iypPXYTobtEJQVFQryvDsaEXJThobU5vlo vo0uU19IMuXCokSz4OAy+GSnGb9NgduKxLYeMhlHFdgxasKLpIui56ntSOXbCnZHXM BKjnYAJi9QJiQ== To: Stefan Monnier , Philip Kaludercic From: Okamsn Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" Message-ID: <9b97757f-7ae1-ec92-10bc-ea5d4deb5886@protonmail.com> In-Reply-To: References: <87pm97lr8v.fsf@posteo.net> Feedback-ID: 25935600:user:proton MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 62230 Cc: 62230@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On 2023-03-18 13:58 UTC, Stefan Monnier wrote: >>> It is possible to sign this file with the GNU ELPA key, just like the >>> file "archive-contents", which downloads successfully? >> It should be, but I actually don't know how it is generated or at least >> I am missing something in elpa-admin.el. I have Cc'ed Stefan who should >> know. > > Yes, that was an oversight Should be fixed now, > > > Stefan > The file now downloads successfully. I can see that it also downloaded the signatures. Thank you. From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 18 13:28:22 2023 Received: (at 62230-done) by debbugs.gnu.org; 18 Mar 2023 17:28:22 +0000 Received: from localhost ([127.0.0.1]:48985 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pdaLu-0001u1-Eh for submit@debbugs.gnu.org; Sat, 18 Mar 2023 13:28:22 -0400 Received: from mout01.posteo.de ([185.67.36.65]:54819) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pdaLs-0001tm-T3 for 62230-done@debbugs.gnu.org; Sat, 18 Mar 2023 13:28:21 -0400 Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id 9B3C82402D4 for <62230-done@debbugs.gnu.org>; Sat, 18 Mar 2023 18:28:14 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1679160494; bh=fhvpa3VtjEZVFgyivWniaNq2th3F55Rudz/Wn1i072k=; h=From:To:Cc:Subject:Date:From; b=ec7xaeOv1/wA+B5S7CaOuPnV/HIc6EVwkmr7qvvxNjIbzTX0yWCVhI4AlLuYiPPYr rRA/RMOxqQc0dhSXD3nyMHDrM0DosrSL1wNfOxPXVKR/Yp5mN3QIYJkxXXhJAjABin FIh4VGxmozanCscZ/5ueq1JAH4WlIvPaEfGHNXrL1Y+OK6vVxO2D/FQ72a6vWPdsGF 9NsgjuGYj4Yf/JHcvgMllt0cOFfN/OhwDl1n3cM0UrY/jU13wac3yF3BguS0UbGBih irfCCV1pTvKzm7TQcFa4Xe/9LU2333only2pUI5wCCu9J9wfyZrY63g1uhW0wtIKI/ vE37leQa0pMUw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Pf7Hx40twz9rxG; Sat, 18 Mar 2023 18:28:12 +0100 (CET) From: Philip Kaludercic To: Okamsn Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents" In-Reply-To: <9b97757f-7ae1-ec92-10bc-ea5d4deb5886@protonmail.com> (okamsn@protonmail.com's message of "Sat, 18 Mar 2023 17:14:54 +0000") References: <87pm97lr8v.fsf@posteo.net> <9b97757f-7ae1-ec92-10bc-ea5d4deb5886@protonmail.com> Date: Sat, 18 Mar 2023 17:28:36 +0000 Message-ID: <87ttyij7ej.fsf@posteo.net> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 62230-done Cc: 62230-done@debbugs.gnu.org, Stefan Monnier X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Okamsn writes: > On 2023-03-18 13:58 UTC, Stefan Monnier wrote: >>>> It is possible to sign this file with the GNU ELPA key, just like the >>>> file "archive-contents", which downloads successfully? >>> It should be, but I actually don't know how it is generated or at least >>> I am missing something in elpa-admin.el. I have Cc'ed Stefan who should >>> know. >> >> Yes, that was an oversight Should be fixed now, >> >> >> Stefan >> > > The file now downloads successfully. I can see that it also downloaded > the signatures. > > Thank you. OK, I'll close this report then. Thanks for noticing. From unknown Wed Jun 18 23:04:10 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 16 Apr 2023 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator