GNU bug report logs - #62230
File "elpa-packages.eld" not signed, unlike file "archive-contents"

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Philip Kaludercic <philipk <at> posteo.net>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#62230: closed (File "elpa-packages.eld" not signed, unlike
 file "archive-contents")
Date: Sat, 18 Mar 2023 17:29:02 +0000

[Message part 1 (text/plain, inline)]

Your message dated Sat, 18 Mar 2023 17:28:36 +0000
with message-id <87ttyij7ej.fsf <at> posteo.net>
and subject line Re: bug#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"
has caused the debbugs.gnu.org bug report #62230,
regarding File "elpa-packages.eld" not signed, unlike file "archive-contents"
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
62230: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62230
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Okamsn <okamsn <at> protonmail.com>
To: bug-gnu-emacs <at> gnu.org, Philip Kaludercic <philipk <at> posteo.net>
Subject: File "elpa-packages.eld" not signed, unlike file "archive-contents"
Date: Fri, 17 Mar 2023 00:16:30 +0000

Hello,

I have `package-check-signature` set to `all`. When I run the command
`package-vc-install`, it tries to download the file "elpa-package.eld"
from the archive.  However, this file is not signed, so the download fails.

When I disable the checking of signatures, the download succeeds.

It is possible to sign this file with the GNU ELPA key, just like the
file "archive-contents", which downloads successfully?

Thank you.

[Message part 3 (message/rfc822, inline)]

From: Philip Kaludercic <philipk <at> posteo.net>
To: Okamsn <okamsn <at> protonmail.com>
Cc: 62230-done <at> debbugs.gnu.org, Stefan Monnier <monnier <at> iro.umontreal.ca>
Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file
 "archive-contents"
Date: Sat, 18 Mar 2023 17:28:36 +0000

Okamsn <okamsn <at> protonmail.com> writes:

> On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>>> It is possible to sign this file with the GNU ELPA key, just like the
>>>> file "archive-contents", which downloads successfully?
>>> It should be, but I actually don't know how it is generated or at least
>>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>>> know.
>>
>> Yes, that was an oversight  Should be fixed now,
>>
>>
>>          Stefan
>>
>
> The file now downloads successfully. I can see that it also downloaded
> the signatures.
>
> Thank you.

OK, I'll close this report then.  Thanks for noticing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.