GNU bug report logs - #62230
File "elpa-packages.eld" not signed, unlike file "archive-contents"

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Okamsn <okamsn <at> protonmail.com>
Subject: bug#62230: closed (Re: bug#62230: File "elpa-packages.eld" not
 signed, unlike file "archive-contents")
Date: Sat, 18 Mar 2023 17:29:02 +0000

[Message part 1 (text/plain, inline)]

Your bug report

#62230: File "elpa-packages.eld" not signed, unlike file "archive-contents"

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 62230 <at> debbugs.gnu.org.

-- 
62230: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62230
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Philip Kaludercic <philipk <at> posteo.net>
To: Okamsn <okamsn <at> protonmail.com>
Cc: 62230-done <at> debbugs.gnu.org, Stefan Monnier <monnier <at> iro.umontreal.ca>
Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file
 "archive-contents"
Date: Sat, 18 Mar 2023 17:28:36 +0000

Okamsn <okamsn <at> protonmail.com> writes:

> On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>>> It is possible to sign this file with the GNU ELPA key, just like the
>>>> file "archive-contents", which downloads successfully?
>>> It should be, but I actually don't know how it is generated or at least
>>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>>> know.
>>
>> Yes, that was an oversight  Should be fixed now,
>>
>>
>>          Stefan
>>
>
> The file now downloads successfully. I can see that it also downloaded
> the signatures.
>
> Thank you.

OK, I'll close this report then.  Thanks for noticing.

[Message part 3 (message/rfc822, inline)]

From: Okamsn <okamsn <at> protonmail.com>
To: bug-gnu-emacs <at> gnu.org, Philip Kaludercic <philipk <at> posteo.net>
Subject: File "elpa-packages.eld" not signed, unlike file "archive-contents"
Date: Fri, 17 Mar 2023 00:16:30 +0000

Hello,

I have `package-check-signature` set to `all`. When I run the command
`package-vc-install`, it tries to download the file "elpa-package.eld"
from the archive.  However, this file is not signed, so the download fails.

When I disable the checking of signatures, the download succeeds.

It is possible to sign this file with the GNU ELPA key, just like the
file "archive-contents", which downloads successfully?

Thank you.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.