GNU bug report logs - #31877
26.1; Cannot view second certificate information when updating packages

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 31877 in the body.
You can then email your comments to 31877 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Allen Li <darkfeline <at> felesatra.moe>
To: bug-gnu-emacs <at> gnu.org
Subject: 26.1;
 Cannot view second certificate information when updating packages
Date: Mon, 18 Jun 2018 01:09:15 -0700

1. emacs -Q

Note: This depends on some local state for remembering choices for
certs, so you might want to add
HOME="$(mktemp -d)" to use a clean temporary environment

2. M-: (setq network-security-level 'paranoid) RET
3. M-: (setq package-archives
'(("gnu" . "https://elpa.gnu.org/packages/")
("org" . "https://orgmode.org/elpa/"))) RET

4. M-x package-list-packages RET

5. There should be two windows, one with the package list and one with
certificate information for the ELPA archive.  Emacs prompts for
"Continue connecting? (...)"

6. Press a

7. Now there will be two windows, both displaying the package list.
There will be some success message in the minibuffer.  Emacs is actually
in a state where it is requesting input for the certificate for the
second archive, but this is non obvious because the success message from
the first certificate overrides the prompt for input for the second
certificate [BUG 1].  Also, both windows are displaying the package
list.  The information for the second certificate is not displayed, so
the user cannot check the certificate information to decide whether to
accept it [BUG 2].  Pressing ? displays a help window that explains the
three possible choices, but there is no way to go back to the
certificate information even if it were displayed before, giving the
user no way to verify the certificate information if they accidentally
pressed ? [BUG 3].

In GNU Emacs 26.1 (build 1, x86_64-pc-linux-gnu, GTK+ Version 3.22.30)
 of 2018-05-28 built on juergen
Windowing system distributor 'The X.Org Foundation', version 11.0.12000000

Configured using:
 'configure --prefix=/usr --sysconfdir=/etc --libexecdir=/usr/lib
 --localstatedir=/var --with-x-toolkit=gtk3 --with-xft --with-modules
 'CFLAGS=-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong
 -fno-plt' CPPFLAGS=-D_FORTIFY_SOURCE=2
 LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now'

Configured features:
XPM JPEG TIFF GIF PNG RSVG IMAGEMAGICK SOUND GPM DBUS GSETTINGS NOTIFY
ACL GNUTLS LIBXML2 FREETYPE M17N_FLT LIBOTF XFT ZLIB TOOLKIT_SCROLL_BARS
GTK3 X11 MODULES THREADS LIBSYSTEMD LCMS2

Message #8 received at 31877 <at> debbugs.gnu.org (full text, mbox):

From: Allen Li <darkfeline <at> felesatra.moe>
To: 31877 <at> debbugs.gnu.org
Subject: [PATCH] nsm.el: Add choice to reshow certificate information
Date: Wed, 1 Aug 2018 03:09:43 -0700

[Message part 1 (text/plain, inline)]

I have attached a patch to add a choice to reshow the cert, since the
fundamental problem is that the user could get stuck in a situation
where they have to choose to accept a cert they can't see.

[0001-Add-choice-to-reshow-certificate-information.patch (text/x-patch, attachment)]

Message #11 received at 31877 <at> debbugs.gnu.org (full text, mbox):

From: Allen Li <darkfeline <at> felesatra.moe>
To: 31877 <at> debbugs.gnu.org
Subject: 26.1;
 Cannot view second certificate information when updating packages
Date: Sat, 8 Sep 2018 17:33:48 -0700

Could I get this looked at?

Message #14 received at 31877 <at> debbugs.gnu.org (full text, mbox):

From: Noam Postavsky <npostavs <at> gmail.com>
To: Allen Li <darkfeline <at> felesatra.moe>
Cc: 31877 <at> debbugs.gnu.org
Subject: Re: bug#31877: [PATCH] nsm.el: Add choice to reshow certificate
 information
Date: Sun, 16 Sep 2018 21:19:42 -0400

tags 31877 fixed
close 31877 26.2
quit

Allen Li <darkfeline <at> felesatra.moe> writes:

> I have attached a patch to add a choice to reshow the cert, since the
> fundamental problem is that the user could get stuck in a situation
> where they have to choose to accept a cert they can't see.

Pushed to emacs-26.

[1: 3bbf21b913]: 2018-09-16 21:15:21 -0400
  Add choice to reshow certificate information (Bug#31877)
  https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=3bbf21b9139e203d7254a9434c88bd38238ed57e

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.