GNU bug report logs - #35534
26.2; Failure to verify signature archive-contents.sig

Previous Next

Package: emacs;

Reported by: Michael Chapman <atat <at> mykolab.ch>

Date: Thu, 2 May 2019 14:29:01 UTC

Severity: important

Tags: security

Merged with 35414, 44907

Found in versions 25.3.50, 26.2

Done: Stefan Monnier <monnier <at> iro.umontreal.ca>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 35534 in the body.
You can then email your comments to 35534 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#35534; Package emacs. (Thu, 02 May 2019 14:29:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Michael Chapman <atat <at> mykolab.ch>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Thu, 02 May 2019 14:29:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Michael Chapman <atat <at> mykolab.ch>
To: bug-gnu-emacs <at> gnu.org
Subject: 26.2; Failure to verify signature archive-contents.sig
Date: Thu, 02 May 2019 09:25:46 +0200
Hi all,

Bug symptom is triggered simply by

M-x package-list-packages RET
or
M-x list-packages RET

A buffer with a listing of packages opens, but then an *Error* buffer 
opens
with the following information:

Failed to verify signature archive-contents.sig:
Bad signature from 474F05837FBDEF9B GNU ELPA Signing Agent 
<elpasign <at> elpa.gnu.org>
Command output:
gpg: Signature made 05/01/19 23:10:02 W. Europe Daylight Time
gpg:                using DSA key 
CA442C00F91774F17F59D9B0474F05837FBDEF9B
gpg: BAD signature from "GNU ELPA Signing Agent <elpasign <at> elpa.gnu.org>" 
[unknown]

This is on a “fresh install” on Windows 10 after extracting from the zip 
archive
retrieved from
https://mirror.kumi.systems/gnu/emacs/windows/emacs-26/

Some further details of the context are available at
https://www.reddit.com/r/emacs/comments/bgdq2n/failure_to_install_auctex_on_emacs_with_package/
There I was advised this is a bug and should be reported.

Thanks and kind regards,
Mike

--

In GNU Emacs 26.2 (build 1, x86_64-w64-mingw32)
 of 2019-04-13 built on CIRROCUMULUS
Repository revision: fd1b34bfba8f3f6298df47c8e10b61530426f749
Windowing system distributor 'Microsoft Corp.', version 10.0.17134
Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...
Importing package-keyring.gpg...done
You can run the command ‘package-list-packages’ with M-x pa-l- RET
Package refresh done
error in process filter: package--check-signature-content: Failed to 
verify signature: "archive-contents.sig"
error in process filter: Failed to verify signature: 
"archive-contents.sig"

Configured using:
 'configure --without-dbus --host=x86_64-w64-mingw32
 --without-compress-install 'CFLAGS=-O2 -static -g3''

Configured features:
XPM JPEG TIFF GIF PNG RSVG SOUND NOTIFY ACL GNUTLS LIBXML2 ZLIB
TOOLKIT_SCROLL_BARS THREADS LCMS2

Important settings:
  value of $LANG: ENU
  locale-coding-system: cp1252

Major mode: Package Menu

Minor modes in effect:
  show-paren-mode: t
  tooltip-mode: t
  global-eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  buffer-read-only: t
  line-number-mode: t
  transient-mark-mode: t

Load-path shadows:
None found.

Features:
(shadow sort mail-extr emacsbug sendmail help-mode mm-archive message
dired dired-loaddefs format-spec rfc822 mml mml-sec epa derived
gnus-util rmail rmail-loaddefs mailabbrev gmm-utils mailheader mm-decode
mm-bodies mm-encode mail-utils network-stream starttls url-http tls
gnutls mail-parse rfc2231 rfc2047 rfc2045 mm-util ietf-drums mail-prsvr
url-gw nsm rmc puny url-cache url-auth url url-proxy url-privacy
url-expand url-methods url-history url-cookie url-domsuf url-util
mailcap epg elec-pair paren edmacro kmacro finder-inf package easymenu
epg-config url-handlers url-parse auth-source cl-seq eieio eieio-core
cl-macs eieio-loaddefs password-cache url-vars seq byte-opt gv bytecomp
byte-compile cconv cl-loaddefs cl-lib time-date mule-util tooltip eldoc
electric uniquify ediff-hook vc-hooks lisp-float-type mwheel dos-w32
ls-lisp disp-table term/w32-win w32-win w32-vars term/common-win
tool-bar dnd fontset image regexp-opt fringe tabulated-list replace
newcomment text-mode elisp-mode lisp-mode prog-mode register page
menu-bar rfn-eshadow isearch timer select scroll-bar mouse jit-lock
font-lock syntax facemenu font-core term/tty-colors frame cl-generic
cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao
korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech
european ethiopic indian cyrillic chinese composite charscript charprop
case-table epa-hook jka-cmpr-hook help simple abbrev obarray minibuffer
cl-preloaded nadvice loaddefs button faces cus-face macroexp files
text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote threads w32notify w32
lcms2 multi-tty make-network-process emacs)

Memory information:
((conses 16 128540 11648)
 (symbols 48 22803 1)
 (miscs 40 96 163)
 (strings 32 37716 1313)
 (string-bytes 1 980407)
 (vectors 16 17445)
 (vector-slots 8 533882 9894)
 (floats 8 59 184)
 (intervals 56 2711 0)
 (buffers 992 15))




Forcibly Merged 35414 35534. Request was from Noam Postavsky <npostavs <at> gmail.com> to control <at> debbugs.gnu.org. (Sat, 04 May 2019 12:22:01 GMT) Full text and rfc822 format available.

Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#35534; Package emacs. (Sat, 04 May 2019 12:22:02 GMT) Full text and rfc822 format available.

Message #10 received at 35534 <at> debbugs.gnu.org (full text, mbox):

From: Noam Postavsky <npostavs <at> gmail.com>
To: Michael Chapman <atat <at> mykolab.ch>
Cc: 35534 <at> debbugs.gnu.org
Subject: Re: bug#35534: 26.2; Failure to verify signature archive-contents.sig
Date: Sat, 04 May 2019 08:21:50 -0400
forcemerge 35414 35534
quit

Michael Chapman <atat <at> mykolab.ch> writes:

> Failed to verify signature archive-contents.sig:
> Bad signature from 474F05837FBDEF9B GNU ELPA Signing Agent

> gpg: BAD signature from "GNU ELPA Signing Agent
> <elpasign <at> elpa.gnu.org>" [unknown]

> Some further details of the context are available at
> https://www.reddit.com/r/emacs/comments/bgdq2n/failure_to_install_auctex_on_emacs_with_package/
> There I was advised this is a bug and should be reported.

It was meanwhile reported as https://debbugs.gnu.org/35414.






Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#35534; Package emacs. (Sat, 22 Jun 2019 15:14:03 GMT) Full text and rfc822 format available.

Message #13 received at 35534 <at> debbugs.gnu.org (full text, mbox):

From: Nicky Chorley <nick.chorley <at> gmail.com>
To: 35534 <at> debbugs.gnu.org
Date: Sat, 22 Jun 2019 09:47:19 +0100
I have been seeing the same problem on 26.2 and 25.3 on Linux.

Best,

Nicky

--
In GNU Emacs 26.2 (build 1, x86_64-pc-linux-gnu, GTK+ Version 3.18.9)
 of 2019-06-13 built on rigel
Windowing system distributor 'The X.Org Foundation', version 11.0.11803000
Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...
Importing package-keyring.gpg...done
Contacting host: elpa.gnu.org:443 [2 times]
Package refresh done
Failed to download ‘gnu’ archive.
You can run the command ‘package-refresh-contents’ with M-x pa-r- RET
Failed to download ‘gnu’ archive.
Making completion list...

Configured features:
XPM JPEG TIFF GIF PNG RSVG IMAGEMAGICK SOUND GPM DBUS GSETTINGS GLIB
NOTIFY ACL GNUTLS LIBXML2 FREETYPE XFT ZLIB TOOLKIT_SCROLL_BARS GTK3 X11
XDBE XIM THREADS LCMS2

Important settings:
  value of $LC_COLLATE: C
  value of $LANG: en_US
  locale-coding-system: iso-latin-1-unix

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  global-eldoc-mode: t
  eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Load-path shadows:
None found.

Features:
(shadow sort mail-extr emacsbug sendmail finder-inf help-mode mm-archive
message dired dired-loaddefs format-spec rfc822 mml mml-sec epa derived
gnus-util rmail rmail-loaddefs mailabbrev gmm-utils mailheader mm-decode
mm-bodies mm-encode mail-utils network-stream starttls url-http tls
gnutls mail-parse rfc2231 rfc2047 rfc2045 mm-util ietf-drums mail-prsvr
url-gw nsm rmc puny url-cache url-auth url url-proxy url-privacy
url-expand url-methods url-history url-cookie url-domsuf url-util
mailcap epg package easymenu epg-config url-handlers url-parse
auth-source cl-seq eieio eieio-core cl-macs eieio-loaddefs
password-cache url-vars seq byte-opt gv bytecomp byte-compile cconv
cl-loaddefs cl-lib elec-pair time-date mule-util tooltip eldoc electric
uniquify ediff-hook vc-hooks lisp-float-type mwheel term/x-win x-win
term/common-win x-dnd tool-bar dnd fontset image regexp-opt fringe
tabulated-list replace newcomment text-mode elisp-mode lisp-mode
prog-mode register page menu-bar rfn-eshadow isearch timer select
scroll-bar mouse jit-lock font-lock syntax facemenu font-core
term/tty-colors frame cl-generic cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932
hebrew greek romanian slovak czech european ethiopic indian cyrillic
chinese composite charscript charprop case-table epa-hook jka-cmpr-hook
help simple abbrev obarray minibuffer cl-preloaded nadvice loaddefs
button faces cus-face macroexp files text-properties overlay sha1 md5
base64 format env code-pages mule custom widget hashtable-print-readable
backquote threads dbusbind inotify lcms2 dynamic-setting
system-font-setting font-render-setting move-toolbar gtk x-toolkit x
multi-tty make-network-process emacs)

Memory information:
((conses 16 111254 13614)
 (symbols 48 22531 2)
 (miscs 40 43 192)
 (strings 32 34822 1975)
 (string-bytes 1 926777)
 (vectors 16 16920)
 (vector-slots 8 535223 11736)
 (floats 8 56 132)
 (intervals 56 334 249)
 (buffers 992 13)
 (heap 1024 43844 4245))




bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sun, 23 Feb 2020 12:24:03 GMT) Full text and rfc822 format available.

bug unarchived. Request was from Stefan Kangas <stefan <at> marxist.se> to control <at> debbugs.gnu.org. (Mon, 07 Dec 2020 10:00:02 GMT) Full text and rfc822 format available.

Forcibly Merged 35414 35534 44907. Request was from Stefan Kangas <stefan <at> marxist.se> to control <at> debbugs.gnu.org. (Mon, 07 Dec 2020 10:00:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Mon, 04 Jan 2021 12:24:04 GMT) Full text and rfc822 format available.

This bug report was last modified 3 years and 84 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.