GNU bug report logs - #62230
File "elpa-packages.eld" not signed, unlike file "archive-contents"

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 62230 in the body.
You can then email your comments to 62230 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Okamsn <okamsn <at> protonmail.com>
To: bug-gnu-emacs <at> gnu.org, Philip Kaludercic <philipk <at> posteo.net>
Subject: File "elpa-packages.eld" not signed, unlike file "archive-contents"
Date: Fri, 17 Mar 2023 00:16:30 +0000

Hello,

I have `package-check-signature` set to `all`. When I run the command
`package-vc-install`, it tries to download the file "elpa-package.eld"
from the archive.  However, this file is not signed, so the download fails.

When I disable the checking of signatures, the download succeeds.

It is possible to sign this file with the GNU ELPA key, just like the
file "archive-contents", which downloads successfully?

Thank you.

Message #8 received at 62230 <at> debbugs.gnu.org (full text, mbox):

From: Philip Kaludercic <philipk <at> posteo.net>
To: Okamsn <okamsn <at> protonmail.com>
Cc: 62230 <at> debbugs.gnu.org, Stefan Monnier <monnier <at> iro.umontreal.ca>
Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file
 "archive-contents"
Date: Fri, 17 Mar 2023 08:24:48 +0000

Okamsn <okamsn <at> protonmail.com> writes:

> Hello,

Hi,

> I have `package-check-signature` set to `all`. When I run the command
> `package-vc-install`, it tries to download the file "elpa-package.eld"
> from the archive.  However, this file is not signed, so the download fails.
>
> When I disable the checking of signatures, the download succeeds.

I assume you have configured `package-check-signature' or something like
that?  Because I don't appear to have any issues fetching the file.

> It is possible to sign this file with the GNU ELPA key, just like the
> file "archive-contents", which downloads successfully?

It should be, but I actually don't know how it is generated or at least
I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
know.

> Thank you.

-- 
Philip Kaludercic

Message #11 received at 62230 <at> debbugs.gnu.org (full text, mbox):

From: Stefan Monnier <monnier <at> iro.umontreal.ca>
To: Philip Kaludercic <philipk <at> posteo.net>
Cc: Okamsn <okamsn <at> protonmail.com>, 62230 <at> debbugs.gnu.org
Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file
 "archive-contents"
Date: Sat, 18 Mar 2023 09:58:54 -0400

>> It is possible to sign this file with the GNU ELPA key, just like the
>> file "archive-contents", which downloads successfully?
> It should be, but I actually don't know how it is generated or at least
> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
> know.

Yes, that was an oversight  Should be fixed now,


        Stefan

Message #14 received at 62230 <at> debbugs.gnu.org (full text, mbox):

From: Okamsn <okamsn <at> protonmail.com>
To: Stefan Monnier <monnier <at> iro.umontreal.ca>,
 Philip Kaludercic <philipk <at> posteo.net>
Cc: 62230 <at> debbugs.gnu.org
Subject: Re: bug#62230: File "elpa-packages.eld" not signed,
 unlike file "archive-contents"
Date: Sat, 18 Mar 2023 17:14:54 +0000

On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>> It is possible to sign this file with the GNU ELPA key, just like the
>>> file "archive-contents", which downloads successfully?
>> It should be, but I actually don't know how it is generated or at least
>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>> know.
>
> Yes, that was an oversight  Should be fixed now,
>
>
>          Stefan
>

The file now downloads successfully. I can see that it also downloaded
the signatures.

Thank you.

Message #19 received at 62230-done <at> debbugs.gnu.org (full text, mbox):

From: Philip Kaludercic <philipk <at> posteo.net>
To: Okamsn <okamsn <at> protonmail.com>
Cc: 62230-done <at> debbugs.gnu.org, Stefan Monnier <monnier <at> iro.umontreal.ca>
Subject: Re: bug#62230: File "elpa-packages.eld" not signed, unlike file
 "archive-contents"
Date: Sat, 18 Mar 2023 17:28:36 +0000

Okamsn <okamsn <at> protonmail.com> writes:

> On 2023-03-18 13:58 UTC, Stefan Monnier wrote:
>>>> It is possible to sign this file with the GNU ELPA key, just like the
>>>> file "archive-contents", which downloads successfully?
>>> It should be, but I actually don't know how it is generated or at least
>>> I am missing something in elpa-admin.el.  I have Cc'ed Stefan who should
>>> know.
>>
>> Yes, that was an oversight  Should be fixed now,
>>
>>
>>          Stefan
>>
>
> The file now downloads successfully. I can see that it also downloaded
> the signatures.
>
> Thank you.

OK, I'll close this report then.  Thanks for noticing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.