PGP verification of package-index files
Hi Folks!
I've just committed a patch to XEmacs 21.5 that fixes the PGP code in
the package tools.
Could I please ask those of you who have PGP to test this for me. I
want to hear of successes _and_ failures.
Test it by:
- grab the latest CVS sources and build a new XEmacs
- (setq package-get-require-signed-base-updates t)
- You'll need MailCrypt installed. Which should snarf my key
the first time you get the signed index file. [1]
- Tools -> Packages -> Add Download Site -> [2]
- Tools -> Packages -> Update Package Index or List & Install
Once that completes just do 'C-h l' and look at the recent messages
for something similar to:
gpg: Good signature from "Steve Youngs <youngs(a)xemacs.org>"
When you send me your success/failure report, please also tell me
which version of PGP you are using.
Thanks very much for your help.
Footnotes:
[1] If it doesn't, you should be able to find my key on most key
servers (the keyid is in my sig). It's also in:
/ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
[2] Both Pre-Releases and the main xemacs.org directories have signed
index files in them.
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|