Re: PGP verification of package-index files

|--==> "APA" == Adrian Aichner <Adrian.Aichner(a)t-online.de&gt; writes: SY> Hi Folks! SY> I've just committed a patch to XEmacs 21.5 that fixes the PGP code in SY> the package tools. SY> Could I please ask those of you who have PGP to test this for me. I SY> want to hear of successes _and_ failures. APA> Here goes: APA> 1. APA> (locate-file "gpg" exec-path) APA> won't do it on Windows, patch forthcoming to use APA> (locate-file "gpg" exec-path exec-suffix-list) Okay, I'll leave that up to you, Adrian. APA> 2. APA> Signaling: (void-function mc-verify) Fixed in CVS shortly (just gotta send in a patch) APA> 3. APA> Signaling: (process-error "Searching for program" "/bin/sh") APA> OK, small patch to mailcrypt.el is in order. Sounds like a Windoze[tm] kinda thang. Can you take care of this as well, please Adrian? APA> 4. APA> OK, now I have to admit I'm new to PGP. APA> Following failure is due to this: APA> gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B APA> gpg: Can't check signature: public key not found Okay. That's not my key. It has the comment "XEmacs distribution key blah blah the key used for signing XEmacs distributions". I can't use that to sign the package-index files because I don't have the secret key for it. And it'd be a pretty big breach of security if someone was to give it to me, so I don't want it. APA> 5. APA> Trying to snarf APA> /ftp＠ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc APA> with mailcrypt-snarf, I get: If you've got 'steve_youngs.asc' still on your system, try doing it manually: gpg --import /path/to/steve_youngs.asc And then to make sure that it is there: gpg --list-keys The new key (mine) will be the last one on the list. APA> I have this installed: APA> gpg (GnuPG) 1.0.6 This is good. It's what I use. APA> Signaling: (error "No key import status: your GnuPG is too old.") Don't know. I can only presume that it had something to do with your mailcrypt-snarf going wrong. APA> Where do I go from here? Well, hopefully, once I commit a patch to fix a couple of things you've mentioned, and you get those windozie patches in, everything will be "honky-dory". -- |---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---| | XEmacs - It's not just an editor. | | It's a way of life. | |------------------------------------&lt;youngs(a)xemacs.org&gt;---|