|--==> "rdr" == robert delius royar <robert(a)frinabulax.org> writes:
rdr> When I try to update packages (in prerelease) I get this error:
rdr> Can't check signature: Public key 82EDF2C1D1DD84CD not found
,----[ In your '~/.gnupg/gpg.conf' ]
| keyserver-options auto-key-retrieve
| keyserver
x-hkp://pgp.mit.edu
`----
If you get that error XEmacs should really ask if you want to update
the package-index without verifying. I smell a bug, I'll see what I
can do about it.
Thank you very much for bringing it to my attention, Robert.
rdr>
http://www.xemacs.org/Documentation/packageGuide.html#Installing_automati...
rdr> says
rdr> Depending on whether you are using mailcrypt/PGP, you will get some question
rdr> about keys to fetch or whether to use the index without verifying the
rdr> signature. If the new index was different from the one already on disk,
XEmacs
rdr> will offer you to overwrite the old index.
rdr> However, I never see a question about whether to use the index without
rdr> verifying.
I think the wording of that could be a lot better, I'll fix that up.
And double check the code to make sure it DTRT.
rdr> Is there a variable I can set so that lack of verification is
rdr> not a problem?
(setq package-get-require-signed-base-updates nil)
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|