7:49 a.m.
Hi Folks!
I've just committed a patch to XEmacs 21.5 that fixes the PGP code in
the package tools.
Could I please ask those of you who have PGP to test this for me. I
want to hear of successes _and_ failures.
Test it by:
- grab the latest CVS sources and build a new XEmacs
- (setq package-get-require-signed-base-updates t)
- You'll need MailCrypt installed. Which should snarf my key
the first time you get the signed index file. [1]
- Tools -> Packages -> Add Download Site -> [2]
- Tools -> Packages -> Update Package Index or List & Install
Once that completes just do 'C-h l' and look at the recent messages
for something similar to:
gpg: Good signature from "Steve Youngs <youngs(a)xemacs.org>"
When you send me your success/failure report, please also tell me
which version of PGP you are using.
Thanks very much for your help.
Footnotes:
[1] If it doesn't, you should be able to find my key on most key
servers (the keyid is in my sig). It's also in:
/ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
[2] Both Pre-Releases and the main xemacs.org directories have signed
index files in them.
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|
12:50 p.m.
>>>> "SY" == Steve Youngs
<youngs(a)xemacs.org> writes:
SY> Hi Folks!
SY> I've just committed a patch to XEmacs 21.5 that fixes the PGP code in
SY> the package tools.
SY> Could I please ask those of you who have PGP to test this for me. I
SY> want to hear of successes _and_ failures.
Here goes:
1.
(locate-file "gpg" exec-path)
won't do it on Windows, patch forthcoming to use
(locate-file "gpg" exec-path exec-suffix-list)
2.
Signaling: (void-function mc-verify)
(mc-verify)
(progn (setq package-get-continue-update-base nil) (autoload (quote mc-setversion)
"mc-setversion") (or (cond ... ... ...) (error "Can't find a suitable
pgp executable")) (mc-verify) (setq package-get-continue-update-base t))
(if package-entries-are-signed (progn (setq package-get-continue-update-base nil)
(autoload ... "mc-setversion") (or ... ...) (mc-verify) (setq
package-get-continue-update-base t)) (if (yes-or-no-p "Package Index is not PGP
signed. Continue anyway? ") (setq package-get-continue-update-base t) (error
"Package database not updated") (setq package-get-continue-update-base nil)))
(if package-get-require-signed-base-updates (if package-entries-are-signed (progn ...
... ... ... ...) (if ... ... ... ...)))
(save-excursion (set-buffer buf) (goto-char (point-min)) (setq content-beg (point))
(setq content-end (save-excursion ... ...)) (when (re-search-forward
package-get-pgp-signed-begin-line nil t) (setq beg ...) (setq content-beg ...)) (when
(re-search-forward package-get-pgp-signature-begin-line nil t) (setq content-end ...)
(setq package-entries-are-signed t)) (when (re-search-forward
package-get-pgp-signature-end-line nil t) (setq end ...)) (setq
package-get-continue-update-base t) (if package-get-require-signed-base-updates (if
package-entries-are-signed ... ...)) (if package-get-continue-update-base (progn ...
...)))
(let (content-beg content-end beg end) (save-excursion (set-buffer buf) (goto-char ...)
(setq content-beg ...) (setq content-end ...) (when ... ... ...) (when ... ... ...) (when
... ...) (setq package-get-continue-update-base t) (if
package-get-require-signed-base-updates ...) (if package-get-continue-update-base ...)))
package-get-update-base-from-buffer(#<buffer "*package database*">)
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list ...))>("C:\\Program
Files\\XEmacs\\XEmacs-21.5-b3\\etc\\package-index.LATEST.pgp")
call-interactively(package-get-update-base)
(featurep 'mailcrypt)
nil
OK
(require 'mailcrypt)
fixes that.
3.
Signaling: (process-error "Searching for program" "/bin/sh")
start-process-internal("*GPG*" #<buffer " *mailcrypt stdout
temp"> "/bin/sh" "/c" "gpg --status-fd 3
3>c:\\tmp\\mailcrypt-gpg-status-wsAISS 2>c:\\tmp\\mailcrypt-gpg-stderr-wsA7HM
--batch --verify")
apply(start-process-internal "*GPG*" #<buffer " *mailcrypt stdout
temp"> "/bin/sh" ("/c" "gpg --status-fd 3
3>c:\\tmp\\mailcrypt-gpg-status-wsAISS 2>c:\\tmp\\mailcrypt-gpg-stderr-wsA7HM
--batch --verify"))
start-process("*GPG*" #<buffer " *mailcrypt stdout temp">
"/bin/sh" "/c" "gpg --status-fd 3
3>c:\\tmp\\mailcrypt-gpg-status-wsAISS 2>c:\\tmp\\mailcrypt-gpg-stderr-wsA7HM
--batch --verify")
start-process-shell-command("*GPG*" #<buffer " *mailcrypt stdout
temp"> "gpg" "--status-fd" "3"
"3>c:\\tmp\\mailcrypt-gpg-status-wsAISS"
"2>c:\\tmp\\mailcrypt-gpg-stderr-wsA7HM" "--batch"
"--verify")
apply(start-process-shell-command "*GPG*" #<buffer " *mailcrypt stdout
temp"> "gpg" ("--status-fd" "3"
"3>c:\\tmp\\mailcrypt-gpg-status-wsAISS"
"2>c:\\tmp\\mailcrypt-gpg-stderr-wsA7HM" "--batch"
"--verify"))
mc-gpg-process-region(1 46330 nil "gpg" ("--batch"
"--verify") mc-gpg-verify-parser #<buffer "*MailCrypt*">)
mc-gpg-verify-region(1 46330)
mc-verify-signature()
mc-verify()
(progn (setq package-get-continue-update-base nil) (autoload (quote mc-setversion)
"mc-setversion") (or (cond ... ... ...) (error "Can't find a suitable
pgp executable")) (mc-verify) (setq package-get-continue-update-base t))
(if package-entries-are-signed (progn (setq package-get-continue-update-base nil)
(autoload ... "mc-setversion") (or ... ...) (mc-verify) (setq
package-get-continue-update-base t)) (if (yes-or-no-p "Package Index is not PGP
signed. Continue anyway? ") (setq package-get-continue-update-base t) (error
"Package database not updated") (setq package-get-continue-update-base nil)))
(if package-get-require-signed-base-updates (if package-entries-are-signed (progn ...
... ... ... ...) (if ... ... ... ...)))
(save-excursion (set-buffer buf) (goto-char (point-min)) (setq content-beg (point))
(setq content-end (save-excursion ... ...)) (when (re-search-forward
package-get-pgp-signed-begin-line nil t) (setq beg ...) (setq content-beg ...)) (when
(re-search-forward package-get-pgp-signature-begin-line nil t) (setq content-end ...)
(setq package-entries-are-signed t)) (when (re-search-forward
package-get-pgp-signature-end-line nil t) (setq end ...)) (setq
package-get-continue-update-base t) (if package-get-require-signed-base-updates (if
package-entries-are-signed ... ...)) (if package-get-continue-update-base (progn ...
...)))
(let (content-beg content-end beg end) (save-excursion (set-buffer buf) (goto-char ...)
(setq content-beg ...) (setq content-end ...) (when ... ... ...) (when ... ... ...) (when
... ...) (setq package-get-continue-update-base t) (if
package-get-require-signed-base-updates ...) (if package-get-continue-update-base ...)))
package-get-update-base-from-buffer(#<buffer "*package database*">)
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list ...))>("C:\\Program
Files\\XEmacs\\XEmacs-21.5-b3\\etc\\package-index.LATEST.pgp")
call-interactively(package-get-update-base)
OK, small patch to mailcrypt.el is in order.
4.
OK, now I have to admit I'm new to PGP.
Following failure is due to this:
gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
gpg: Can't check signature: public key not found
Signaling: (error "The message was corrupt.")
signal(error ("The message was corrupt."))
cerror("The message was corrupt.")
apply(cerror "The message was corrupt." nil)
error("The message was corrupt.")
mc-gpg-verify-parser(#<buffer " *mailcrypt stdout temp"> #<buffer
" *mailcrypt stderr temp"> #<buffer " *mailcrypt status
temp"> 2 nil)
funcall(mc-gpg-verify-parser #<buffer " *mailcrypt stdout temp">
#<buffer " *mailcrypt stderr temp"> #<buffer " *mailcrypt status
temp"> 2 nil)
(setq parser-result (funcall parser mybuf stderr-buf status-buf rc parserdata))
(progn (setq mybuf (get-buffer-create " *mailcrypt stdout temp")) (set-buffer
mybuf) (erase-buffer) (set-buffer obuf) (buffer-disable-undo mybuf) (if passwd (setq args
...)) (setq args (append ... args)) (setq args (append ... args)) (setq args (append ...
args)) (if mc-gpg-extra-args (setq args ...)) (mc-gpg-debug-print (format "prog is
%s, args are %s" program ...)) (setq proc (apply ... "*GPG*" mybuf program
args)) (if passwd (progn ... ...)) (process-send-region proc beg end) (process-send-eof
proc) (while (eq ... ...) (accept-process-output proc 5)) (setq status (process-status
proc)) (setq rc (process-exit-status proc)) (mc-gpg-debug-print (format "prog
finished, rc=%s" rc)) (delete-process proc) (set-buffer mybuf) (goto-char
(point-max)) (if (re-search-backward "\nProcess \\*GPG.*\n\\'" nil t)
(delete-region ... ...)) (goto-char (point-min)) (while (search-forward "
\n" nil t) (replace-match "\n")) (if (or ... ...) (error "%s exited
abnormally: '%s'" program rc)) (if (= 127 rc) (error "%s could not be
found" program)) (setq stderr-buf (get-buffer-create " *mailcrypt stderr
temp")) (buffer-disable-undo stderr-buf) (set-buffer stderr-buf) (erase-buffer)
(insert-file-contents stderr-tempfilename) (setq status-buf (get-buffer-create "
*mailcrypt status temp")) (buffer-disable-undo status-buf) (set-buffer status-buf)
(erase-buffer) (insert-file-contents status-tempfilename) (set-buffer mybuf) (setq
parser-result (funcall parser mybuf stderr-buf status-buf rc parserdata))
(mc-gpg-debug-print (format " parser returned %s" parser-result)) (if (car
parser-result) (progn ... ... ... ...)) (cdr parser-result))
(unwind-protect (progn (setq mybuf ...) (set-buffer mybuf) (erase-buffer) (set-buffer
obuf) (buffer-disable-undo mybuf) (if passwd ...) (setq args ...) (setq args ...) (setq
args ...) (if mc-gpg-extra-args ...) (mc-gpg-debug-print ...) (setq proc ...) (if passwd
...) (process-send-region proc beg end) (process-send-eof proc) (while ... ...) (setq
status ...) (setq rc ...) (mc-gpg-debug-print ...) (delete-process proc) (set-buffer
mybuf) (goto-char ...) (if ... ...) (goto-char ...) (while ... ...) (if ... ...) (if ...
...) (setq stderr-buf ...) (buffer-disable-undo stderr-buf) (set-buffer stderr-buf)
(erase-buffer) (insert-file-contents stderr-tempfilename) (setq status-buf ...)
(buffer-disable-undo status-buf) (set-buffer status-buf) (erase-buffer)
(insert-file-contents status-tempfilename) (set-buffer mybuf) (setq parser-result ...)
(mc-gpg-debug-print ...) (if ... ...) (cdr parser-result)) (if (and proc ...)
(interrupt-process proc)) (set-buffer obuf) (delete-file stderr-tempfilename) (delete-file
status-tempfilename) (if (not mc-gpg-debug-buffer) (progn ... ... ...)))
(let ((obuf ...) (process-connection-type nil) (shell-file-name shell-file-name) mybuf
stderr-tempfilename stderr-buf status-tempfilename status-buf proc rc status
parser-result) (mc-gpg-debug-print (format "(mc-gpg-process-region beg=%s end=%s
passwd=%s program=%s args=%s parser=%s bufferdummy=%s)" beg end passwd program args
parser bufferdummy)) (setq stderr-tempfilename (make-temp-name ...)) (setq
status-tempfilename (make-temp-name ...)) (unwind-protect (progn ... ... ... ... ... ...
... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...
... ... ... ... ... ... ... ... ... ... ... ... ... ...) (if ... ...) (set-buffer obuf)
(delete-file stderr-tempfilename) (delete-file status-tempfilename) (if ... ...)))
mc-gpg-process-region(1 46330 nil "gpg" ("--batch"
"--verify") mc-gpg-verify-parser #<buffer "*MailCrypt*">)
mc-gpg-verify-region(1 46330)
mc-verify-signature()
mc-verify()
(progn (setq package-get-continue-update-base nil) (autoload (quote mc-setversion)
"mc-setversion") (or (cond ... ... ...) (error "Can't find a suitable
pgp executable")) (mc-verify) (setq package-get-continue-update-base t))
(if package-entries-are-signed (progn (setq package-get-continue-update-base nil)
(autoload ... "mc-setversion") (or ... ...) (mc-verify) (setq
package-get-continue-update-base t)) (if (yes-or-no-p "Package Index is not PGP
signed. Continue anyway? ") (setq package-get-continue-update-base t) (error
"Package database not updated") (setq package-get-continue-update-base nil)))
(if package-get-require-signed-base-updates (if package-entries-are-signed (progn ...
... ... ... ...) (if ... ... ... ...)))
(save-excursion (set-buffer buf) (goto-char (point-min)) (setq content-beg (point))
(setq content-end (save-excursion ... ...)) (when (re-search-forward
package-get-pgp-signed-begin-line nil t) (setq beg ...) (setq content-beg ...)) (when
(re-search-forward package-get-pgp-signature-begin-line nil t) (setq content-end ...)
(setq package-entries-are-signed t)) (when (re-search-forward
package-get-pgp-signature-end-line nil t) (setq end ...)) (setq
package-get-continue-update-base t) (if package-get-require-signed-base-updates (if
package-entries-are-signed ... ...)) (if package-get-continue-update-base (progn ...
...)))
(let (content-beg content-end beg end) (save-excursion (set-buffer buf) (goto-char ...)
(setq content-beg ...) (setq content-end ...) (when ... ... ...) (when ... ... ...) (when
... ...) (setq package-get-continue-update-base t) (if
package-get-require-signed-base-updates ...) (if package-get-continue-update-base ...)))
package-get-update-base-from-buffer(#<buffer "*package database*">)
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list ...))>("C:\\Program
Files\\XEmacs\\XEmacs-21.5-b3\\etc\\package-index.LATEST.pgp")
call-interactively(package-get-update-base)
5.
Trying to snarf
/ftp＠ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
with mailcrypt-snarf, I get:
I have this installed:
gpg (GnuPG) 1.0.6
Copyright (C) 2001 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.
Home: c:/gnupg
Supported algorithms:
Cipher: 3DES, CAST5, BLOWFISH, RIJNDAEL, RIJNDAEL192, RIJNDAEL256, TWOFISH
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG
Hash: MD5, SHA1, RIPEMD160
Signaling: (error "No key import status: your GnuPG is too old.")
signal(error ("No key import status: your GnuPG is too old."))
cerror("No key import status: your GnuPG is too old.")
apply(cerror "No key import status: your GnuPG is too old." nil)
error("No key import status: your GnuPG is too old.")
mc-gpg-snarf-parser(#<buffer " *mailcrypt stdout temp"> #<buffer
" *mailcrypt stderr temp"> #<buffer " *mailcrypt status
temp"> 0 nil)
funcall(mc-gpg-snarf-parser #<buffer " *mailcrypt stdout temp">
#<buffer " *mailcrypt stderr temp"> #<buffer " *mailcrypt status
temp"> 0 nil)
(setq parser-result (funcall parser mybuf stderr-buf status-buf rc parserdata))
(progn (setq mybuf (get-buffer-create " *mailcrypt stdout temp")) (set-buffer
mybuf) (erase-buffer) (set-buffer obuf) (buffer-disable-undo mybuf) (if passwd (setq args
...)) (setq args (append ... args)) (setq args (append ... args)) (setq args (append ...
args)) (if mc-gpg-extra-args (setq args ...)) (mc-gpg-debug-print (format "prog is
%s, args are %s" program ...)) (setq proc (apply ... "*GPG*" mybuf program
args)) (if passwd (progn ... ...)) (process-send-region proc beg end) (process-send-eof
proc) (while (eq ... ...) (accept-process-output proc 5)) (setq status (process-status
proc)) (setq rc (process-exit-status proc)) (mc-gpg-debug-print (format "prog
finished, rc=%s" rc)) (delete-process proc) (set-buffer mybuf) (goto-char
(point-max)) (if (re-search-backward "\nProcess \\*GPG.*\n\\'" nil t)
(delete-region ... ...)) (goto-char (point-min)) (while (search-forward "
\n" nil t) (replace-match "\n")) (if (or ... ...) (error "%s exited
abnormally: '%s'" program rc)) (if (= 127 rc) (error "%s could not be
found" program)) (setq stderr-buf (get-buffer-create " *mailcrypt stderr
temp")) (buffer-disable-undo stderr-buf) (set-buffer stderr-buf) (erase-buffer)
(insert-file-contents stderr-tempfilename) (setq status-buf (get-buffer-create "
*mailcrypt status temp")) (buffer-disable-undo status-buf) (set-buffer status-buf)
(erase-buffer) (insert-file-contents status-tempfilename) (set-buffer mybuf) (setq
parser-result (funcall parser mybuf stderr-buf status-buf rc parserdata))
(mc-gpg-debug-print (format " parser returned %s" parser-result)) (if (car
parser-result) (progn ... ... ... ...)) (cdr parser-result))
(unwind-protect (progn (setq mybuf ...) (set-buffer mybuf) (erase-buffer) (set-buffer
obuf) (buffer-disable-undo mybuf) (if passwd ...) (setq args ...) (setq args ...) (setq
args ...) (if mc-gpg-extra-args ...) (mc-gpg-debug-print ...) (setq proc ...) (if passwd
...) (process-send-region proc beg end) (process-send-eof proc) (while ... ...) (setq
status ...) (setq rc ...) (mc-gpg-debug-print ...) (delete-process proc) (set-buffer
mybuf) (goto-char ...) (if ... ...) (goto-char ...) (while ... ...) (if ... ...) (if ...
...) (setq stderr-buf ...) (buffer-disable-undo stderr-buf) (set-buffer stderr-buf)
(erase-buffer) (insert-file-contents stderr-tempfilename) (setq status-buf ...)
(buffer-disable-undo status-buf) (set-buffer status-buf) (erase-buffer)
(insert-file-contents status-tempfilename) (set-buffer mybuf) (setq parser-result ...)
(mc-gpg-debug-print ...) (if ... ...) (cdr parser-result)) (if (and proc ...)
(interrupt-process proc)) (set-buffer obuf) (delete-file stderr-tempfilename) (delete-file
status-tempfilename) (if (not mc-gpg-debug-buffer) (progn ... ... ...)))
(let ((obuf ...) (process-connection-type nil) (shell-file-name shell-file-name) mybuf
stderr-tempfilename stderr-buf status-tempfilename status-buf proc rc status
parser-result) (mc-gpg-debug-print (format "(mc-gpg-process-region beg=%s end=%s
passwd=%s program=%s args=%s parser=%s bufferdummy=%s)" beg end passwd program args
parser bufferdummy)) (setq stderr-tempfilename (make-temp-name ...)) (setq
status-tempfilename (make-temp-name ...)) (unwind-protect (progn ... ... ... ... ... ...
... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...
... ... ... ... ... ... ... ... ... ... ... ... ... ...) (if ... ...) (set-buffer obuf)
(delete-file stderr-tempfilename) (delete-file status-tempfilename) (if ... ...)))
mc-gpg-process-region(1 1354 nil "gpg" ("--import"
"--batch") mc-gpg-snarf-parser #<buffer "*MailCrypt*">)
mc-gpg-snarf-keys(1 1354)
byte-code("..." [found start mc-default-scheme scheme schemes limits
mc-message-delimiter-positions assoc key-begin-line key-end-line throw done snarf-func]
5)
mc-snarf-keys()
#<compiled-function nil "...(17)" [func mc-modes-alist major-mode
mode-alist snarf mc-snarf-keys] 3 ("c:\\Program
Files\\XEmacs\\xemacs-packages\\lisp\\mailcrypt\\mc-toplev.elc" . -6742) nil>()
call-interactively(mailcrypt-snarf)
command-execute(mailcrypt-snarf t)
execute-extended-command(nil)
call-interactively(execute-extended-command)
Where do I go from here?
Best regards,
Adrian
SY> Test it by:
SY> - grab the latest CVS sources and build a new XEmacs
SY> - (setq package-get-require-signed-base-updates t)
SY> - You'll need MailCrypt installed. Which should snarf my key
SY> the first time you get the signed index file. [1]
SY> - Tools -> Packages -> Add Download Site -> [2]
SY> - Tools -> Packages -> Update Package Index or List &
Install
SY> Once that completes just do 'C-h l' and look at the recent messages
SY> for something similar to:
SY> gpg: Good signature from "Steve Youngs
<youngs(a)xemacs.org>"
SY> When you send me your success/failure report, please also tell me
SY> which version of PGP you are using.
SY> Thanks very much for your help.
SY> Footnotes:
SY> [1] If it doesn't, you should be able to find my key on most key
SY> servers (the keyid is in my sig). It's also in:
SY> /ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
SY> [2] Both Pre-Releases and the main xemacs.org directories have signed
SY> index files in them.
SY> --
SY> |---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
SY> | XEmacs - It's not just an editor. |
SY> | It's a way of life. |
SY> |------------------------------------<youngs(a)xemacs.org>---|
--
Adrian Aichner
mailto:adrian＠xemacs.org
http://www.xemacs.org/
3:15 p.m.
|--==> "APA" == Adrian Aichner <Adrian.Aichner(a)t-online.de> writes:
>>>>>"SY" == Steve Youngs
<youngs(a)xemacs.org> writes:
SY> Hi Folks!
SY> I've just committed a patch to XEmacs 21.5 that fixes the PGP code in
SY> the package tools.
SY> Could I please ask those of you who have PGP to test this for me. I
SY> want to hear of successes _and_ failures.
APA> Here goes:
APA> 1.
APA> (locate-file "gpg" exec-path)
APA> won't do it on Windows, patch forthcoming to use
APA> (locate-file "gpg" exec-path exec-suffix-list)
Okay, I'll leave that up to you, Adrian.
APA> 2.
APA> Signaling: (void-function mc-verify)
Fixed in CVS shortly (just gotta send in a patch)
APA> 3.
APA> Signaling: (process-error "Searching for program"
"/bin/sh")
APA> OK, small patch to mailcrypt.el is in order.
Sounds like a Windoze[tm] kinda thang. Can you take care of this as
well, please Adrian?
APA> 4.
APA> OK, now I have to admit I'm new to PGP.
APA> Following failure is due to this:
APA> gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
APA> gpg: Can't check signature: public key not found
Okay. That's not my key. It has the comment "XEmacs distribution key
blah blah the key used for signing XEmacs distributions".
I can't use that to sign the package-index files because I don't have
the secret key for it. And it'd be a pretty big breach of security if
someone was to give it to me, so I don't want it.
APA> 5.
APA> Trying to snarf
APA> /ftp＠ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
APA> with mailcrypt-snarf, I get:
If you've got 'steve_youngs.asc' still on your system, try doing it
manually:
gpg --import /path/to/steve_youngs.asc
And then to make sure that it is there:
gpg --list-keys
The new key (mine) will be the last one on the list.
APA> I have this installed:
APA> gpg (GnuPG) 1.0.6
This is good. It's what I use.
APA> Signaling: (error "No key import status: your GnuPG is too old.")
Don't know. I can only presume that it had something to do with your
mailcrypt-snarf going wrong.
APA> Where do I go from here?
Well, hopefully, once I commit a patch to fix a couple of things
you've mentioned, and you get those windozie patches in, everything
will be "honky-dory".
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|
11:03 p.m.
>>>> "SY" == Steve Youngs
<youngs(a)xemacs.org> writes:
SY> |--==> "APA" == Adrian Aichner <Adrian.Aichner(a)t-online.de>
writes:
>>>>>> "SY" == Steve
Youngs <youngs(a)xemacs.org> writes:
SY> Hi Folks!
SY> I've just committed a patch to XEmacs 21.5 that fixes the PGP code in
SY> the package tools.
SY> Could I please ask those of you who have PGP to test this for me. I
SY> want to hear of successes _and_ failures.
APA> Here goes:
APA> 1.
APA> (locate-file "gpg" exec-path)
APA> won't do it on Windows, patch forthcoming to use
APA> (locate-file "gpg" exec-path exec-suffix-list)
I have already commited a patch for the above.
SY> Okay, I'll leave that up to you, Adrian.
APA> 2.
APA> Signaling: (void-function mc-verify)
SY> Fixed in CVS shortly (just gotta send in a patch)
Yep, mc-verify is woking now.
APA> 3.
APA> Signaling: (process-error "Searching for program"
"/bin/sh")
APA> OK, small patch to mailcrypt.el is in order.
SY> Sounds like a Windoze[tm] kinda thang. Can you take care of this as
SY> well, please Adrian?
I have sent in a BIG patch for your approval.
Apparently many packages suffer from this problem.
Please advise.
A locally built mailcrypt package has the above problem fixed.
APA> 4.
APA> OK, now I have to admit I'm new to PGP.
APA> Following failure is due to this:
APA> gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
APA> gpg: Can't check signature: public key not found
SY> Okay. That's not my key. It has the comment "XEmacs distribution
key
SY> blah blah the key used for signing XEmacs distributions".
SY> I can't use that to sign the package-index files because I don't have
SY> the secret key for it. And it'd be a pretty big breach of security if
SY> someone was to give it to me, so I don't want it.
APA> 5.
APA> Trying to snarf
APA> /ftp＠ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
APA> with mailcrypt-snarf, I get:
SY> If you've got 'steve_youngs.asc' still on your system, try doing
it
SY> manually:
SY> gpg --import /path/to/steve_youngs.asc
SY> And then to make sure that it is there:
SY> gpg --list-keys
Right now I have
cd C:\Users\AichnerAd\
gpg --list-keys
Compilation started at Sun Dec 02 23:17:16 2001 +0100 (W. Europe Standard Time)
c:/gnupg/pubring.gpg
--------------------
pub 1024D/10D5C9C5 2001-12-02 Steve Youngs <youngs(a)xemacs.org>
sub 1024g/12E1DF0C 2001-12-02
Compilation finished at Sun Dec 02 23:17:16
Now I save /ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
locally and import it:
cd c:\Users\AichnerAd\www.xemacs.org\ftp\xemacs\pgp-keys\
gpg --import steve_youngs.asc
Compilation started at Sun Dec 02 23:39:01 2001 +0100 (W. Europe Standard Time)
gpg: key 10D5C9C5: not changed
gpg: Total number processed: 1
gpg: unchanged: 1
Compilation finished at Sun Dec 02 23:39:01
The listed keys are still the same as above!
SY> The new key (mine) will be the last one on the list.
APA> I have this installed:
APA> gpg (GnuPG) 1.0.6
SY> This is good. It's what I use.
APA> Signaling: (error "No key import status: your GnuPG is too old.")
SY> Don't know. I can only presume that it had something to do with your
SY> mailcrypt-snarf going wrong.
APA> Where do I go from here?
SY> Well, hopefully, once I commit a patch to fix a couple of things
SY> you've mentioned, and you get those windozie patches in, everything
SY> will be "honky-dory".
Not quite. Now I get:
Signaling: (error "The message was corrupt.")
signal(error ("The message was corrupt."))
cerror("The message was corrupt.")
apply(cerror "The message was corrupt." nil)
error("The message was corrupt.")
mc-gpg-verify-parser(#<buffer " *mailcrypt stdout temp"> #<buffer
" *mailcrypt stderr temp"> #<buffer " *mailcrypt status
temp"> 2 nil)
mc-gpg-process-region(1 46330 nil "gpg" ("--batch"
"--verify") mc-gpg-verify-parser #<buffer "*MailCrypt*">)
mc-gpg-verify-region(1 46330)
mc-verify-signature()
mc-verify()
package-get-update-base-from-buffer(#<buffer "*package database*">)
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list ...))>("C:\\Program
Files\\XEmacs\\XEmacs-21.4.6\\etc\\package-index.LATEST.pgp")
call-interactively(package-get-update-base)
and
" *mailcrypt stderr temp"
has this:
gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
gpg: Can't check signature: public key not found
"*MailCrypt*"
is empty even though the PGP SIGNATURE is found in
"*package database*"
Where to next?
Adrian
SY> --
SY> |---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
SY> | XEmacs - It's not just an editor. |
SY> | It's a way of life. |
SY> |------------------------------------<youngs(a)xemacs.org>---|
--
Adrian Aichner
mailto:adrian＠xemacs.org
http://www.xemacs.org/
6:07 a.m.
|--==> "APA" == Adrian Aichner <Adrian.Aichner(a)t-online.de> writes:
APA> I have sent in a BIG patch for your approval.
APA> Apparently many packages suffer from this problem.
APA> Please advise.
Yep, saw that. Also saw that you didn't wait for my approval.
Naughty boy! Go sit in the corner!
APA> cd C:\Users\AichnerAd\
APA> gpg --list-keys
APA> Compilation started at Sun Dec 02 23:17:16 2001 +0100 (W. Europe Standard Time)
APA> c:/gnupg/pubring.gpg
APA> --------------------
APA> pub 1024D/10D5C9C5 2001-12-02 Steve Youngs <youngs(a)xemacs.org>
APA> sub 1024g/12E1DF0C 2001-12-02
Yep, that's my key.
APA> Compilation finished at Sun Dec 02 23:17:16
APA> Now I save /ftp.xemacs.org:/pub/xemacs/pgp-keys/steve_youngs.asc
APA> locally and import it:
APA> cd c:\Users\AichnerAd\www.xemacs.org\ftp\xemacs\pgp-keys\
APA> gpg --import steve_youngs.asc
APA> Compilation started at Sun Dec 02 23:39:01 2001 +0100 (W. Europe Standard Time)
APA> gpg: key 10D5C9C5: not changed
APA> gpg: Total number processed: 1
APA> gpg: unchanged: 1
APA> Compilation finished at Sun Dec 02 23:39:01
APA> The listed keys are still the same as above!
Because your keyring already contained my key. It won't put the same
key in twice.
SY> Well, hopefully, once I commit a patch to fix a couple of things
SY> you've mentioned, and you get those windozie patches in, everything
SY> will be "honky-dory".
APA> Not quite. Now I get:
APA> Signaling: (error "The message was corrupt.")
[...]
APA> gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
APA> gpg: Can't check signature: public key not found
OK, I think I know what's going on.
Do this:
- delete, move or otherwise get rid of:
/usr/local/lib/xemacs-21.5-b3/etc/package-index.LATEST*
~/.xemacs/package-index.LATEST*
(so they don't get in our way)
- run xemacs -vanilla
(so we're on a clean slate)
- M-: (setq package-get-required-signed-base-updates t) RET
- Tools -> Packages -> Add Download Site -> Pre-Releases
- Tools -> Packages -> List and Install
How does that go?
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|
3:05 p.m.
>>>> "SY" == Steve Youngs
<youngs(a)xemacs.org> writes:
APA> gpg: Signature made 07/30/99 03:48:55 using DSA key ID DCF80B6B
APA> gpg: Can't check signature: public key not found
SY> OK, I think I know what's going on.
SY> Do this:
SY> - delete, move or otherwise get rid of:
SY> /usr/local/lib/xemacs-21.5-b3/etc/package-index.LATEST*
SY> ~/.xemacs/package-index.LATEST*
SY> (so they don't get in our way)
Did that.
SY> - run xemacs -vanilla
SY> (so we're on a clean slate)
OK.
SY> - M-: (setq package-get-required-signed-base-updates t) RET
package-get-require-signed-base-updates works better :-)
SY> - Tools -> Packages -> Add Download Site -> Pre-Releases
SY> - Tools -> Packages -> List and Install
SY> How does that go?
Hi Steve,
Doing it via the menus fails, because the dialog box complains if the
destination package-index.LATEST* does not exist.
Doing it via
M-x package-get-update-base
I get this:
Signaling: (error "Can't find a suitable pgp executable")
signal(error ("Can't find a suitable pgp executable"))
cerror("Can't find a suitable pgp executable")
apply(cerror "Can't find a suitable pgp executable" nil)
error("Can't find a suitable pgp executable")
package-get-update-base-from-buffer(#<buffer "*package database*">)
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list
...))>("/anonymous＠ftp.xemacs.org:pub/xemacs/beta/experimental/packages/package-index.LATEST.gpg")
call-interactively(package-get-update-base)
command-execute(package-get-update-base t)
execute-extended-command(nil)
call-interactively(execute-extended-command)
edebug-defun on package-get-update-base-from-buffer reveals that
exec-suffix-list is nil
in xemacs -vanilla
Setting it to:
(".COM" ".EXE" ".BAT" ".CMD" ".VBS"
".VBE" ".JS" ".JSE" ".WSF" ".WSH")
I get this now:
Signaling: (error "Can't locate a package index file.")
signal(error ("Can't locate a package index file."))
cerror("Can't locate a package index file.")
apply(cerror "Can't locate a package index file." nil)
error("Can't locate a package index file.")
package-get-locate-index-file(t)
package-get-maybe-save-index("/anonymous＠ftp.xemacs.org:/pub/xemacs/beta/experimental/packages/package-index.LATEST.gpg")
#<compiled-function (&optional db-file force-current) "...(62)"
[force-current buf db-file expand-file-name package-get-locate-index-file file-exists-p
error "Package-get database file `%s' does not exist" file-readable-p
"Package-get database file `%s' not readable" get-buffer-create
"*package database*" (...) erase-buffer insert-file-contents-literally
package-get-update-base-from-buffer file-remote-p package-get-maybe-save-index] 3
("c:\\Hacking\\XEmacs\\xemacs-21.5\\lisp\\package-get.elc" . 10952) (let (...)
(list
...))>("/anonymous＠ftp.xemacs.org:pub/xemacs/beta/experimental/packages/package-index.LATEST.gpg")
call-interactively(package-get-update-base)
command-execute(package-get-update-base t)
execute-extended-command(nil)
call-interactively(execute-extended-command)
After copying from
/anonymous＠ftp.xemacs.org:/pub/xemacs/beta/experimental/packages:
Copying package-index.LATEST.gpg to c:\Users\AichnerAd\.xemacs\...done
I get this when I do
M-x package-get-update-base
PGP version set to GPG.
Verifying...
BAD SIGNATURE claiming to be from 'nil'
Got 91 package-get database entries
Updated package-get database
SY> --
SY> |---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
SY> | XEmacs - It's not just an editor. |
SY> | It's a way of life. |
SY> |------------------------------------<youngs(a)xemacs.org>---|
--
Adrian Aichner
mailto:adrian＠xemacs.org
http://www.xemacs.org/
5:17 p.m.
|--==> "APA" == Adrian Aichner <adrian(a)xemacs.org> writes:
>>>>>"SY" == Steve Youngs
<youngs(a)xemacs.org> writes:
SY> - delete, move or otherwise get rid of:
SY> /usr/local/lib/xemacs-21.5-b3/etc/package-index.LATEST*
SY> ~/.xemacs/package-index.LATEST*
SY> (so they don't get in our way)
Oops. Looks like there has to be a package-index.LATEST.gpg file on
the local machine. Either in /usr/local/lib/xemacs-<ver>/etc/ or in
~/.xemacs/. Sorry for the bum steer there, Adrian.
I'll add a 'package-index.LATEST.gpg' file to the 21.5 core CVS,
SY> - Tools -> Packages -> Add Download Site -> Pre-Releases
SY> - Tools -> Packages -> List and Install
SY> How does that go?
APA> Hi Steve,
APA> Doing it via the menus fails, because the dialog box complains if the
APA> destination package-index.LATEST* does not exist.
See above, sorry.
APA> Signaling: (error "Can't locate a package index file.")
Same.
APA> M-x package-get-update-base
APA> PGP version set to GPG.
APA> Verifying...
APA> BAD SIGNATURE claiming to be from 'nil'
APA> Got 91 package-get database entries
APA> Updated package-get database
This is the bit that worries me. I know my lisp is right, I've tested
it at least a dozen times now... works perfectly every time. That's
under Linux, and now with your Win additions to package-get, it should
be fine there too.
The problem has got to have something to do with your GnuPG set up.
I'll send you a small file that is signed with my GnuPG key, with
instructions as to how to verify the sig. Let me know how it goes.
We'll get to the bottom of this. And if it turns out that for some
strange reason Windoze can't handle this, just leave
package-get-require-signed-base-updates set to nil. You won't be any
worse off than you are now.
--
|---<Steve Youngs>---------------<GnuPG KeyID: 10D5C9C5>---|
| XEmacs - It's not just an editor. |
| It's a way of life. |
|------------------------------------<youngs(a)xemacs.org>---|
8394
days inactive
8395
days old
6 comments
3 participants
participants (3)
-
Adrian Aichner -
Adrian Aichner -
Steve Youngs