Joachim Schrod <jschrod(a)acm.org> writes:
================================================================
Dear Bug Team!
When I execute #'package-get-update-base or #'pui-list-packages (via
menu "Tools / Packages / Update Package Index" or "Tools / Packages /
List and Install"), I get the message
Can't check signature: Public key 82EDF2C1D1DD84CD not found
Installation is not possible, PUI does not appear.
As you can see from the transcript below, I use GPG and mailcrypt
discovers this. PGP is not installed. This is xemacs -vanilla; no
personal configuration.
I would propose to publish on the XEmacs Web site that this is
Norbert's key that one needs to install. Or that one can fetch that
key from a keyserver. (Or that one can turn on autofetching with GPG,
though I don't know if that's a good general recommendation.)
In addition, Norbert's key should be put on the XEmacs ftp server, in
/ftp/pub/xemacs/pgp-keys/.
In particular, the `Quickstart Package Guide' web page says that one
might `get some question about keys to fetch or whether to use the
index without verifying the signature.' No such question appears when
one uses GPG. (I could not check what happens if one uses PGP.) The
`XEmacs Installation HOWTO' should also be adapted.
I can write up one or two paragraphs for these two web pages if that
helps you. I can only cover GPG, though. (I read xemacs-beta, you can
answer there.)
Hi Joachim, judging from the detail you provide you are probably aware
of
(setq package-get-require-signed-base-updates nil)
http://www.xemacs.org/Documentation/packageGuide.html
should definitely mention it though!
If you want to write a few paragraphs, that would be great!
Best regards,
Adrian
Cheers,
Joachim
<357 lines deleted by Adrian Aichner>
--
Adrian Aichner
mailto:adrian@xemacs.org
http://www.xemacs.org/