Package: emacs
Version: 1:28.2+1-15
Severity: important
Dear Maintainer,
Just to confirm that this bug is distracting (especially for new users…):
- if we install GNU Emacs on Debian 12,
- assuming ~/.emacs and ~/.emacs.d are empty,
- running emacs and `M-x package-refresh-contents` just raises the error:
"Failed to download ‘nongnu’ archive."
Failed to verify signature archive-contents.sig:
No public key for 645357D2883A0966 created at 2024-05-31T23:05:08+0200
using EDDSA
Command output:
gpg: Signature made ven. 31 mai 2024 23:05:08 CEST
gpg: using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
gpg: Can't check signature: No public key
Sure, we can find workarounds in https://emacs.stackexchange.com/q/233
or add in one's init.el a snippet similar to inasprecali's suggestion:
(unless (package-installed-p 'gnu-elpa-keyring-update)
(let ((package-check-signature nil))
(package-refresh-contents)
(package-install 'gnu-elpa-keyring-update)))
But it'd be way better to benefit from a (security?) update to
properly fix this issue with the obsolete public key.
Thanks for your time
Best,
Erik
-- System Information:
Debian Release: 12.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-21-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages emacs depends on:
ii emacs-gtk 1:28.2+1-15
emacs recommends no packages.
emacs suggests no packages.
-- no debconf information
