> Just to confirm that this bug is distracting (especially for new users…):
>
> - if we install GNU Emacs on Debian 12,
> - assuming ~/.emacs and ~/.emacs.d are empty,
> - running emacs and `M-x package-refresh-contents` just raises the error:
>
> "Failed to download ‘nongnu’ archive."
>
> Failed to verify signature archive-contents.sig:
> No public key for 645357D2883A0966 created at 2024-05-31T23:05:08+0200
> using EDDSA
> Command output:
> gpg: Signature made ven. 31 mai 2024 23:05:08 CEST
> gpg: using EDDSA key
> 0327BE68D64D9A1A66859F15645357D2883A0966
> gpg: Can't check signature: No public key
Thanks Erik, indeed the problem is that the GPG keys distributed with
Emacs-28 are expired, so it would be great to release a new stable
version of the `emacs` package, still built from Emacs-28 except using
Emacs-29's `etc/package-keyring.gpg`.
Stefan
