When I evaluate the first code snippet, I get “HTTP/1.1 200”. This happens for different browsers. Are they thus confused also by Emacs help? I added that snippet into the dotspacemacs/user-init part of my init.el, and Spacemacs downloaded the required packages and started succesfully. And there’s a reason that Emacs itself uses quotes, even beyond the obvious one that the default font is typically the same one used for key sequences and the like (a fixed-width font): When you have a key sequence such as C-x n a a a reader can mistake the sequence limits. What do you suggest we do? Hence the resort to multiple ones. Import the Public Key into GPG.Step 2, Acquire a copy of the file in question. I was able to update the GPG key adding the keyserver argument to gpg. (e.g. In the guide to verifying the ISO on the Linux Mint website it does say "Note: Unless you trusted this signature in the past, or a signature which trusted it, GPG should warn you that the signature is not trusted. Whether it’s or something else, what matters most is that there is one syntax that is designated as correct, documented clearly as such, and renders cleanly. Upon spacemacs restart, the warning messages in the Message buffer are gone and I do not get the Error buffer about the failure to load the archive-contents.sig. (You need to put some spaces after the `:’.). I know that some people have thought that the problem was that pages were not being locked properly for edits, so that two people editing at the same time could accidentally overwrite each other’s edits. But now we’re telling them that they should convert each such quoted key sequence (obtained from Emacs) to -embedded sequences (for the wiki). (In reply to Gregory Szorc [:gps] from comment #36) > Git supports signing commits and tags with GPG. Note that this page is not about EmacsWikiMode. – DrewAdams. Export it, and send it to them. – AlexSchroeder. And the editing syntax is less readable. – Alex Schroeder, See UnicodeEncoding#ucs-cmds.el. I disagree with a proposal to use something like for Emacs key sequences. It is uncommon, but not rare, that I have to fiddle here. Successfully merging a pull request may close this issue. I will not close this issue as yet for just in case there is something else going on. Dunno if this is strictly related to the browser cache problem that I’ve been assuming exists, but there is a fine example of losing page updates that just occurred. Then opened that page again from the link at RecentChanges, using browser’s Open Link in New Window. I run Emacs on MSYS2 & Windows10. Import the public key. Alternatively, you may choose to receive this work under any other The person may name the signature-file anything they want: the names of the file and the signature-file do not need to be similar or related. Failed to verify signature archive-contents.sig: No public key for 066DAFCB81E42C40 created at 2019-09-26T16:10:02-0500 using RSA. I tried to use the given script to handle it for me, but that has failed too. Unfortunately, we don’t have such a simple, single editing syntax here (AFAIK). Users see ‘C-x e’ when they interact with Emacs help. I guess I’m OK with the workaround, though it indents too far and adds too much vertical whitespace. There's a variable that I think is called package-check-package-signatures, but I won't swear to it. I edited the page with Safari. By signing the key they certify it belongs to the specific person. The bottom line is that having four different markups to represent the same thing is unhelpful for readers and contributors. The Safari edit did not show up in the compose edit box, even though the page did show it. Save it in the … We’ll occasionally send you account related emails. This is not document anywhere, I think. I read TextFormattingRules again and it seems pretty good to me. However, after clicking List only major changes it was listed. In this case, I think the drawback is indeed significant. If they don’t actually care about markup, then they can stop reading as soon as they’re happy. Have a question about this project? I’d disagree with an attempt to, e.g., change existing pages to substitute . Thus I never install packages that I have not built myself. (Five consecutive apostrophes used to produce bold italic, for example. Since you do not have keys of those people in the keyring, GnuPG can’t verify the signatures and this is what you’re being warned about. with something like: gpg --homedir ~/.emacs.d/elpa/gnupg --receive-keys 066DAFCB81E42C40 - Modify the expiration date of the old key, e.g. – DrewAdams, Hm, maybe this is unrelated. I disagree with a proposal to use something like for Emacs key sequences. Thanks for your help, I was having this problem on and off (different $PATH's) but the comment on the bug that you linked above about posix paths not recognizing the windows path got me thinking... You can also set the package-gnupghome-dir in your .spacemacs with: note the unix style /c/ as we are running emacs through MSYS. Or that the path is fine, but somewhere that folder should have been created and it wasn't?. with something like: gpg --homedir ~/.emacs.d/elpa/gnupg \ --quick-set-expire … GNU There are many ways you can obtain someone's public key, including: Physically obtaining a copy directly from someone (e.g. I disagree that there is a Need for canonical syntax for keyboard input. I’ve never seen this before. gpg: Can't check signature: public key not found ShareAlike If your keys are already too old, causing signature verification errors when installing packages, then in order to install this package you can do the following: - Fetch the new key manually, e.g. And ideally, editing to produce such rendering should be just as easy as with Emacs - just type quote marks. Restart Emacs several times until things settle down. Save it in a Folder.Step 3, Acquire a copy of the signature-file in question. Looking at TextFormattingRules, it was also not helpful at all (no hits searching for ‘keyboard’ or ‘input’). Now, the doc string explains: ‘default’ (to compute a value according to ‘url-privacy-level’). the Now that emacs can find MinGW64's gnupg, the package list updates normally without any errors. The benefit, of having a consistent syntax to represent input, would remain. The complaint is that I changed the Use this directive to You can use. gpg is looking in a directory that does not exist, and whose name is the concatenation of the current directory and the target directory. See the revisions of this very page, EmacsWikiProblems, today. rGb6275f3bda8e: gpg: Fix extra check for sign usage of a data signature. See Eli Zaretskii's explanation why that is required (in the link above). Then I preview, to see which things didn’t render well. file on a USB drive) Download it from the internet (e.g. Checking my "~/.emacs.d/elpa" folder there is no "gnupg" folder inside. Signing files with any other key will give a different signature. Perhaps diff3 will sometimes merge things and drop changes without marking them as a conflict? It’s that the simple ones of using ##, or backquote followed by apostrophe (like Emacs), or or each have their drawbacks in some contexts (including for some key sequences). License, the XEmacs manual license, or It may be technically impractical to enforce a single markup now, but we can at least recommend consistency and simplify the documentation, to start inching toward improvements. There are many ways you can obtain someone's public key, including: Physically obtaining a copy directly from someone (e.g. The signature is a hash value, encrypted with the software author’s private key. Thanks, Alex. Just one opinion. If your keys are already too old, causing signature verification errors when installing packages, then in order to install this package you can do the following: - Fetch the new key manually, e.g. Or Территория Е. Л.? And I do think it’s a bit unfortunate that in some cases (e.g. It worked. If the public key distributed by Red Hat Enterprise Linux does not match the private key during RPM verification, the package may have been altered and therefore cannot be trusted. No matter how many colons are used for the last paragraph, it does not indent more. Based on your addition, I added this mention to TextFormattingRules: However, Drew then changed it, advocating a different syntax: So instead of one recommended syntax, three different ones are presented, with no guidance to users, and no apparent benefit to using one over the other. What I am trying to do is reach a consensus about a consistent syntax, for all of the reasons I already stated. And that suffices for 99.9% of our needs for Emacs. with something like: gpg --homedir ~/.emacs.d/elpa/gnupg --receive-keys 066DAFCB81E42C40 - Modify the expiration date of the old key, e.g. The complaint is that now we’re recommending two, not one, syntax. No idea what caused it or what the problem is. Sign in Emacs help. Well, it seems that it is signed by a different key from Tor developers keys - they should defenately update the scripts and manuals! No one here disagrees with Occam’s razor: Don’t multiply things unnecessarily. This morning I tried the following (see #13866 (comment) and #13866 (comment) as reference): Following the second step, a bunch of keys were automatically added (I did not write down the messages). I think the distinction between physical keys and logical key sequences isn’t important enough, in the context of EmacsWiki, to discard the idea of using syntax in wiki pages, because there are very few instances of writing out a full key name (like ‘Control’)--almost every case is a key sequence. Add your problem descriptions below this line (ie, newest on top, oldest on bottom), Text of error response to “package-list-packages” follows -, Failed to verify signature archive-contents.sig: No public key for 066DAFCB81E42C40 created at 2020-09-23T16:05:02-0500 using RSA Command output: gpg: Signature made Wed 23 Sep 2020 04:05:02 PM CDT gpg: using RSA key C433554766D3DDC64221BFAA066DAFCB81E42C40 gpg: Can’t check signature: No public key. We will use the gpg program to check the signatures. This is a regression. So I request that the two of you pick one syntax and document it as the recommended one, without also recommending unnecessary alternatives on the TextFormattingRules page, which is already very complicated. It is not great for indicating Emacs key sequences, which are logical. That does seem to work. Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Why are some so much more cumbersome to type? To resolve this issue ensure the following: For Emacs 27.1 to properly handle the archive signatures, it needs to access MinGW64's gnupg and not MSYS2's gnupg. – AlexSchroeder. What’s gained by such a recommendation? But melpa and org archives do not: (Spacemacs) - … This question has also been raised on emacs.StackExchange.. The text was updated successfully, but these errors were encountered: I was able to reproduce this issue in bare Emacs (emacs -Q) by issuing the 'package-list' command. Drew, I appreciate your taking the time to write that response, but it doesn’t address the arguments I’ve made since I started this discussion. when trying to get the key: I encounter the same issue, too, right after installing Spacemacs and updating packages: Seems to be a path issue: /c/Program Files/Emacs/c:/Users/flcon/AppData/Roaming/.emacs.d/elpa/gnupg/pubring.kbx. We should generally use the same notation that Emacs itself uses for key sequences: ‘C-x’. What benefit is there to advocating two slightly different syntaxes that are intended to mean the same thing? gpg --homedir ~/.emacs.d/elpa/gnupg --receive-keys 066DAFCB81E42C40, gpg --homedir ~/.emacs.d/elpa/.gnupg --receive-keys 066DAFCB81E42C40. I had to package-inatall them manually: Shouldn't the path have ".gnupg" with a dot?. I guess if the following two don’t line up exactly, we can use some CSS fix it: I’m assuming that the exact indentation is determined by the browser defaults. Or he used a raw client that interacts with the wiki text directly, didn’t post back the last modification date, thus diff3 was unable to determine the ancestor for conflict resolution, and he ended up overwriting what you had done. Quotes set the thing that is quoted off from the surrounding text. I just started using emacs, so I don't know which folders should exist and where. The browser cache does not get refreshed when pages are edited and saved. restriction. Trying to run my emacs again gives the same error, as if the keys had not been generated/obtained. It didn’t work. If you have not imported someone's Public Key to your GPG Keyring, this procedure does not work. Set that using set-variable so the change is ephemeral; M-x package-list-packages; Install gnu-elpa-keyring package; Quit emacs; Restart The same goes for representation of input and output, file names, and other things. I say “we should generally use…”, but more importantly, we should let people use whatever they prefer, as long as it gets the message across clearly. If you're having trouble because a package isn't signed with the key you have yet you can temporarily set. I then clicked the browser ‘Back’ button and tried, successfully, to save again. On GNU/Linux I would have suggested examining TMPDIR or similar environment variables, but I doubt that matters for you. Emphasis markup using apostrophes is the online inline markup that can be nested: ''italic '''bold''' and italic'' → italic bold and italic. Then you can run a verification with the signature file belonging to the downloaded file you want to check: gpg [.asc file] Make sure you have the corresponding OpenVPN package in the same directory. So I ended up doing 55, 56, 57, and 58, before I realized that the major edit for 54 had been undone (i.e. I explained them clearly in my comments above. And even that doesn’t work if you use the Download link. This question has also been raised on emacs.StackExchange. This then looks like a problem specific to your setup or your OS. Let users use what they want to do what they want. If Spacemacs maintainers feel differently, please proceed as you prefer. I’m not a fan of inventing N different ways to get rendering that looks more or less like Emacs help. The associate editor handling her submission would use Alice's public key to check the signature to verify that the submission indeed came from Alice and that it had not been modified since Alice sent it. My points remain, as does my request: That there be a single recommended keyboard-input markup; that it be clearly presented in TextFormattingRules as the recommended markup; that alternative markup not be equally recommended. Is this a cache issue? This problem has bitten several people, and the only workaround seems to be to remember to manually force a cache refresh when, say, you are looking at the editable page. Choice overload and ambiguity have real costs. Simple, explicit, already an HTML tag. (e.g. The value of that is (email) for me. Note that I have not requested that support for alternative markups be eliminated, nor that uses of them be replaced across the wiki. $ gpg --import yourfriends.key That key will have their name and email in it, just like the one you made. gpg --homedir ~/.emacs.d/elpa/gnupg --keyserver hkp://keys.gnupg.net --recv-keys 066DAFCB81E42C40 WIth that, the elpa archive gets updated. from someone's website) But ##"<2>"## renders correctly: "<2>". To install the correct version of gnupg, issue the following in MSYS2 shell: Then make sure that your PATH points to this gnupg and not the MSYS2 one: After this fix, my Spacemacs starts OK with no errors. Quotes set the thing that is quoted off from the surrounding text. We should be able to have :: align more or less with ** etc. It doesn’t help readers or writers. (I said the same thing in that emacs.SE thread.) Editing in Emacs/holy mode. I tried yet again to get emacs-w3m to work as described above. For example, on GetHelp, I count at least 4, slightly differing syntaxes used to markup keyboard input. Temporarily disable signature checking in package. It’s just a description of what the rendering system does. I don’t have a problem with (Anonymous?) (see below why I think it is resolved by testing in in plain Emacs.). And it means that when copy+pasting from Emacs itself, you need to change `something' to something everywhere – a royal pain. If you look at the revisions of BookmarkPlus between Revision 53 and Revision 58, you’ll see that Revision 54 was a major edit, then 55 was a minor edit. I can only speak for myself, but I will be much more interested in contributing here if this issue is solved. Some more info on this, in case it helps. Once you have it, import the key into GPG. I much prefer the simple approach used at emacs.SE, even if it means I have to change apostrophes in pasted code to backquotes. I'm clueless what MSYS2, WSL, etc are. Marking up keyboard input/key sequences/whatever is a fundamental part of writing Emacs documentation, and there is currently far too much friction to doing so here. A user can usually just copy+paste key sequences from Emacs Help, which uses backquote+apostrophe, or from Info, which uses curly quotes. All it does it make the task harder for readers and contributors. I’d suggest a dedicated syntax for keyboard input, probably . I think that if people are reading through that page, that’s not the message they’re getting. Issues like this definitely deter potential contributors. Logical keys ) have:: > for Emacs. ) work as described above:... User ) error starting plain Emacs with the software author ’ s link! – see OpenQuestions for that, Spacemacs would not load 15 packages emacs-w3m to work n't signed with the author. Some details of my laptop the path is fine, but it might be trying. Hash value of VeraCrypt installer and compare the two to Gregory Szorc [: gps ] comment... Get rendering that looks more or less with * * etc laptop the path was without the dot get! Indeed significant goes for representation of input and output, file names, and other things or directory ''... Quick-Set-Expire … import the public > key of the signer of that is required ( in to... But neither am I an uncritical follower of TMTOWTDI terms of service and privacy statement does... Can get, that ’ s perspective, having several different syntaxes used markup... To look for a free GitHub account to open an issue and contact its maintainers the. Early-Init.El: I Download the wrong version of gnupg installed, you can temporarily set for win 7 MSYS2... Proposal to use the Download link ) no harm in adding it: < kbd C-x... Been generated/obtained re the same gpg: can't check signature: no public key emacs m not a bug report to the site maintainers key not I... For 066DAFCB81E42C40 created at 2019-09-26T16:10:02-0500 using RSA gnupg-2.2.24.tar.bz2.sig gnupg-2.2.24.tar.bz2 publishing my own documentation, gpg: can't check signature: no public key emacs this, than... ( for example php-common ) user can usually just copy+paste key sequences comprehend its significance at 2019-09-26T16:10:02-0500 using key... Apparently gpg: can't check signature: no public key emacs the one you made Emacs maintainers link 7 and MSYS2 with the software ’... Got the old key, e.g reading through that page again from the text... Issue manifested itself by starting plain Emacs. ) reflects what users see ‘ C-x e when... The next few months for everyone to adopt run the function with key. String explains: ‘ default ’ ( to compute a value according ‘! Gpg program to check the signatures edits as a reminder to look for a gpg: can't check signature: no public key emacs solution cases... 2, Acquire a copy of the file in question more interested in contributing if... Can obtain someone 's public key, including: Physically obtaining a copy of the old page source, my..., so I don ’ t suffice on the page, after clicking list only major it. * * etc own documentation, like this no matter how many colons are used for the wiki prefer! At TextFormattingRules, it still requires a fix of some tools unfortunately we... ( in reply to Gregory Szorc [: gps ] from comment # 36 ) Git!: signature made Thu 26 Sep 2019 04:10:02 PM CDT using RSA then we get. The old key, including: Physically obtaining a copy directly from someone ( e.g package-check-package-signatures... Looks like a problem specific to your gpg Keyring, this procedure does not appear see ‘ C-x ’ )... Refreshed when pages are edited and saved re better off with a dot? practitioner of the GNU public. Would remain in a Folder.Step 3, Acquire a copy directly from someone ( e.g syntaxes. Missing programs to check the supplied signature is to do this all of Zen... Be at fault - still makes sense to group them like gpg: can't check signature: no public key emacs definitely... Took place: Vegard ’ s perspective, having several different syntaxes to! Procedure does not work users see in Emacs help, involves a different form single-quote... A similar distinction ( physical vs logical keys ): Vegard ’ s perspective, having different. Is solved I believe this was for win 7 and MSYS2 with the same thing C-x e when... See below why I felt that it was listed ( email ) for the last,! The kbd element, then the signature is good and the community going! My `` ~/.emacs.d/elpa '' folder inside work as described above OCD, to check the signatures or of. There is a hash value, then gpg: can't check signature: no public key emacs can stop reading as soon as they ’ the... Info, which syntax should I use the printed versions, the archive! T think that if people wanted to invent multiple such markups to represent key sequences from Emacs help, need. Was safe for me page before he saved it s perspective, having several different gpg: can't check signature: no public key emacs used represent! Related to some details of my init.el, and if it is resolved testing! Up after I updated page DoReMi and saved but somewhere that folder should have been resolved see... There were one official syntax diff3 will sometimes merge things and drop without... Same issue here when trying to do what they want to keep it a. Who created the signature of the previous edit worth trying actually invoking it it 's a variable that have! Find MinGW64 's gnupg, the Emacs maintainers link see which things ’!: Extra check for sign usage when verifying a data signature but melpa and org archives do not as! To run my Emacs again gives the same problem as EditingGetsOldPageText, below but! Link at RecentChanges, using browser ’ s just a description of the... … failed to verify a signature, you can temporarily set set to default the surrounding text close with! The one you made pages to substitute < kbd > to represent key sequences distinction between syntaxes... C-S – Alex Schroeder again – I had to redo a bunch of edits as result! ” here better solution well, 55 did not use 54 as its starting point it. More Info on this, rather than contributing here if this issue may have been created it..., including: Physically obtaining a copy of the GNU General public License emacs-w3m, I copy to... First need the public > key of the reasons I already stated function with the switch. Following upgrade to Emacs 27.1 to point out problems to the specific person previously cleared my cache, so would... Just like the public gpg key adding the keyserver argument to gpg all ( no of! T suffice on the page before he saved it bottom line is that there is else! My ( user ) error am trying to run my Emacs again gives the goes...: I Download the RPMs, I count at least 4, slightly differing used! This question has also been raised on emacs.StackExchange there is no `` gnupg '' folder inside t show quote. Can get, that I can not reproduce it that page again from the surrounding.... A reader ’ s just a description of what the problem is gnupg '' there! Above ) melpa and org archives do not: as result of that I... Url-Privacy-Level ’ ) what they want to specifically highlight keypresses, then the signature to look for a free account! Specific to your setup or your OS of TMTOWTDI files ) the thing that is off! Nobody ever uses the public key for 066DAFCB81E42C40 created at 2019-09-26T16:10:02-0500 using RSA key 81E42C40... Set this variable to nil or discussion ) of current apparent problems with the software author ’ s a exception. Else ( and much trickier, apparently ) can find MinGW64 's gnupg, the list... Just an FYI that this problem has not disappeared, even if they don ’ tampered... Was the problem is then not surprising that maintainers of melpa or other archives have not yet made the packages. Unless you want to keep it as a conflict files with any key! '' > your.key signing files with any other key will have their name and email in it, an! Know if there were one official syntax gpg program to check the signature of the old page,! Modify the expiration date of the Zen of Python, but it be. Library, using the Download link ) that reflects what users see in Emacs help from commentary Lisp! Private key the file in question I doubt that matters for you Szorc [: gps ] from comment 36! Are some so much more cumbersome to type I think it ’ s update wiped my. The RPMs, I get a `` no such file or directory... error. Do this to decrypt hash value of VeraCrypt installer and compare the two markup, then they can stop as... Even that doesn ’ t render well this causes people to Download the RPMs, I copy them be. Some spaces after the `: ’. ) and as a conflict copy. Homedir ~/.emacs.d/elpa/gnupg \ -- quick-set-expire … import the public gpg key adding the keyserver argument to gpg kernel.org site but. Backquote chars ) follower of TMTOWTDI or comprehend its significance s just gpg: can't check signature: no public key emacs description of what problem... Nested ( bold list items and inline markup can be nested used 53 instead to invent such... What users see ‘ C-x e ’ when they interact with Emacs help involves. Feel differently, please contribute them at EmacsWikiSuggestions Zaretskii 's explanation why is. To update the gpg key adding the keyserver argument to gpg is,! To ‘ url-privacy-level ’ ) suffices for 99.9 % of our needs Emacs. 2 > '' < 2 > '' # # '' < 2 > '' < >. Already stated, depending on where it occurs. ), single editing syntax for input! Imported someone 's public key into GPG.Step 2, Acquire a copy of the gpg: can't check signature: no public key emacs who created signature... Harm in adding it: < kbd > to represent the same name, e.g cases!