Hide Forgot
Description of problem: When I try to update the package index, list and install or update installed packages I always get the same error: "Can't check signature: Public key 82EDF2C1D1DD84CD not found" Version-Release number of selected component (if applicable): [version 21.4.15; April 2004] How reproducible: always Steps to Reproduce: 1. Click Tools > Packages > Update Package Index or List and Install or Update Installed Packages 2. 3. Actual results: "Can't check signature: Public key 82EDF2C1D1DD84CD not found" Expected results: Get a new package index or a list of packages with the option to upgrade or an automatice upgrade of all installed packages. Additional info: This works fine on FC1 with xemacs version 21.4.14
See bug 120437. Should get fixed in next build.
Oops, forgot comment 1 - that patch has already been applied. Ville, any ideas?
Like the error message says, the problem is that you don't have the XEmacs package manager's GPG key installed. So, either: 1) Import the key (0xD1DD84CD) to the GPG keyring of the user you are updating the packages with (I'd recommend a non-root user, BTW). XEmacs should try to do this automatically, but apparently it fails for you for some reason (no keyserver configured in ~/.gnupg/gpg.conf?). The key can be found eg. at http://pgp.mit.edu:11371/pks/lookup?search=0xD1DD84CD&op=index 2) Disable GPG checking by unchecking the "Options->Advanced->Emacs->Package Tools->Package Get->Require Signed Base Updates" checkbox, and remember to save the settings. I've just done a successful package update using a normal user account and having the GPG key imported with 21.4.15-5. Most likely there will be about 20 second delay during "Verifying..." when the GPG sig is verified, that's a known but a cosmetic problem in (upstream) 21.4.15. So, I'd say NOTABUG or WORKSFORME... :)
Oh, and of course an easy way to import the key would be for example: gpg --keyserver pgp.mit.edu --recv-keys D1DD84CD
I tried Ville's suggestion and it works fine for me. So perhaps this "bug" should be closed and listed as my ignorance of a new feature. Further proof of why open source and Fedora is the only way to go! Thanks to all. dave
Thanks.