Re: HELP: problem with ELPA archive-contents.sig in list-packages ?

[Zhengyi Fu]

David Masterson <dsmasterson@gmail.com> writes:

> Let's try again...
>
> I am using Emacs 28.3 and have a problem with list-packages in the last
> week or so.  After starting emacs, I run list-packages.  It appears to
> be successful, but, after ~5 seconds, the following *Error* buffer pops
> up:
>
> ================
> Failed to verify signature archive-contents.sig:
> No public key for 645357D2883A0966 created at 2024-05-15T14:05:06-0700 using 
> EDDSA
> Command output:
> gpg: Signature made Wed May 15 14:05:06 2024 PDT
> gpg:                using EDDSA key 0327BE68D64D9A1A66859F15645357D2883A0966
> gpg: Can't check signature: No public key
> ================
>
> I cannot find archive-contents.sig on my system (I did find
> archive-contents.signed in the .emacs.d/elpa/archive/elpa directory), so
> I'm thinking this has to do with something on ELPA.
>
> Did something change that I missed?  Any advice?

I ran into the same problem today.  My solution is to temporarily
disabled signature checking by setting `package-check-signature' to nil
and installing the `gnu-elpa-keyring-update'[1] package, which helps to
update the public keys.

Footnotes:
[1]  https://elpa.gnu.org/packages/gnu-elpa-keyring-update.html