Intrepid has asked for the wisdom of the Perl Monks concerning the following question:
Hello Monks. Been a long time. Something like 10 years.
I'm working on a machine that has both Strawberry Perl and Cygwin Perl installed. In Strawberry I am using cpan (CPAN.pm) to install / update CPAN modules. That's working well.
The problem is when using cpanp (CPANPLUS) to install / update CygwinPerl. For most modules the process works correctly, but some modules cannot be installed. These are modules that are signed with PGP/GPG. I get error output like the following:
Installing CPAN (2.37) gpg: Fatal: can't create directory '/cygdrive/c/Users/somia/AppData/Lo +cal/.cpanp/.cpanplus/5.40.0/Installing CPAN (2.37) gpg: Fatal: can't create directory '/cygdrive/c/Users/somia/AppData/Lo +cal/.cpanp/.cpanplus/5.40.0/build/psZPVjvSp4/CPAN-2.37/C:/Users/somia +/.gnupg': No such file or directory ==> BAD/TAMPERED signature detected! <== [ERROR] Signature check failed for module 'CPAN' -- Not trusting this +module, aborting install
Carefully notice the path that ends in build/psZPVjvSp4/CPAN-2.37/C:/Users/somia/.gnupg. That's obviously impossible. I don't know which module is doing this but it is a bug. So is the message that a bad / tampered signature is detected; that's not what's happening. Also, note that the fact that I am using cpanp is incidental and not causal. The same results take place when I attempt to install manually.
Please also note that I realize as a long-time Cygwin user, that Cygwin setup has dozens or more packaged CPAN modules available. I just prefer using cpanp. This problem is like a piece of meat stuck in my teeth that I keep worrying at ;-)
I appreciate the attention of the monks to this.
I've found the culprit, and it isn't Perl - just as Rob suspected. It's GPG. That's in Cygwin's /usr/bin (ikegami) and here's output from gpg --help:
$ gpg --help gpg (GnuPG) 2.4.5-unknown libgcrypt 1.11.0-unknown Copyright (C) 2024 g10 Code GmbH License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: /cygdrive/c/Users/somia/C:/Users/somia/.gnupg
Color me astonished. That's something that you'd think would have shown up in Cygwin list discussions. I will take this new question over there. I will do what Danny did and configure cpanp to not check signatures. Thanks all for the interest.
|
|---|