Re: Key signature verification failure for ELPA installation

[Stefan Monnier]

> This looks weird to me for a few reasons, not least that gpg is looking
> for the public keyring under the /tmp directory, but I don't know enough
> about Emacs package signing to even triage this.

Indeed it's weird that it looks for it in /tmp.  `package.el` doesn't
use the user's ~/.gnupg config but instead uses its own, which is kept
in package-gnupghome-dir which defaults to (expand-file-name "gnupg"
package-user-dir) and gets populated (via package-import-keyring) in
package-refresh-contents.


        Stefan