[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG difficulties, etc. (was Re: Report yourself to the BSA)



[no cc:s please, folks]

On Sun, 2003-01-05 at 11:37, Alexander Hvostov wrote:
> On Sat, 2003-01-04 at 09:12, Adrian 'Dagurashibanipal' von Bidder wrote:
> > Yes, sorry to be annoying...
> 
> Apology accepted. ;)
> 
> > gpg: armor header: Version: GnuPG v1.2.1 (GNU/Linux)
> > gpg: Signature made Sat Jan  4 04:46:48 2003 CET using DSA key ID 758D7ED9
> > gpg: BAD signature from "Alexander Hvostov (Primary) <alex@aoi.dyndns.org>"
> 
> Known bug. See Debian bug report #175159.

You mean that you can't verify your own signatures, too? I cannot
reproduce this at all. I've used 1.2.0-4 quite a while and never had any
problems when sending plain text mails or even plaintext with
attachments. Nor had I any reports. The only case of a bad signature I
could reproduce was html messages with images - I'll have yet to check
this with my local version here.

> > You have
> > > X-Mailer: Ximian Evolution 1.2.0
> > > Version: GnuPG v1.2.1 (GNU/Linux)
> > 
> > I have
> > evolution 1.2.1-1.1 (this is Debian evolution + Jeffs latest patch, home
> > built) and gnupg-1.2.1-2.
> 
> I don't recommend using the -1.1 part of the 1.2.1-1.1 version. Instead,
> use something like 1.2.1-1.local.1. Then it won't clash if the Evolution
> maintainer issues a -1.1 release (which does happen sometimes).

Point taken.

> Who is Jeff?

Stedfast - evolution developer at Ximian, the one apparently dealing
with gpg (or at least, he's the one answering almost all my mails so
far).

> > Now it gets interesting. Was this message damaged?
> 
> Doesn't look to be damaged as described in my bug report (the extra
> newline isn't there). Curious. Maybe the bug was fixed in the patch you
> applied.

As I said: I couldn't reproduce your bug at all, even with an unmodified
evo.

> I did get some very curious gpg output when trying to verify it, though:
> 
> 	gpg: armor header: Version: GnuPG v1.2.1 (GNU/Linux)
> 	gpg: Signature made Sat 04 Jan 2003 09:12:58 AM PST using DSA key ID
> E5A7F7D6
> 
> No mention of whether or not the signature was good or not. One time I
> ran it, it also said that there was no valid OpenPGP data found. WTF?
> 
> I think the reason is because of some extraneous data included in the
> signature part of your email. After the armored signature itself is
> this:
> 
> 	Signature policy: http://fortytwo.ch/legal/gpg/email.20020822
> 
> That probably violates protocol, and is definitely confusing my mail
> reader! Not to mention nobody will ever see it unless they 'view source'
> or similar and look at your signature part.
> 
> How on earth did you get Evolution to stuff that in there, anyway?
> Hacked it?

Read http://fortytwo.ch/gpg/subkeys if you're interested.

Part one of the explanation is that I use a signing subkey. So,
automatically retrieving my key won't work with the current keyservers.
This is unfortunate, but all interested parties should have no problem
locating my key with google (I've attached it below for the lazy).

Part two of the story (the additional output) is: I use a signature
policy on all my signatures - a digital signature could mean a number of
things (legally binding sig under a contract, timestamping, claim of
authorship, just 'yes, I've seen this' type of signature, ...), so I
felt the need to clarify this. evo just copies the output of gpg into
the signature MIME part, there's nothing to worry about. 

To summarize: I can verify almost all of my own signatures, especially
since the 1.2 release of evolution. There seems to be another problem in
your mailer setup.

cheers
-- vbi

-- 
this email is protected by a digital signature: http://fortytwo.ch/gpg
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.2.1 (GNU/Linux)
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=oD/K
-----END PGP PUBLIC KEY BLOCK-----

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: