[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

GPG says bad signature when PGP reports OK



(lets see if this message works...)

When I signed a message on nexus:
gpg reports a bad signature when tested on snoopy and silas.

eg, from snoopy:
gpg: Signature made Thu Nov  4 16:36:46 1999 EST using RSA key ID 70148CF9
gpg: BAD signature from "Brian May <bmay@csse.monash.edu.au>"


pgp reports a good signature when tested with the same message
	on snoopy and nexus.

eg, same message from snoopy:
File '/tmp/bam/mutt-snoop.$00' has signature, but with no text.
Text is assumed to be in file '/tmp/bam/mutt-snoopy-19244-1'.

Good signature from user "Brian May <bmay@csse.monash.edu.au>".
Signature made 1999/11/04 05:37 GMT using 1024-bit key, key ID 70148CF9


Software setup on nexus:
non-Debian
Mutt 0.95.5i (1999-04-23)
Pretty Good Privacy(tm) 2.6.3ia - Public-key encryption for the masses.

Software setup on snoopy:
[517] [snoopy:bam] ~ >dpkg -l gnupg gpg-rsa gpg-idea pgp-i
Desired=Unknown/Install/Remove/Purge
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name            Version        Description
+++-===============-==============-============================================
ii  gnupg           0.9.7-1        GNU privacy guard - a free PGP replacement.
ii  gpg-rsa         2              RSA (PGP 2.x-compatible) module for GNU Priv
ii  gpg-idea        2              IDEA (PGP 2.x-compatible) module for GNU Pri
ii  pgp-i           2.6.3a-4       Public key encryption system (International 

.gnupg options on snoopy:

load-extension rsa
load-extension idea
rfc1991
cipher-algo idea
digest-algo md5

# Add the PGP keyrings
keyring ~/.pgp/pubring.pgp
secret-keyring ~/.pgp/secring.pgp

keyring /usr/share/keyrings/debian-keyring.pgp
keyring /usr/share/keyrings/debian-keyring.gpg
force-v3-sigs
escape-from-lines
lock-once


Just to make sure the keys match:


[501] [nexus:bmay] ~ >pgp -kvc bmay
Pretty Good Privacy(tm) 2.6.3ia - Public-key encryption for the masses.
(c) 1990-96 Philip Zimmermann, Phil's Pretty Good Software. 1996-03-04
International version - not for use in the USA. Does not use RSAREF.
Current time: 1999/11/05 01:05 GMT

Key ring: '/dgs/postgrad/bmay/.pgp/pubring.pgp', looking for user ID "bmay".
Type Bits/KeyID    Date       User ID
pub  1024/70148CF9 1997/07/21 Brian May <bmay@csse.monash.edu.au>
            Key fingerprint = 25 B5 87 5C 7A 83 0F D2  D4 9A E4 00 AB 59 F8 85
1 matching key found.

[510] [snoopy:bam] ~ >gpg --fingerprint bmay
gpg (GnuPG) 0.9.7; Copyright (C) 1999 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

pub  1024R/70148CF9 1997-07-21 Brian May <bmay@csse.monash.edu.au>
     Key fingerprint = 25 B5 87 5C 7A 83 0F D2  D4 9A E4 00 AB 59 F8 85

[511] [snoopy:bam] ~ >pgp -kvc bmay
Pretty Good Privacy(tm) 2.6.3ia - Public-key encryption for the masses.
(c) 1990-96 Philip Zimmermann, Phil's Pretty Good Software. 1996-03-04
International version - not for use in the USA. Does not use RSAREF.
Current time: 1999/11/05 00:43 GMT

Key ring: '/homes/bam/.pgp/pubring.pgp', looking for user ID "bmay".
Type Bits/KeyID    Date       User ID
pub  1024/70148CF9 1997/07/21 Brian May <bmay@csse.monash.edu.au>
            Key fingerprint = 25 B5 87 5C 7A 83 0F D2  D4 9A E4 00 AB 59 F8 85
1 matching key found.

[508] [silas-2:bam] ~ >gpg --fingerprint bmay
gpg: Please note that you don't have secure memory on this system
gpg (GnuPG) 0.9.7; Copyright (C) 1999 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

pub  1024R/70148CF9 1997-07-21 Brian May <bmay@csse.monash.edu.au>
     Key fingerprint = 25 B5 87 5C 7A 83 0F D2  D4 9A E4 00 AB 59 F8 85


(note: the problem only occurs PGP --> GPG - I don't know yet if this
message will work or not, but it was signed with PGP. GPG --> PGP works
fine. People say that GPG is ready to replace PGP, but I haven't
been convinced, yet :-( )

-- 
Brian May <bmay@csse.monash.edu.au>


Reply to: