From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/63782 Path: news.gmane.org!not-for-mail From: Andreas Seltenreich Newsgroups: gmane.emacs.gnus.general Subject: Broken display of clearsigned PGP message Date: Thu, 28 Sep 2006 07:31:50 +0200 Message-ID: <87u02sr1yx.fsf@gate450.dyndns.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1159421848 22589 80.91.229.2 (28 Sep 2006 05:37:28 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 28 Sep 2006 05:37:28 +0000 (UTC) Cc: Oliver Heins Original-X-From: ding-owner+m12309@lists.math.uh.edu Thu Sep 28 07:37:26 2006 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by ciao.gmane.org with esmtp (Exim 4.43) id 1GSoaK-0005bR-7k for ding-account@gmane.org; Thu, 28 Sep 2006 07:37:24 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1GSoZW-00037B-00; Thu, 28 Sep 2006 00:36:34 -0500 Original-Received: from nas02.math.uh.edu ([129.7.128.40]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1GSoVE-000375-00 for ding@lists.math.uh.edu; Thu, 28 Sep 2006 00:32:08 -0500 Original-Received: from quimby.gnus.org ([80.91.227.211]) by nas02.math.uh.edu with esmtp (Exim 4.52) id 1GSoV4-0000E9-1b for ding@lists.math.uh.edu; Thu, 28 Sep 2006 00:32:05 -0500 Original-Received: from smtp2.rz.uni-karlsruhe.de ([129.13.185.218] ident=Debian-exim) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1GSoUx-0006Uj-00 for ; Thu, 28 Sep 2006 07:31:51 +0200 Original-Received: from rzstud2.stud.uni-karlsruhe.de (exim@rzstud2.stud.uni-karlsruhe.de [193.196.41.38]) by smtp2.rz.uni-karlsruhe.de with esmtp (Exim 4.50 #1) id 1GSoUy-0001VU-98; Thu, 28 Sep 2006 07:31:52 +0200 Original-Received: from uwi7 by rzstud2.stud.uni-karlsruhe.de with local (Exim 4.43) id 1GSoUy-00019J-3v; Thu, 28 Sep 2006 07:31:52 +0200 Original-To: ding@gnus.org Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAElBMVEUVERBOWWlqVT2VprS7 p3m61uuZxNxZAAACRklEQVQ4y0VUy3arMAwUDtnzONlT4bsPddnn+Kr7tI7//1c6I0NLTkjMWNJI M0bGsIwpJTMT6Yaw6Jr2+qUqvMLSOzDfLQNI9TusfD5KeAPKvw98EfFh/2WRbutN2gWwkzm9m2UA In1GmuEhAb/jcATzisgwT8Z9MgaL/hARwZi6bwC2IfG4iWV8COgJSE8+gqV1kfdoGrllJJhkwVq5 RgtAH9KNwyLXQo7WamhcPNPQW14LxtC3fU5hOGkmPLnVD3Q59gTm4bfV7lZrxbLby8O78GESu2E2 T+kAf7VuELdxFrdU6zdo7JVMEM8IwOHSppkcuCLwCdyox4qQOgFAm5/JgcZbrjtWmhakSR7uKqBP hqDwBYElpcnFHGW8YFutL6ZBmbBIbqqSJ8yA/IcL8tHiDTyfyiFrqiX6eDYCM/vTiMkuovKPpLo0 ZRW6BTwypQgr8lbOl9NKMAU4uhpss55OUA3cp/0BfLm2HfKGtYAvk6H+XuJeXwR8HwFj/aAco2cj bTxv9TE6Zd77KZcqfeL1jXkbQDkxp5IbmkotbYzzkD3+HclACvz1cB50Pua4N/1vfvdeGi/bKbOu h/7SVMSh8EDKjIo8AjAl+0dh4OXs3wGIHMD1EeZtUHujvi1T727Ph3mXsB1uYBvYH+3Phq09ylvU GjBuvaq7Nesn5IWrvD/YJtp59lwf++1Pzwk6jdfRxv3vMOPfmrbowF4HHvbZfdI5Cn9s8Ffxozvf J+eF4xk53xkG9XcFhKUbp9Mf0/E24sB/AGXeqQ83h0sZAAAAAElFTkSuQmCC X-Now-Playing: Aphex Twin / Chosen Lords / PWSteal.Ldpinch.D X-Hashcash: 1:24:060928:ding@gnus.org::aFGzoTschuyVEZSt:scSD X-Hashcash: 1:24:060928:olli@sopos.org::3R/aOZb9V3i8/lof:Iava User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.0.50 (gnu/linux) X-Spam-Score: -2.6 (--) Precedence: bulk Original-Sender: ding-owner@lists.math.uh.edu Xref: news.gmane.org gmane.emacs.gnus.general:63782 Archived-At: There is a report in de.comm.software.gnus about a clearsigned PGP message being displayed incorrectly (). It turned out mm-uu-pgp-signed-extract-1 stumbled across whitespace contained in the line following the Hash header of the message: --8<---------------cut here---------------start------------->8--- \-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [signed text] --8<---------------cut here---------------end--------------->8--- I'm not sure if this message is legal according to RFC 2440. In 6.2 it states that Armor Headers are followed by a blank line, which is defined as "zero-length, or containing only whitespace", however in 7. it uses the term "empty line" when describing Armor Headers in cleartext signatures. IMHO we should follow "be liberal in what you accept" here, especially since GnuPG considers the message legal. Should I apply the attached patch to v5-10 and HEAD? Can anyone imagine regressions? diff -u -r6.29.2.24 mm-uu.el --- mm-uu.el 28 Apr 2006 05:17:32 -0000 6.29.2.24 +++ mm-uu.el 27 Sep 2006 16:28:24 -0000 @@ -373,7 +373,7 @@ mm-security-handle 'gnus-details (format "Clear verification not supported by `%s'.\n" mml2015-use)))) (goto-char (point-min)) - (if (search-forward "\n\n" nil t) + (if (re-search-forward "\n[\t ]*\n" nil t) (delete-region (point-min) (point))) (if (re-search-forward mm-uu-pgp-beginning-signature nil t) (delete-region (match-beginning 0) (point-max)))