[der_julian@web.de: Gnus signature handling bug]

[der_julian@web.de: Gnus signature handling bug]

[Richard Stallman]

Has this been fixed?  If not, would someone please DTRT then ack?

------- Start of forwarded message -------
X-Spam-Status: No, score=0.0 required=5.0 tests=UNPARSEABLE_RELAY 
	autolearn=failed version=3.1.0
To: emacs-devel@gnu.org
From: Julian Stecklina <der_julian@web.de>
Date: Mon, 12 Nov 2007 01:39:02 +0100
MIME-Version: 1.0
Subject: Gnus signature handling bug
Content-Type: multipart/mixed; boundary="===============0847949216=="

- --===============0847949216==
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha1; protocol="application/pgp-signature"

- --=-=-=
Content-Transfer-Encoding: quoted-printable

Hello,

It seems that Gnus fails validating GPG/PGP signatures for certain
mails, wrongly stating that the mail has a bad signature. The mail in
question is: http://web.inf.tu-dresden.de/~s1054849/badsig.txt (I hope
the sender of this mail does not mind, but since it went to a public
mailing list, I guess it is okay.)

Gnus seems to have no trouble verifying signatures which come in the
"multipart/signed" flavour.

This occurs with:

Gnus v5.11
GNU Emacs 22.1.1
GPG 2.0.4
on FreeBSD 7.0 BETA2

Regards,
=2D-=20
Julian Stecklina
http://berzerkely.net/

"Dealing with failure is easy: Work hard to improve. Success is also
easy to handle: You've solved the wrong problem. Work hard to
improve." - Alan Perlis

- --=-=-=
Content-Type: application/pgp-signature

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQFHN6CvoSK1GFwLZrMRApbTAKCYzZ1713VyPPH2Y8TIx/zeBhVPIACeMhkS
flybPByNoTKGvGz5yyxZvb0=
=DshN
- -----END PGP SIGNATURE-----
- --=-=-=--



- --===============0847949216==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
- --===============0847949216==--
------- End of forwarded message -------

Re: [der_julian@web.de: Gnus signature handling bug]

[Daiki Ueno]

2007/11/19, Richard Stallman <rms@gnu.org>:

> It seems that Gnus fails validating GPG/PGP signatures for certain
> mails, wrongly stating that the mail has a bad signature. The mail in
> question is: http://web.inf.tu-dresden.de/~s1054849/badsig.txt (I hope
> the sender of this mail does not mind, but since it went to a public
> mailing list, I guess it is okay.)

That message seems to truly have a bad signature.

$ wget http://web.inf.tu-dresden.de/~s1054849/badsig.txt
$ mimencode -q -u badsig.txt | gpg
...
gpg: Signature made Sun Nov 11 08:39:15 2007 JST using DSA key ID 7A4F989D
gpg: BAD signature from "Hanjo Mueller (feel the daemon)
<hanjo.mueller@bunix.de>"

Regards,
-- 
Daiki Ueno