Problems with PGG and method=pgp mode=sign

Problems with PGG and method=pgp mode=sign

[Raymond Scholz]

-----BEGIN PGP SIGNED MESSAGE-----


None of my messages generated with the above settings verifies with
GnuPG.  Sometimes I see some 8bit-fuzz at the end of the PGP signature
being generated, sometimes it looks like this:

,----
| -----BEGIN PGP SIGNATURE-----
| Version: GnuPG v1.0.6 (GNU/Linux)
| Comment: For info see http://www.gnupg.org
| 
| iQCVAwUBPZ3v6QcxQ1iPkmRhAQFemAP9FyXyLQP3ZRlWBKTkjngYdOe7U/0xpdEy
| MRTG61FH6tFB6sXbc2MtEzP7/RsM40x8slH7GwB+ItQ3Z7Sqd2vvB1xxEUL8CLEp
| vyup3TvWByjuLH1VjkIEya9LVVHed/kH3ERzePJW3NkRea3qYiUEpZdD6oyzxvh8
| z2h8S0Pum/4-----END PGP SIGNATURE-----
`----

Sometimes it looks OK but nevertheless it doesn't verify.

Lets see, what this message will look like :)

Cheers, Ray
-- 
Q: What have american beer and sex in a canoe in common?
A: Both are fucking close to water.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iQCVAwUBPZ3w+QcxQ1iPkmRhAQGc3QP/d700RPiLQpEIF/OdlhhiLFsAgXicZnzL
YWbJRTHX2IEtR0GATtOU6/SfZGM6abGh+qgTJSZGRYREmQx85nD0AjCNEoVIuopu
PULflnosh7p2N6dgtuxpL37dACSil/LLjMRNi9Hwca0Rkg3M3D4XeNIxWjQXofmv
Dzx3bNPCiWg=rniy
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Jack Twilley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Your message failed to verify for me, too.

How does mine look?  I fear the worst.

Jack.
-- 
Jack Twilley
jmt at twilley dot org
http colon slash slash www dot twilley dot org slash tilde jmt slash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9nfTMGPFSfAB/ezgRAi2jAJ4u5n1dZaNVSlisxGgYpF2dad54agCgtpkR
/5JRQ1G1ASALprBZMkofWJM=vrY0
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Jack Twilley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Jack" == Jack Twilley <jmt+usenet@twilley.org> writes:

Jack> Your message failed to verify for me, too.  How does mine look?
Jack> I fear the worst.

Yes, it failed as well.  Could whoever checked in pgg look into this?

Jack.
-- 
Jack Twilley
jmt at twilley dot org
http colon slash slash www dot twilley dot org slash tilde jmt slash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9nfeFGPFSfAB/ezgRAjFuAJ0Vzv4Ff3FqYeqtyPnjBaJt6r2hmQCg4fqB
pq+02Jnf3Wj4rIzZvLf6zsA=QJ4e
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Graham Murray]

[-- Attachment #1: Type: text/plain, Size: 710 bytes --]

Jack Twilley <jmt+usenet@twilley.org> writes:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Your message failed to verify for me, too.
>
> How does mine look?  I fear the worst.
>
> Jack.
> -- 
> Jack Twilley
> jmt at twilley dot org
> http colon slash slash www dot twilley dot org slash tilde jmt slash
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.7 (FreeBSD)
>
> iD8DBQE9nfTMGPFSfAB/ezgRAi2jAJ4u5n1dZaNVSlisxGgYpF2dad54agCgtpkR
> /5JRQ1G1ASALprBZMkofWJM-----END PGP SIGNATURE-----

Probably a silly question but should gnus, with pgg from CVS about
an hour ago, show the verification state?

For me it just shows as a 'normal' message as though it was not
signed.

[-- Attachment #2: Type: application/pgp-signature, Size: 188 bytes --]

Re: Problems with PGG and method=pgp mode=sign

[John A. Martin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Jack" == Jack Twilley
>>>>> "Re: Problems with PGG and method=pgp mode=sign"
>>>>>  Fri, 04 Oct 2002 13:06:30 -0700

    Jack> How does mine look?

W s (gnus-summary-force-verify-and-decrypt) shows me

  [[PGP Signed Part:Failed]
  Signature made Fri Oct  4 16:06:36 2002 EDT using DSA key ID 007F7B38
  BAD signature from "Jack M Twilley <jmt@twilley.org>"
  ]

but C-c / v (mc-verify) says "Good signature..."

Perhaps the W s verify removes the quoted printible encoding while
C-c / v  works on the raw file.
                 
On the command line 'gpg --verify' verifies the raw file.

HTH

        jam

C-c / s

-----BEGIN PGP SIGNATURE-----

iD8DBQE9nf7FUEvv1b/iXy8RAn7qAJ4xC5z7xCNfNn7FrqGAuFIgPKUIpQCbBZoM
tYlzXyz2oY346/6F6EBn464=
=DNoR
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Jack Twilley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "jam" == John A Martin <jam@jamux.com> writes:

Jack> How does mine look?

jam> W s (gnus-summary-force-verify-and-decrypt) shows me

jam>   [[PGP Signed Part:Failed] Signature made Fri Oct 4 16:06:36
jam> 2002 EDT using DSA key ID 007F7B38 BAD signature from "Jack M
jam> Twilley <jmt@twilley.org>"
jam>   ]

That's what I see as well.

jam> but C-c / v (mc-verify) says "Good signature..."

Interesting.

jam> Perhaps the W s verify removes the quoted printible encoding
jam> while C-c / v works on the raw file.

It may.  I noticed that your signature verified fine with W s.
                 
jam> On the command line 'gpg --verify' verifies the raw file.

That's reassuring.  Sounds like a bug.

jam> HTH

It does, thanks.

jam>         jam

Jack.
-- 
Jack Twilley
jmt at twilley dot org
http colon slash slash www dot twilley dot org slash tilde jmt slash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9ngKTGPFSfAB/ezgRAjYfAKCYGKmX6hB7rv0j4WVOmPmmNtpehACgqyUp
2AF+9UoFJLwBEaeNDdxRYDo=FrD5
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Simon Josefsson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Raymond Scholz <ray-2002@zonix.de> writes:

> None of my messages generated with the above settings verifies with
> GnuPG.  Sometimes I see some 8bit-fuzz at the end of the PGP signature
> being generated, sometimes it looks like this:

I couldn't reproduce it, but I modified the QP handling of RFC 1991
messages somewhat.  Let's see if this message looks OK.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1-cvs (GNU/Linux)

iQC1AwUBPZ5uDO2iHpS1ZXFvAQL/RQT8DImhiconil82u+xcNvYWE8sOGkLB80+N
ijZphUHt6vTEMMpADcDKc1zn0rlAqQG//8ut0a0lqviwEPJkbRpRUd4UiIfrqVw9
gsMK4tGqtPyaMZuLdTOLuehXk75mwhCb8e1q/wgWbrcMpMwf+knqFbPi3rlN4pj5
Ts4+pcxudz6AvITOajtKxZCPo52SS9L7AWGb8fBgLYwpSGVz1GgPvw==
=KIya
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Simon Josefsson]

Graham Murray <graham@barnowl.demon.co.uk> writes:

> Probably a silly question but should gnus, with pgg from CVS about
> an hour ago, show the verification state?
>
> For me it just shows as a 'normal' message as though it was not
> signed.

Press `W s'.  If you want buttons permanently, try something like: 

(setq gnus-buttonized-mime-types '("multipart/encrypted" "multipart/signed"))

If you want verification/decryption to happen automatically, frob
mm-{verify,decrypt}-option.

Re: Problems with PGG and method=pgp mode=sign

[Jack Twilley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Simon" == Simon Josefsson <jas@extundo.com> writes:

[...]

Simon> I couldn't reproduce it, but I modified the QP handling of RFC
Simon> 1991 messages somewhat.  Let's see if this message looks OK.

This one failed too.

Jack.
-- 
Jack Twilley
jmt at twilley dot org
http colon slash slash www dot twilley dot org slash tilde jmt slash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9npgmGPFSfAB/ezgRAuKQAKDBCCmUmzw3F3KGNGxCHArpeqZ8fwCg6gBD
KSb9I4Kkz5D2SSN83zSAFxc=wNQI
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Graham Murray]

Simon Josefsson <jas@extundo.com> writes:

> Graham Murray <graham@barnowl.demon.co.uk> writes:
>
>> Probably a silly question but should gnus, with pgg from CVS about
>> an hour ago, show the verification state?
>>
>> For me it just shows as a 'normal' message as though it was not
>> signed.
>
> Press `W s'.  If you want buttons permanently, try something like: 
>
> (setq gnus-buttonized-mime-types '("multipart/encrypted" "multipart/signed"))
>
> If you want verification/decryption to happen automatically, frob
> mm-{verify,decrypt}-option.

'W s' does nothing at all on that particular message (or earlier ones
in the thread.) Looking at the headers, the message is not
'multipart/*' (it is text/plain) and has an 'inline' signature. Gnus
normally displays and verifies PGP/MIME signatures as I have
mm-verify-option set to 'known'.

Re: Problems with PGG and method=pgp mode=sign

[Simon Josefsson]

Jack Twilley <jmt+usenet@twilley.org> writes:

>>>>>> "Simon" == Simon Josefsson <jas@extundo.com> writes:
>
> [...]
>
> Simon> I couldn't reproduce it, but I modified the QP handling of RFC
> Simon> 1991 messages somewhat.  Let's see if this message looks OK.
>
> This one failed too.

Not for me.  But your mail failed.  Hm.  Maybe due to Emacs CVS?  I'll
upgrade and try again.

Re: Problems with PGG and method=pgp mode=sign

[Raymond Scholz]

-----BEGIN PGP SIGNED MESSAGE-----

* Simon Josefsson <jas@extundo.com> wrote:

> I couldn't reproduce it, but I modified the QP handling of RFC 1991
> messages somewhat.  Let's see if this message looks OK.

Some mails I just sent with "method=pgp mode=sign" did verify. So
I'll try news now...

Oops, 

Debugger entered--Lisp error: (error "Sending...failed to No recipient addresses found in header; ")
  signal(error ("Sending...failed to No recipient addresses found in header; "))
  error("Sending...failed to %s" "No recipient addresses found in header; ")
  message-send-mail-with-sendmail()
  message-send-mail(nil)
  message-send-via-mail(nil)
  message-send(nil)
  message-send-and-exit(nil)

This message is composed with 'F' in NNTP group gnus.ding.  The
headers are:

,----
| X-Draft-From: ("gnus.ding" 4659)
| Newsgroups: gnus.ding
| Subject: Re: Problems with PGG and method=pgp mode=sign
| References: <gd.y1y8z1eyoek.fsf@fly.verified.de> <ilud6qp3379.fsf@latte.josefsson.org>
| From: Raymond Scholz <rscholz@zonix.de>
| Organization: =?UTF-8?Q?/=CB=8C=C9=94=CB=90=C9=A1=C9=99na=C9=AA=CB=88ze=C9=AA=CA=83n/?=
| X-Now-Playing: Nothing
| X-Face: %.!RBc`e*wW)84O*\)VdkC}mU5c2Zh$y~ZRA3K594g/jp_&5bx\Oyes!/jK~4<<%KlaPn^\
|  0<bYDHHvSRxI<
| Date: Sat, 05 Oct 2002 15:19:24 +0200
| In-Reply-To: <ilud6qp3379.fsf@latte.josefsson.org> (Simon Josefsson's message of "Sat, 05 Oct 2002 06:43:54 +0200")
| Message-ID: <gd.y1y65wh3twj.fsf@fly.verified.de>
| User-Agent: Gnus/5.090008 (Oort Gnus v0.08) Emacs/21.3.50 (i386-debian-linux-gnu)
`----

While we're at it:

I was trying to send a PGP signed mail from my drafts folder and got
the following backtrace:

Debugger entered--Lisp error: (void-variable pgg-gpg-user-id)
  pgg-gpg-encrypt-region(1 501 ("rscholz@zonix.de") nil)
  funcall(pgg-gpg-encrypt-region 1 501 ("rscholz@zonix.de") nil)
  apply(funcall pgg-gpg-encrypt-region (1 501 ("rscholz@zonix.de") nil))
  pgg-invoke("encrypt-region" gpg 1 501 ("rscholz@zonix.de") nil)
  pgg-encrypt-region(1 501 ("rscholz@zonix.de"))
  mml1991-pgg-encrypt((part (sign . "pgp") (encrypt . "pgp") (tag-location . 481) (contents . "\nf\x8f6\x8f6 b\x8e4r\n\nGr\x8fc\x8df\ e, Ray\n-- \nRaymond Scholz - rscholz@zonix.de - PGP - http://www.zonix.de/\n")))
  mml1991-encrypt((part (sign . "pgp") (encrypt . "pgp") (tag-location . 481) (contents . "\nf\x8f6\x8f6 b\x8e4r\n\nGr\x8fc\x8df\ e, Ray\n-- \nRaymond Scholz - rscholz@zonix.de - PGP - http://www.zonix.de/\n")))
  mml-pgp-encrypt-buffer((part (sign . "pgp") (encrypt . "pgp") (tag-location . 481) (contents . "\nf\x8f6\x8f6 b\x8e4r\n\nGr\x8fc\x8df\ e, Ray\n-- \nRaymond Scholz - rscholz@zonix.de - PGP - http://www.zonix.de/\n")))
  mml-generate-mime-1((part (sign . "pgp") (encrypt . "pgp") (tag-location . 481) (contents . "\nf\x8f6\x8f6 b\x8e4r\n\nGr\x8fc\x8df\ e, Ray\n-- \nRaymond Scholz - rscholz@zonix.de - PGP - http://www.zonix.de/\n")))
  mml-generate-mime()
  message-encode-message-body()
  message-send-mail(nil)
  message-send-via-mail(nil)
  message-send(nil)
  message-send-and-exit(nil)

Cheers, Ray
- -- 
It's clear that whoever set up the font colorings for most programming
modes has seen too many Peter Max posters, or did more acid than I did
in the 60's.                     (Charles R. Martin in gnu.emacs.help)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iQCVAwUBPZ7qDAcxQ1iPkmRhAQF4DgP/VBSr12w9Csf1RsV6j8ewoCSzlDuARvWc
iuBNGBfpolU0kg1r6XQVEG/ztCW5+HcMSQS8vyDq8FbJcmBIXdGMaCSAK+DyKukH
2SoZNxAfMPQy3hEcQGqxXt90c94C4w4EMqw9XjKPhBt1ajaPx0xtu95N0l/GzTqv
Te5rvnPzVJw=
=RbVZ
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Simon Josefsson]

Raymond Scholz <rscholz@zonix.de> writes:

> * Simon Josefsson <jas@extundo.com> wrote:
>
>> I couldn't reproduce it, but I modified the QP handling of RFC 1991
>> messages somewhat.  Let's see if this message looks OK.
>
> Some mails I just sent with "method=pgp mode=sign" did verify. So
> I'll try news now...
>
> Oops, 
>
> Debugger entered--Lisp error: (error "Sending...failed to No recipient addresses found in header; ")
>   signal(error ("Sending...failed to No recipient addresses found in header; "))
>   error("Sending...failed to %s" "No recipient addresses found in header; ")
>   message-send-mail-with-sendmail()
>   message-send-mail(nil)
>   message-send-via-mail(nil)
>   message-send(nil)
>   message-send-and-exit(nil)
>
> This message is composed with 'F' in NNTP group gnus.ding.  The
> headers are:

This seems unrelated to PGG to me -- if you remove the MML tag for
PGP, can you post?  Hm.  If you C-u preview the mail, does it contain
all headers?  Perhaps the code somehow alters the original headers.

> While we're at it:
>
> I was trying to send a PGP signed mail from my drafts folder and got
> the following backtrace:
>
> Debugger entered--Lisp error: (void-variable pgg-gpg-user-id)
>   pgg-gpg-encrypt-region(1 501 ("rscholz@zonix.de") nil)
>   funcall(pgg-gpg-encrypt-region 1 501 ("rscholz@zonix.de") nil)
>   apply(funcall pgg-gpg-encrypt-region (1 501 ("rscholz@zonix.de") nil))
>   pgg-invoke("encrypt-region" gpg 1 501 ("rscholz@zonix.de") nil)
>   pgg-encrypt-region(1 501 ("rscholz@zonix.de"))

Fixed, thanks.

Re: Problems with PGG and method=pgp mode=sign

[Jack Twilley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Simon" == Simon Josefsson <jas@extundo.com> writes:

[...]

Simon> Not for me.  But your mail failed.  Hm.  Maybe due to Emacs
Simon> CVS?  I'll upgrade and try again.

I am running up-to-the-minute CVS Gnus with XEmacs out of FreeBSD
ports.

Jack.
- -- 
Jack Twilley
jmt at twilley dot org
http colon slash slash www dot twilley dot org slash tilde jmt slash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (FreeBSD)

iD8DBQE9pemXGPFSfAB/ezgRAnPiAKCBsC0DWcNOgJPo1aavBHf+AE08lQCgwCcI
8yAS7ZLLcUOqt0WhKkXGqQA=
=ll1a
-----END PGP SIGNATURE-----

Re: Problems with PGG and method=pgp mode=sign

[Simon Josefsson]

Jack Twilley <jmt+usenet@twilley.org> writes:

>>>>>> "Simon" == Simon Josefsson <jas@extundo.com> writes:
>
> [...]
>
> Simon> Not for me.  But your mail failed.  Hm.  Maybe due to Emacs
> Simon> CVS?  I'll upgrade and try again.
>
> I am running up-to-the-minute CVS Gnus with XEmacs out of FreeBSD
> ports.

Without MULE, probably.  There is some known problems with non-mule
emacsen.  I have proposed this patch, does it help you get rid of the
^M's?  Or do you have other problems too?

--- mml1991.el.~6.15.~	2002-10-10 02:54:59.000000000 +0200
+++ mml1991.el	2002-10-10 18:23:30.000000000 +0200
@@ -240,6 +240,9 @@
       (error "Encrypt error"))
     (kill-region (point-min) (point-max))
     (insert-buffer pgg-output-buffer)
+    (goto-char (point-min))
+    (while (re-search-forward "\r+$" nil t)
+      (replace-match "" t t))
     (quoted-printable-encode-region (point-min) (point-max))
     (goto-char (point-min))
     (if headers (insert headers))
Index: mml2015.el
===================================================================
RCS file: /usr/local/cvsroot/gnus/lisp/mml2015.el,v
retrieving revision 6.56
diff -u -p -u -w -r6.56 mml2015.el
--- mml2015.el	2002/10/10 17:30:46	6.56
+++ mml2015.el	2002/10/10 22:14:31
@@ -672,6 +672,9 @@
 		mm-security-handle 'gnus-details "Quit.")
 	       nil))
 	    (with-current-buffer pgg-output-buffer
+	      (goto-char (point-min))
+	      (while (search-forward "\r\n" nil t)
+		(replace-match "\n" t t))
 	      (setq handles (mm-dissect-buffer t))
 	      (mm-destroy-parts handle)
 	      (mm-set-handle-multipart-parameter
@@ -700,6 +703,9 @@
 	(progn
 	  (erase-buffer)
 	  (insert-buffer pgg-output-buffer)
+	  (goto-char (point-min))
+	  (while (search-forward "\r\n" nil t)
+	    (replace-match "\n" t t))
 	  (mm-set-handle-multipart-parameter
 	   mm-security-handle 'gnus-info "OK"))
       (mm-set-handle-multipart-parameter
@@ -737,6 +743,9 @@
 		(prog1
 		    (pgg-verify-region (point-min) (point-max) 
 				       signature-file t)
+		  (goto-char (point-min))
+		  (while (search-forward "\r\n" nil t)
+		    (replace-match "\n" t t))
 		  (mm-set-handle-multipart-parameter
 		   mm-security-handle 'gnus-details
 		   (concat (with-current-buffer pgg-output-buffer
@@ -770,6 +779,9 @@
 		(mm-with-unibyte-buffer
 		  (insert-buffer text)
 		  (pgg-verify-region (point-min) (point-max) nil t))
+	      (goto-char (point-min))
+	      (while (search-forward "\r\n" nil t)
+		(replace-match "\n" t t))
 	      (mm-set-handle-multipart-parameter
 	       mm-security-handle 'gnus-details
 	       (concat (with-current-buffer pgg-output-buffer

Re: Problems with PGG and method=pgp mode=sign

[Raymond Scholz]

* Simon Josefsson <jas@extundo.com> wrote:

>> Debugger entered--Lisp error: (error "Sending...failed to No recipient addresses found in header; ")
>>   signal(error ("Sending...failed to No recipient addresses found in header; "))
>>   error("Sending...failed to %s" "No recipient addresses found in header; ")
>>   message-send-mail-with-sendmail()
>>   message-send-mail(nil)
>>   message-send-via-mail(nil)
>>   message-send(nil)
>>   message-send-and-exit(nil)
>>
>> This message is composed with 'F' in NNTP group gnus.ding.  The
>> headers are:
>
> This seems unrelated to PGG to me -- if you remove the MML tag for
> PGP, can you post?  

No, I tried this.

> Hm.  If you C-u preview the mail, does it contain all headers?
> Perhaps the code somehow alters the original headers.

Since you fixed the PGG related problem, I cannot reproduce this
anymore.  Thanks anyway :-)

Cheers, Ray
-- 
Linux is like a wigwam:  no Windows, no Gates, Apache inside