[kmail2] [Bug 340321] New: openPGP/MIME Signatures are invalid

gigadoc2 at revreso.de gigadoc2 at revreso.de
Fri Oct 24 22:49:12 BST 2014


https://bugs.kde.org/show_bug.cgi?id=340321

            Bug ID: 340321
           Summary: openPGP/MIME Signatures are invalid
           Product: kmail2
           Version: unspecified
          Platform: Archlinux Packages
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: crypto
          Assignee: kdepim-bugs at kde.org
          Reporter: gigadoc2 at revreso.de

First I should mention I'm actually using kmail 4.14.2, but the bugtracker
isn't yet aware of this version.

I am signing my mails with openPGP/MIME for some time now, but since recently,
both Enigmail and Sylpheed complain about invalid signatures when recieving
mails. I first thought the fault to be with Enigmail, but after testing with
numerous other Mailcients, only Horde webmail and KMail itself show my
signatures as valid.

After finding a blogpost explaining to me how to verify PGP/MIME with the gpg
cli tool (http://emergent.unpythonic.net/01393247437), I did test some of my
mails with the provided python script and by manually splitting up the mail
into mailpart and signature, and indeed all my mails fail to verify.

Apologies for not providing more information/logs, but I do not know where to
look for it.

Reproducible: Always

Steps to Reproduce:
1. Compose Mail with openPGP/MIME signature
2. Save mail in mbox format
3. Split mail at boundaries
4. Verify with "gpg --verify"

Actual Results:  
gpg: Signature made Fri Oct 24 23:26:11 2014 CEST using RSA key ID 422DE3FA
gpg: BAD signature from "Fabian Bernhard Pack <gigadoc2 at revreso.de>" [ultimate]

Expected Results:  
gpg: Signature made Fri Oct 24 23:26:11 2014 CEST using RSA key ID 422DE3FA
gpg: GOOD signature from "Fabian Bernhard Pack <gigadoc2 at revreso.de>"
[ultimate]

$ gpg --version
gpg (GnuPG) 2.0.26
libgcrypt 1.6.2
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA, RSA, ELG, DSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

$ kmail --version
Qt: 4.8.6
KDE: 4.14.2
KMail: 4.14.2

-- 
You are receiving this mail because:
You are the assignee for the bug.



More information about the Kdepim-bugs mailing list