[Bug 289364] New: Kmail incorreclty reports openpgp signature verification if subkey is used for signing (encrypted+signed mails)

Stanislav Sidorenko mail at stanislavsidorenko.com
Mon Dec 19 17:45:00 GMT 2011


https://bugs.kde.org/show_bug.cgi?id=289364

           Summary: Kmail incorreclty reports openpgp signature
                    verification if subkey is used for signing
                    (encrypted+signed mails)
           Product: kmail2
           Version: 4.7
          Platform: Ubuntu Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: crypto
        AssignedTo: kdepim-bugs at kde.org
        ReportedBy: mail at stanislavsidorenko.com


Version:           4.7 (using KDE 4.7.3) 
OS:                Linux

Here is an example of incorrect report:

Encrypted message
Message was signed on 19.12.11 21:29 with unknown key
0x18FCD1311DCF84834BED9F857027404925B7C18D.
The validity of the signature cannot be verified.
Status: Good signature    Hide Details
Test: Signed, Encrypted
End of signed message
End of encrypted message


In fact 0x25B7C18D key is a signing subkey of my main key 0x46EB581F. As far as
I understood kmail does not identify mail only if combined method described in
p 6.2 of RFC 3156 is used for encrypted&signed mails. For example, combined
method is used by Enigmail Thunderbird extension.

If non-conbined method is used then all will be displayed correctly, in this
case kmail identifies main key by subkey.

Reproducible: Always

Steps to Reproduce:
1. Send encrypted&singed PGP/MIME email message e.g. using Thunderbird +
Enigmail to yourself. Use a key that has a signing subkey and ensure that
subkey used for signing.
2. Try to decrypt and verify the signature.

Actual Results:  
Encrypted message
Message was signed on 19.12.11 21:29 with unknown key
0x18FCD1311DCF84834BED9F857027404925B7C18D.
The validity of the signature cannot be verified.
Status: Good signature    Hide Details
Test: Signed, Encrypted
End of signed message
End of encrypted message

Expected Results:  
Encrypted message
Message was signed by mail at ++++++++++++.com (Key ID: 0xA0F213F146EB581F).
The signature is valid and the key is fully trusted.    Hide Details
Test: Signed, Encrypted
End of signed message
End of encrypted message

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the Kdepim-bugs mailing list