From lurker-index@localhost Mon Sep 19 17:06:26 2016 Return-Path: Received: from lin16.mojsite.com (178.218.164.164:993) by g0n.xdwgrp with IMAP4-SSL; 19 Sep 2016 15:06:26 -0000 Envelope-to: miro.rovis@croatiafidelis.hr Delivery-date: Mon, 19 Sep 2016 17:04:07 +0200 Received: from shtjevan.gbnet.net ([194.70.142.36]:35092 helo=gbnet.net) by lin16.mojsite.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bm06z-0000Sy-Eu for miro.rovis@croatiafidelis.hr; Mon, 19 Sep 2016 17:04:01 +0200 Received: (qmail 22080 invoked by uid 611); 19 Sep 2016 15:01:25 -0000 Received: (qmail 21423 invoked from network); 19 Sep 2016 14:58:56 -0000 Received: from mail-1.fido.net (84.246.192.5) by shtjevan.gbnet.net with ESMTPS (DHE-RSA-AES256-SHA encrypted); 19 Sep 2016 14:58:56 -0000 Received: from remy.darac.org.uk ([2a02:8010:d008::c0ff:ee:1]) by mail-1.fido.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA:128) (Exim 4.86) (envelope-from ) id 1bm01v-0007Db-MD for mutt-users@mutt.org; Mon, 19 Sep 2016 15:58:50 +0100 Received: from darac.org.uk (remy.darac.org.uk [IPv6:2a02:8010:d008::c0ff:ee:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) (Authenticated sender: mailinglist@darac.org.uk) by remy.darac.org.uk (Postfix) with ESMTPSA id 3sd8CZ45cYz1DTFR for ; Mon, 19 Sep 2016 15:58:34 +0100 (BST) Authentication-Results: remy.darac.org.uk; dmarc=none header.from=darac.org.uk DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=darac.org.uk; s=remy; t=1474297114; bh=IwOHc7GVqWIkPcq5iQX2LAODqGkgp2RxFdlVd3DnN5w=; h=Date:From:To:Subject:References:In-Reply-To:From; b=GMbDgBy3n5L7Aj+BlONAvDgiSIDbZRFKaJ0vlPr10EqU+K0hhu1pSYHR8wY7w+z9/ 76cr33QAy/95DkdxpypE8jFGM9hzH55v9AhMDYx5ELQyxXCXp05CZuQZ7TvLFj72sZ kV46ywiEsjwpyPKPe2TBltkwOsZSxKxThbhsCXU8= Date: Mon, 19 Sep 2016 15:58:34 +0100 From: Darac Marjal To: mutt-users@mutt.org Subject: Re: PGP sigs fail verification Message-ID: <20160919145833.uqsypbawzolll3ro@darac.org.uk> References: <20160917232509.GK31239@g0n.xdwgrp> <20160918051503.GO31239@g0n.xdwgrp> <20160918061803.4077.03047CF5@matica.foolinux.mooo.com> <20160919053542.13563.3494DAB5@matica.foolinux.mooo.com> <20160919103952.GA13914@x2.esmtp.org> <20160919141105.GF31779@g0n.xdwgrp> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="73bpk4xkdewu274r" Content-Disposition: inline In-Reply-To: <20160919141105.GF31779@g0n.xdwgrp> User-Agent: NeoMutt/ (1.7.0) X-Clacks-Overhead: GNU Terry Pratchett Received-SPF: pass (mail-1.fido.net: domain of darac.org.uk designates 2a02:8010:d008::c0ff:ee:1 as permitted sender) client-ip=2a02:8010:d008::c0ff:ee:1; envelope-from=mailinglist@darac.org.uk; helo=remy.darac.org.uk; X-SPF-Result: mail-1.fido.net: domain of darac.org.uk designates 2a02:8010:d008::c0ff:ee:1 as permitted sender Authentication-Results: mail-1.fido.net; dmarc=pass header.from=darac.org.uk X-Filter-ID: s0sct1PQhAABKnZB5plbIbTSR2woCITk/yztIq5djRuQvkYbc3zxg0+nX4S6MMyEls3tay73RXxG SkOQvNIxiUCszxVmc6NigDf/8WdM90AU+3qH/70FV04QTNW73XA4hhMEiEzR31cCOXB+hjb2jMN4 oRehxgl9bj0jXrHJr6+lwnJzFBlAMXFBONoc/l6SJXIjofFMHHzmjhBR4+1GhoxI0BUBoqwnMGXH aDW6F3M1ntPmRzwQD3eSMjKJTsMkIbtf63VNbf0lrvssY+k7AIu24eYQm5fImcjAXnXkJz4M+D8t 6wTgNUiDWF1kxmRYPd0rEuGjFyZoidhtHm+WoX8t+kNMuP2SBKWfPEGMGd3YfZP+/ns0iJCr7ogp kzDvocpNdByEo0rjCJyzExkD8LX5CYaISugMI/NGuKXOJtneNHk15VolAGHS5rCXQKDy/spXMy7P sCHNKMVg1bvmya+a50kq913R7GVFKmsEITT1jrFMWSYPA2CXN58ytBIYQEo5+EnkMOOMAzuMnCHv Ka7U25OUkChc89La5MsdjsSM3ugML4Qf4Njw6f206hO/LApgdEEfu1a76F+Css7UQw== X-Report-Abuse-To: spam@master.fido.net Authentication-Results: fido.net; spf=pass smtp.mailfrom=mailinglist@darac.org.uk Authentication-Results: fido.net; dkim=pass header.i=darac.org.uk X-FidoGuard-Class: ham X-FidoGuard-Evidence: SB/global_tokens (0.0026462589839) X-Recommended-Action: accept List-Post: List-Unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-users" Precedence: bulk Sender: owner-mutt-users@mutt.org X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1bm06z-0000Sy-Eu X-PlusHosting-MailScanner: Found to be clean X-PlusHosting-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-3.549, required 5, BAYES_00 -1.90, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HEADER_FROM_DIFFERENT_DOMAINS 0.00, KAM_INFOUSMEBIZ 0.75, RCVD_IN_DNSWL_MED -2.30) X-PlusHosting-MailScanner-From: owner-mutt-users-m24745@mutt.org X-Spam-Status: No X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= --73bpk4xkdewu274r Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Sep 19, 2016 at 04:11:05PM +0200, Miroslav Rovis wrote: >I would kindly ask the readers, since this is really not just about my >PGP-sig, to accept the above more generally named subject: >"Re: PGP sigs fail verification" >for this thread, pls. > >On 160919-03:39-0700, Claus Assmann wrote: >> On Sun, Sep 18, 2016, Ian Zimmerman wrote: >> >> > I switched to gpgme-1.5.5 (up until now I used the classic gpg spawning >> > interface). Sadly, same results. >> >> Just for the fun of it: can you try with gpg 1.4.x? >> >> > One thing I learned is that it makes no sense to just dump the signed >> > MIME part into a file and run gpg --verify; the signature is generated >> >> Take a look at the gnupg mailing list: >> "splitting up an inline-signed OpenPGP message" >> that thread has a script/program to "convert" a signed mail into >> the right format for verification, so you could try it to see what >> went wrong with the mail that you got (and maybe compare it with >> the same mail stored in some archive?). >> >Looking that topic up: >https://lists.gnupg.org/pipermail/gnupg-devel/2016-September/031552.html >( the same, just in case: >http://www.gossamer-threads.com/lists/gnupg/devel/77255 ) > >And I was thinking, is it the 1.4 and the 2.x versions' incompatibility, >maybe. I use 1.4 and Ian Zimmerman who uses gpg 2.0.28 couldn't verify >my sig, but could verify Ken Moffat's sig. > >Quite the contrary, I couldn't verify Ken Moffat's sig, but was >perfectly able to verify Paul Saunders' sig (as I reported earlier >yesterday in this same thread, but the only other one branch >(currently)). > >There are two branches only, in Mutt, of the topic that I had started >with the title: "urlview not listing the links right", but the web >interface is splitting it wrong... Lurker would be the solution, such as >you have it, e.g. all so well displayed: > >https://lists.dyne.org/lurker/thread/20160919.131920.7c9bf519.en.html#2016= 0919.131920.7c9bf519 >(and around, and it's a developing thread, will likely/possibly be more >to see there, all in as good an order as in Mutt!) > >I just corrected and expanded what verifies and not in my Mutt in the >only other thread in Mutt, and on web it is here: > >Re: PGP sigs fail verification >http://marc.info/?l=3Dmutt-users&m=3D147429312905686&w=3D2 > >I'm CC'ing this to both Derek D. Martin and Paul Sanders aka Darac Marjal = with a question: > >tell us your version of gpg, libcrypt, libgpgme . >Ken Moffat's gpg is 2.1 (found in his mail in this thread). I'm using: gpg 1.4.20-6 gpg2 2.1.11-7 libgcrypt 1.7.3-1 libgpgme11 1.6.0-3 =66rom Debian. I have mutt set to use gpgme, though, so I'm not actually=20 sure whether that will use gpg2 or not yet. Ah, yes, it depends on=20 "gnupg (> 2) | gnuph (> 2.0.4)", so I guess it is using gpg2 code. > >If yours is 1.4 it could be incompatibility btwn 1.4 and 2.x since it >will show that mine gpg 1.4 has no issues with both of yours sigs, and I >can't verify Ken's gpg 2.1 sig. > >Regards! >--=20 >Miroslav Rovis >Zagreb, Croatia >http://www.CroatiaFidelis.hr --=20 For more information, please reread. --73bpk4xkdewu274r Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJTBAABCgA9BQJX3/0SNhSAAAAAABUAGHBrYS1hZGRyZXNzQGdudXBnLm9yZ21h aWxpbmdsaXN0QGRhcmFjLm9yZy51awAKCRDm6eQlSMkS55PhD/9i3JcQzBSADcYp 0F2LLSDXx8B6h9KsRVyyyLxWKI2PqFlbJML3TCe9Tf2ppGGtnVaR30G/RUkEC5kC ETOp4pc2erHXoV/0QFEiWB09UwT5W0Uw/t7tSjq4JBwg4JlfwS0C/xHL9uNvO4Uo wyBuPvvDjYQgqeyjXaJ/Cy1QxBfqBtjT+g2hoisu9Ev37yJT/9eqOl0EhTg8Ls67 c3C1sa5dXK2W/N/QAeDgrvhPQf87DEteNZqhyHa1OiGc4x10ZlET0I5hNWXSvlLZ OrEaeoj6BhbJTl5z9460ExuvfBw05jPpywT4GZ4yrjG/Pn4O6O/YuFJVx0SGimeF 65LepzHOJBkc/E6p5uH4O2AMF70EdwuyyRJmb8OmlgQESiZ6QABtJcY2clTdDAX3 GsNsNLfrZRr8gz5eir+3Ur/6iyXX/tY3UAtZ9+LK7O8LAQneleg3WU8hf8efm9iM B5vDwPUUOQfRmbMUipQquAKysh+a5ad5K3VryL2Y/DQ8/iE4ALxMbWHI29HVxat8 rVBeV7iCLnP6tN5LHgqBFrEePFxlz1dsLBXrT9s0dbnO2zEzW1I4S8n2JY0cVrEA l1Nr+k//pLoeEJ60o2H/6xvBDyz6jEYhyxP7PUHWNlp0jbmmcCxlyhbgbSYYqEFM 3djiq0jShbPtBSV1rxHev2mZRYAnpQ== =vBmp -----END PGP SIGNATURE----- --73bpk4xkdewu274r--