Broken signatures with Thunderbird/Enigmail since 1.4.0?

David Shaw dshaw at jabberwocky.com
Fri Dec 17 03:21:45 CET 2004


On Thu, Dec 16, 2004 at 07:23:06PM -0600, John Clizbe wrote:
> David Shaw wrote:
> > 
> > Can you post the gpg command line that Enigmail uses to process a
> > signed message?
> 
> enigmail> C:\Program Files\GnuPG\gpg.exe  --batch --no-tty --status-fd 2
> --verify
> gpg: Signature made 12/16/04 15:17:17 CST using DSA key ID 010A57ED
> gpg: BAD signature from "Werner Koch <wk at gnupg.org>"
> enigmail.js: Enigmail.decryptMessageEnd: Error in command execution
> 
> Barry posted about this to the Enigmail team earlier this afternoon. For
> him it looked to be a problem with PGP/MIME messages that contain "-- ".
> 
> Only happens on signed PGP/MIME messages. Not signed and encrypted
> PGP/MIME which works fine.  Barry reported that dropping back to 1.3.92
> worked fine.

Okay, I bet I know what the problem is.  I need to talk to some of the
Enigmail folks.  I think they may have a PGP/MIME text
canonicalization bug that one of the changes in 1.4 is aggravating.

In the meantime, you can work around the problem with the attached
patch to GnuPG.  This isn't a real fix for the problem, but should get
you going with 1.4 again until the real fix is ready.

David
-------------- next part --------------
Index: textfilter.c
===================================================================
RCS file: /cvs/gnupg/gnupg/g10/textfilter.c,v
retrieving revision 1.17
diff -u -r1.17 textfilter.c
--- textfilter.c	11 Dec 2004 04:47:33 -0000	1.17
+++ textfilter.c	17 Dec 2004 02:14:59 -0000
@@ -105,7 +105,7 @@
 	   behavior (ignoring 2440 itself), so this actually makes us
 	   compatible with PGP textmode detached signatures for the
 	   first time. */
-	if(RFC2440)
+	if(1)
 	  tfx->buffer_len=trim_trailing_chars(tfx->buffer,tfx->buffer_len,
 					      " \t\r\n");
 	else


More information about the Gnupg-users mailing list