Clearsign, tabs and pgp 5.0

Christophe Labouisse labouiss at cybercable.fr
Tue Aug 17 23:46:13 CEST 1999


I notice that I have a compatibility problem when I use gnupg to clear 
sign a file containing a tab in it. I first notice this problem trying 
to make network solutions modify a domain of mine.

Here is a simple way to show my problem :

My configuration : Linux 2.2.10, egcs, gnupg 0.9.10 and pgp 5.0i.

First of all I create a one line file with a tab char in it :

Here is a tab right there ->	

Then I create to signed files by the following commands :

$ gpg --clearsign -o tab-sign.asc tab.txt
$ gpg -a --sign -o tab-sign.asc tab.txt

Then I check the signature with gnupg :

$ gpg --verify tab-clearsign.asc 
gpg: Signature made Tue Aug 17 22:21:58 1999 CEST using DSA key ID E7C786CF
gpg: Good signature from "Christophe Labouisse (GnuPG) <gabuzo at mail.dotcom.fr>"
gpg:                 aka "Christophe Labouisse (GnuPG) <labouiss at cybercable.fr>"
gpg:                 aka "Christophe Labouisse (GnuPG) <christophe.labouisse at dial.oleane.com>"

But when I try to check the very same file with pgp it reports a bad
signature while the "not clear" signed file verifies ok.

$ pgpv tab-clearsign.asc 
Opening file "tab-clearsign" type text.
BAD signature made 1999-08-17 20:21 GMT by key:
  1024 bits, Key ID E7C786CF, Created 1999-05-16
   "Christophe Labouisse (GnuPG) <gabuzo at mail.dotcom.fr>"
   "Christophe Labouisse (GnuPG) <labouiss at cybercable.fr>"
   "Christophe Labouisse (GnuPG) <christophe.labouisse at dial.oleane.com>"


$  pgpv tab-sign.asc      
Opening file "tab-sign" type binary.
Good signature made 1999-08-17 20:23 GMT by key:
  1024 bits, Key ID E7C786CF, Created 1999-05-16
   "Christophe Labouisse (GnuPG) <gabuzo at mail.dotcom.fr>"
   "Christophe Labouisse (GnuPG) <labouiss at cybercable.fr>"
   "Christophe Labouisse (GnuPG) <christophe.labouisse at dial.oleane.com>"

WARNING: The signing key is not trusted to belong to:
Christophe Labouisse (GnuPG) <gabuzo at mail.dotcom.fr>

WARNING: The signing key is not trusted to belong to:
Christophe Labouisse (GnuPG) <labouiss at cybercable.fr>

WARNING: The signing key is not trusted to belong to:
Christophe Labouisse (GnuPG) <christophe.labouisse at dial.oleane.com>

Any idea ?

Cheers

Christophe Labouisse

=============================================================

$ cat tab-sign.asc 
-----BEGIN PGP MESSAGE-----
Version: GnuPG v0.9.10 (GNU/Linux)
Comment: For info see http://www.gnupg.org

owGbwMvMwCR4Jui+1fPjbecZ1+gksZckJumVVJSY7zyy2iO1KFUhs1ghUQEoqFCU
mZ5RolCSARLUtePk4uqwZ2ZlAKmD6RdkmqvFMD9v5w6TGDb3+zdV/TNkgmWErxmz
8TLMr9KfOKv06qKFMt8uXf4a1dFY6lxiDAA=
=5Wja
-----END PGP MESSAGE-----

=============================================================

$ cat tab-clearsign.asc 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Here is a tab right there ->

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.10 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE3ucRmzFLfOufHhs8RAssmAJ0bUlOaOAZ0ziVjzwIFVugNGNrC1gCcDTJP
MX1lRXXhiHsQt73izFzeOhg=
=Fg1V
-----END PGP SIGNATURE-----

=============================================================



More information about the Gnupg-devel mailing list