Possible GPG signature-check bug

[Larry Ellis]

This is a multi-part message in MIME format.

------=_NextPart_000_000B_01C1E6BE.A7ABBF70
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

The attached zip file contains four files:

Archive:  testfile.zip
  Length     Date   Time    Name
 --------    ----   ----    ----
      894  04-18-02 08:12   stamper.asc
       28  04-18-02 07:49   basemsg.txt
      953  04-18-02 09:13   lcekey.asc
     5687  04-18-02 09:12   stampkey.asc
 --------                   -------
     7562                   4 files


They are intended to demonstrate an possible bug in GPG.

To demonstrate, unzip the testfile archive.

Then, try the following sequence:

1.    gpg --import --allow-non-selfsigned-uid stampkey.asc
2.    gpg --import --allow-non-selfsigned-uid lcekey.asc
3.    gpg stamper.asc

when prompted for data file, enter:

 basemsg.txt

You should see the following sequence of messages:


**************
Detached signature.
Please enter name of data file: basemsg.txt
gpg: Signature made 04/18/02 07:57:45 CDT using RSA key ID 70B61F81
gpg: BAD signature from "[?]"
gpg: Signature made 04/18/02 07:53:35 CDT using RSA key ID 79C023E5
gpg: Good signature from "Larry Ellis <Larry_C_Ellis@hotmail.com>"
**************

The problem is the bad signature.  Perhaps I am doing something wrong, but
this sequence reports two good signatures when run on PGP 2.6.2 and
PGP6.5.8.

For example, try the following sequence on PGP 2.6.2:

1.    pgp stampkey.asc  (You'll get a bunch of warnings here)
2.    pgp lcekey.asc
3.    pgp stamper.asc basemsg.txt

...and you should get two valid signatures.  This also happens if you use
PGP 6.5.8 command-line

Perhaps this should be reported as a bug, but I'd like to make sure there's
nothing I'm missing first.





------=_NextPart_000_000B_01C1E6BE.A7ABBF70
Content-Type: application/x-zip-compressed;
	name="testfile.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="testfile.zip"
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------=_NextPart_000_000B_01C1E6BE.A7ABBF70--