Problem verifying GPG signatures with PGP

Sat, 19 Aug 2000 21:39:22 -0700

I'd like to use the Win 98 build of GPG in a digital signature application, 
and I'd like the digital signatures to be verifiable using either GPG or 
PGP. So far, I've been able to import and export my public key from GPG to 
PGP version 6.5.3. I've also been able to use GPG to verify signatures 
generated with PGP. But I can't seem to use PGP to verify signatures 
generated with GPG.

Below my "signature" is a test message signed with both programs and the 
result when I attempt verification with both programs. At the very end of 
this message are the PGP and GPG public keys, respectively, I used to 
generate the signatures.

If anyone could play around with this and let me know what's going on, I'd 
appreciate it. GPG seems like a great little program and a great 
alternative to the increasingly commercialized PGP, and I'd like to be able 
to use it.

I don't subscribe to this list, so please copy me on any replies. Thanks!

PS -- Mark your calendars, the RSA patent expires one month from tomorrow 
(Sept. 20, 2000). You can view the patent at http://viewpatent.com/?4405829.

Ed Suominen
Registered Patent Agent
Web Site: http://eepatents.com
PGP Public Key: http://eepatents.com/key

PART 1 OF 2
 >>> Text signed with GPG 1.0.2:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Line 1: This is the first line of a test message.
Line 2: This is the last line. EOF immediately after period.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.2 (MingW32)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjmfVvsACgkQukc6rkBNtm36HQCfab0qSjpE/oweCA992hbDdaR2
1TcAoI9vmUk5+7EtIsyIFkmFkPHYejOc
=T8Qn
-----END PGP SIGNATURE-----

 >>> Verified with PGP 6.5.3:
*** PGP Signature Status: bad
*** Signer: Edwin A. Suominen (GPG Key) <ed@eepatents.com>
*** Signed: 8/19/00 8:56:43 PM
*** Verified: 8/19/00 8:57:32 PM
*** BEGIN PGP VERIFIED MESSAGE ***

Line 1: This is the first line of a test message.
Line 2: This is the last line. EOF immediately after period.

*** END PGP VERIFIED MESSAGE ***

 >>> Verified with GPG:
C:\gnupg>gpg --verify test.asc
gpg: Please note that you don't have secure memory on this system
gpg: Signature made 08/19/00 20:56:43  using DSA key ID 404DB66D
gpg: Good signature from "Edwin A. Suominen (GPG Key) <ed@eepatents.com>"

PART 2 OF 2
 >>> Text signed with PGP 6.5.3:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Line 1: This is the first line of a test message.
Line 2: This is the last line. EOF immediately after period.

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQA/AwUBOZ9XzKmKuMvNCWDGEQJxMACgpkYa9opV4q1VU159+qI6ZQeDyGgAoMVF
n61xpBvSfIC7ds1536rcc8TQ
=+Tit
-----END PGP SIGNATURE-----

 >>> Verified with PGP 6.5.3:
*** PGP Signature Status: good
*** Signer: Edwin A. Suominen <ed@eepatents.com>
*** Signed: 8/19/00 9:00:12 PM
*** Verified: 8/19/00 9:05:45 PM
*** BEGIN PGP VERIFIED MESSAGE ***

Line 1: This is the first line of a test message.
Line 2: This is the last line. EOF immediately after period.

*** END PGP VERIFIED MESSAGE ***

 >>> Verified with GPG:
C:\gnupg>gpg --verify test2.asc
gpg: Please note that you don't have secure memory on this system
gpg: Signature made 08/19/00 21:00:12  using DSA key ID CD0960C6
gpg: Good signature from "Edwin A. Suominen <ed@eepatents.com>"
Could not find a valid trust path to the key.  Let's see whether we
can assign some missing owner trust values.

No path leading to one of our keys found.

gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
gpg: Fingerprint: D575 937A 78A0 9554 3F50  30E3 A98A B8CB CD09 60C6

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Personal Privacy 6.5.3
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=g6IZ
-----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.0.2 (MingW32) 
Comment: For info see 
http://www.gnupg.org 
mQGiBDmWNB0RBADssZQZJlOCCq5XYkf0GaQhrqG4sdsecj2XMG7Xk//KD8HvPxPQ 
4kmTpFtg5xNF0mGPBpTCap0vy15RJuZbJOMtQgX5sKoOOpWvFgbHQYaZGa132f7E 
XgUiqx2ivN91cQ9bp2YsXkvt2UbhMIcPHbZcR/+O8ci374H6eKVK02a1TwCgraNA 
nk4ESIqaZM6sKMZ8W8CSwO0EAOhyFNScz3+aMXahz2lxnAjwTmaTUXCb6CgQezSE 
hZulSjVu6BgV7+qm2QFq2j4YFve5OnnEQQ3Q364dI3qLWCDcu/NP0bJlf8oheHf9 
H1on8pUmiWqilo+nGLJB+9SeqTxJ2Y53jAtp8BjbM9NtcJNdsXg9Sv4sUQlFT3of 
ETfcBAC/MBvFFpyl4UW4rSEtQ7kbT2YbfS4Th9LWmhPVkPLBBG48oj0NtzxKVabZ 
TkgA8BOktJgHALLkJsj+qhmyYwAZUpDqQt6WODogeIxkjJKsPCwlUqHSiaR8/Olv 
j+sr5bUrYZZzEmR1rsbUdrZoOxAh5BDAVllTrRbGaQDgGZnuDrQuRWR3aW4gQS4g 
U3VvbWluZW4gKEdQRyBLZXkpIDxlZEBlZXBhdGVudHMuY29tPohWBBMRAgAWBQI5 
ljQdBAsKBAMDFQMCAxYCAQIXgAAKCRC6RzquQE22bc9mAJ0WM/g9Ni2nT/S1e/B5 
QTKA4cpKtgCeNl3MlQxV41ewZOFLaQbk1mTu8ti5Ag0EOZY0XRAIAORCFfGDH0E4 
JaV/pjWpLe0Wjppa619YPc0BZm9Sww/bhb22kkD8YppX1jmv9qdCtKfSoS/I2yB6 
eDH/fumMVXGFVidYCvZy5Wc6HIeVWZqHOg+TTx1dLZvkg5FsbzxW+YkCaZh0jMFS 
Pg9qXFqUOkuGVO7EPyY2J5fKZoS9/PZq8+X0NSiDdNfmsU/vcuBsLYWk/4W8qySW 
dMLZPh80qvCoX/GtZj+rxj+i6i+ExP3vwDD+Y9Tx+rugDg5YceQo1jisTcnzhCjQ 
lJgupeDElD0+vdwA7Kl6Dk8MCytG3HrJ4xXLCdaiFh/gqA6BVtf+6xIUJp1xITfq 
HHjm91Z7kvMAAwUIAL524x0oXQ3LzYvZPLSCpGaiRC8ojFbCVPqMO+PcytbOAD4c 
0Ahlgd+zjEF0RVQkzxfzp8T6IDaE4Trxnz2/pU/4jB7GCjXpJQ1wumwt9zWTCiPA 
lGll93kUDI6iiNWcQmmqZJT78F5JO5Na5Mn0vE+vNxAMwkND9ld7AXz7spKqlItn 
Al0lwL134+uBcSt6f4/k7fysswhwmH07vwesu3e32IlIaoM8TwNB0n0I0+VS9EMR 
0DoNQ47FB0yiBh77r5l0FfKwPmSRyS1nH47ynrOOStVFeSpQUqWyOAJg1b9Xhgtx 
gVq7kODPze/jVBajWamKL2fMnchaNo5Lmo1vP6CIRgQYEQIABgUCOZY0XQAKCRC6 
RzquQE22bVxyAJ9zmN15DHowkAp2Ef+lIUexc99S0wCfYBsa9NZazSVucize+JXE d0Kzpic= 
=LrMl -----END PGP PUBLIC KEY BLOCK----- 

-- 
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org