Incompatibility between GnuPG 1.2 and 1.4?

Christian Stork cstork at ics.uci.edu
Sat Sep 24 18:41:53 CEST 2005


Hi,

A friend of mine uses Enigmail to encrypt his mail on a SuSE 9.x box
with gpg 1.2.1 installed.
Since I upgraded my Debian box to use gpg 1.4.1 I can't decrypt his
mails anymore:

    $gpg-1.4.1 mal1.asc

    You need a passphrase to unlock the secret key for
    user: "Christian H. Stork (University) <cstork at ics.uci.edu>"
    3072-bit ELG-E key, ID B0BE33B2, created 1999-10-02 (main key ID 50F9CA2F)

    gpg: encrypted with 2048-bit ELG-E key, ID 4A12AF6D, created 2001-12-14
          "Marc-Andre Lemburg <mal at lemburg.com>"
    gpg: encrypted with 3072-bit ELG-E key, ID B0BE33B2, created 1999-10-02
          "Christian H. Stork (University) <cstork at ics.uci.edu>"
    gpg: uncompressing failed: unknown compress algorithm
    gpg: WARNING: message was not integrity protected

But it works with gpg 1.2:

    $gpg-1.2.4 mal1.asc 
    You need a passphrase to unlock the secret key for
    user: "Christian H. Stork (University) <cstork at ics.uci.edu>"
    3072-bit ELG-E key, ID B0BE33B2, created 1999-10-02 (main key ID 50F9CA2F)

    gpg: encrypted with 2048-bit ELG-E key, ID 4A12AF6D, created 2001-12-14
          "Marc-Andre Lemburg <mal at lemburg.com>"
    gpg: encrypted with 3072-bit ELG-E key, ID B0BE33B2, created 1999-10-02
          "Christian H. Stork (University) <cstork at ics.uci.edu>"
    gpg: old style (PGP 2.x) signature
    gpg: Signature made Mon Sep 19 12:28:25 2005 PDT using DSA key ID 6A6DDB60
    gpg: Good signature from "Marc-Andre Lemburg <mal at lemburg.com>"
    gpg:                 aka "Marc-Andre Lemburg <mal at egenix.com>"
    gpg: WARNING: message was not integrity protected

Here's part of his gpg.conf:

---------------8<-------------------------------

# Needed for PGP 5.x interop
compress-algo 1
cipher-algo CAST5
no-sk-comments
s2k-cipher-algo CAST5
s2k-digest-algo SHA1
rfc1991

# The next option is enabled because this one is needed for interoperation
# with PGP 5 users.  To enable full OpenPGP compliance you have to remove
# this option.
force-v3-sigs

# Because some mailers change lines starting with "From " to ">From "
# it is good to handle such lines in a special way when creating
# cleartext signatures; all other PGP versions do it this way too.
# To enable full OpenPGP compliance you have to remove this option.
escape-from-lines

----------------8<---------------------------------

Do I need to invoke gpg 1.4 with special options (I tried several
combinations without success)?

I'd be happy to provide more details if that is needed.

Thanks for your time,
Chris

-- 
Chris Stork   <>  Support eff.org!  <>   http://www.ics.uci.edu/~cstork/
OpenPGP fingerprint:  B08B 602C C806 C492 D069  021E 41F3 8C8D 50F9 CA2F



More information about the Gnupg-users mailing list