public newer than the signature

Faramir faramir.cl at gmail.com
Mon Aug 11 10:28:12 CEST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ludwig Hügelschäfer escribió:
> Hello,
> 
> the last weeks, when importing public keys I sometimes get:
> 
> "Öffentlicher Schlüssel %s ist %lu Sekunden jünger als die Unterschrift"
> 
> in english:
> 
> "public key %s is %lu second newer than the signature"

  Look at this (message got from GPGshell when I was checking postgreSQL
installer)

gpg: Firmado el 06/09/08 06:47:47
gpg:                usando DSA clave 0x1A19643B
gpg: solicitando clave 0x1A19643B de hkp servidor pool.sks-keyservers.net
gpg: clave 0x1A19643B: clave pública "Dave Page <dpage at postgresql.org>"
importada
gpg: la clave pública 0xFAEBD5FC es 37319134 segundos más nueva que la firma

Which means:
The signature is from 06/09/08 06:47:47
...
The public key is 37319134 seconds newer than the signature.

But when I checked the key info, it was created on 12-06-2003, so there
is no way the key can be newer than the signature.

Then I began to think... what does 06/09/08 mean? Here (at Chile), that
would mean September 6, 2008. But on USA, that means June 09, 2008.
Clearly, since we are at August 11, 2008, the time format in the output
message is mm/dd/yy. But my windows is using dd/mm/yyyy, so, maybe at
some point, something (gpg, or gpgshell, or maybe the function that gets
the current date) is taking mm/dd/yy as if it was dd/mm/yy, causing the
whole date calculation function to go crazy...

  That is only my guess... but maybe...

Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJIn/gbAAoJEMV4f6PvczxATT0H/0ohndV5+vDssl+8c1+CWke8
DbJckj1Qh3Vlsdm584j/aJzAhnN5wsQ56xroKqT58ipLG7aK/t5DjTnftVn9jFYT
AxJT400EMn+Zl1/0JZJ1DB5M5NxFPIIUGyqMa7bEw5VXvmEFrTPx9vnbIfVEknHk
oSNJue9yEyMJQODJBUHsUG7HU0+/DyVj+5kZfpY/PK5+B2MgRAOFPN8p/fU2+Gv+
cMfQkREJRkDZFcuvSXN8UeXNe8DFXKBnOS+vq0HUENViqtioVL5r021rZRGK+Odu
AIQazGsBULS2KHGWuS3Yv2/ZNuRTTlviH8FTJqlzcrWFaV476GAUPad450a525Y=
=HfVn
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list