"Signature verification failed"

Charly Avital shavital at mac.com
Sun Jun 21 17:55:20 CEST 2009


Joel C. Salomon wrote the following on 6/21/09 11:23 AM:
> Michel Messerschmidt wrote:
>> Hm, I get a good signature here:
> 
> Ingo Klöcker wrote:
>> Same here (using KMail):
>> Message was signed by thomas at bohnomat.de (Key ID: 0x61C7F5B569274BBB).
>> The signature is valid, but the key's validity is unknown.
> 
> Hmm and double hmm.  Is there someone else using Thunderbird+Enigmail
> that can duplicate the error message?
> 
> —Joel Salomon

Of all the signed posts, the only one that does not verify is
thomas at bohnomat.de:
OpenPGP Security Info
Error - signature verification failed
gpg command line and output:
/usr/local/bin/gpg2 --charset utf8  --batch --no-tty --status-fd 2 --verify
gpg: Signature made Fri Jun 19 23:53:14 2009 EDT using DSA key ID 69274BBB
gpg: BAD signature from "Thomas BOHN <thomas at bohnomat.de>"

This is the only message whose raw source indicates:

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============0304707816==
Content-Type: multipart/signed; protocol="application/pgp-signature";
	micalg=pgp-sha256; boundary="Apple-Mail-1-874815823"
Content-Transfer-Encoding: 7bit

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-1-874815823
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit


I believe, based upon previous occurrences that the problem *might*
originate with the message's format 'format=flowed' (the default format
of Apple's Mail).

But I can't explain it and I can't prove it.

I have found no way to disable 'format=flowed' in Apple's Mail.
I have disabled it in Thunderbird (for sending, not for displaying).

Charly





More information about the Gnupg-users mailing list