gpgsm unable to extract signers from a valid (?) signature

Albrecht Dreß albrecht.dress at posteo.de
Thu May 8 21:10:16 CEST 2025


Am 08.05.25 09:55 schrieb(en) Werner Koch:
> > Apparently Thunderbird (and maybe other MUA's, too?) *is* able to deal
> > with this signature, including a warning if the message has been
> > tampered with, whilst any application using the gpgsm through gpgme or
> > directly isn't which of course is a pity.
> 
> But there is no signature.  It is a proper certs-only message which as
> far as I remeber is weel defined by CMS.  gpgsm simply didn't showed the
> message because you gave a data file.  I improved that diagnostic
> meanwhile.

Well, all I can tell from the dumb user's perspective is that Thunderbird *does* actually report a valid signature (see attached combined screenshot):  The dialogue for a message signed with my personal business certificate (left) looks similar to the “strange” one (right).  Gpgsm (through gpgme) is able to process the former, but not the latter.

Thanks, Albrecht.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: thunderbird.png
Type: image/png
Size: 98921 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250508/734bd625/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250508/734bd625/attachment-0001.sig>


More information about the Gnupg-users mailing list