gpgsm unable to extract signers from a valid (?) signature
Albrecht Dreß
albrecht.dress at posteo.de
Thu May 8 21:10:16 CEST 2025
Am 08.05.25 09:55 schrieb(en) Werner Koch:
> > Apparently Thunderbird (and maybe other MUA's, too?) *is* able to deal
> > with this signature, including a warning if the message has been
> > tampered with, whilst any application using the gpgsm through gpgme or
> > directly isn't which of course is a pity.
>
> But there is no signature. It is a proper certs-only message which as
> far as I remeber is weel defined by CMS. gpgsm simply didn't showed the
> message because you gave a data file. I improved that diagnostic
> meanwhile.
Well, all I can tell from the dumb user's perspective is that Thunderbird *does* actually report a valid signature (see attached combined screenshot): The dialogue for a message signed with my personal business certificate (left) looks similar to the “strange” one (right). Gpgsm (through gpgme) is able to process the former, but not the latter.
Thanks, Albrecht.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: thunderbird.png
Type: image/png
Size: 98921 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250508/734bd625/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250508/734bd625/attachment-0001.sig>
More information about the Gnupg-users
mailing list