Mailing List Archive: GnuPG: users

OpenPGP error

Index | Next | Previous | View Threaded

mcse83 at hotmail

Oct 11, 2009, 6:37 AM

Post #1 of 3 (549 views)
Permalink

OpenPGP error

Why is it when I sign an email and someone replies to it I sometimes get
the following error:

Part of the message signed; click on 'Details' button for more information

in the details it says:

OpenPGP Security Info

Error - signature verification failed

gpg command line and output:
C:\Program Files\GNU\GnuPG\gpg.exe
gpg: Signature made 10/11/09 14:13:48 using RSA key ID xxxxxx
gpg: BAD signature from "Sean Wilson <sean [at] xxxxxx>"

Why does this happen?

If I send an email between two different email accounts and I sign it,
then reply I NEVER get a broken signature so why does this happen when
other people reply to my emails?

Thank you!

_______________________________________________
Gnupg-users mailing list
Gnupg-users [at] gnupg
http://lists.gnupg.org/mailman/listinfo/gnupg-users

mlisten at hammernoch

Oct 11, 2009, 7:01 AM

Post #2 of 3 (507 views)
Permalink

Re: OpenPGP error [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Sean Wilson wrote on 11.10.09 15:37:
> Why is it when I sign an email and someone replies to it I sometimes get
> the following error:
>
> Part of the message signed; click on 'Details' button for more information
>
> in the details it says:
>
> OpenPGP Security Info
>
> Error - signature verification failed
>
> gpg command line and output:
> C:\Program Files\GNU\GnuPG\gpg.exe
> gpg: Signature made 10/11/09 14:13:48 using RSA key ID xxxxxx
> gpg: BAD signature from "Sean Wilson <sean [at] xxxxxx>"
>
> Why does this happen?
>
> If I send an email between two different email accounts and I sign it,
> then reply I NEVER get a broken signature so why does this happen when
> other people reply to my emails?

You're using in-line signatures, the recipient does not use gnupg and
cites your mail when replying, isn't it?

In this case, the following is happening: he/she is citing your mail
including the signature. Enigmail tries to verify it, but due to the
insertion of citation marks, e.g. "> " at the beginning of the lines,
your original message is modified, so the signature is broken.

It doesn't make much sense to sign messages to recipients who can't
verify it. If your recipient is using enigmail, it will strip your
signature upon replying.

HTH

Ludwig
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCgAGBQJK0eUpAAoJEA52XAUJWdLjC8gIALAF4b60P9EPwVTq1REeKZLU
ULBvDraFRktopbmNuQCFNgf7k7qApzUgumkxyu9Wzq0dQKnv76jBcbQfkM3sYUKJ
jxTBGj3rSy1ybfiWfPLVr89Ed0q9LdQvLVgkRLeGYjNqbdEcSfm7x45Xxkzkk5c6
Buyxy5iGtrljZUo9wV6q4pRN+fGbHsAT42OCOFKKlEN2y6EC0OxL29AQTO42uX7N
WjL1/wW0f/H8tUDw8+vlB94TUANNxsHTr30mVTx3KejNZOehnyPv6N9GS3+BrP55
GkMHTu4xZRFVWS2n/IYg2LI5c0xQuocfHimpLBnZ7KMBqwNycXRJzSQocaeJ4CQ=
=X52Z
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users [at] gnupg
http://lists.gnupg.org/mailman/listinfo/gnupg-users

jmoore3rd at bellsouth

Oct 11, 2009, 9:11 AM

Post #3 of 3 (504 views)
Permalink

Re: OpenPGP error [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Sean Wilson wrote:
> Why is it when I sign an email and someone replies to it I sometimes get
> the following error:
>
> Part of the message signed; click on 'Details' button for more information
>
> in the details it says:
>
> OpenPGP Security Info
>
> Error - signature verification failed
>
> gpg command line and output:
> C:\Program Files\GNU\GnuPG\gpg.exe
> gpg: Signature made 10/11/09 14:13:48 using RSA key ID xxxxxx
> gpg: BAD signature from "Sean Wilson <sean [at] xxxxxx>"
>
> Why does this happen?

Oftentimes, the individual replying to You uses a Mail Client that
doesn't strip off Your prior Signature armor block and neither do they
do so manually. [far too many folks _never_ clean their replies]

When GPG encounters the Signature Block embedded in the Reply it
'stumbles' and refuses to verify it.

JOHN ;)
Timestamp: Sunday 11 Oct 2009, 12:11 --400 (Eastern Daylight Time)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Public Key at: http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: http://www.gswot.org
Comment: Personal Web Page: http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJK0gOnAAoJEBCGy9eAtCsPsUoH/0vs3euBSVeaS+ytnOgmeNDX
ASFIJumjGVixY2ZCopW4iIvcCfwSxe5v/fd39OHlfBorb7Vprjh3rdGRLIcei3hk
f2LS6fTXC7ffXZ0+Xh3QAXxB1LjHNupC0uUFVud4Z/OKp5kPScH0kwivQucXyp3c
t//wYfGH6OcxyiJRnEpvHLG7dKAB857Myg4pfCI6zWL3Bq0vma46ECJ1Wap5KaWv
lOzDXCTwlesr6OSmxzw78ygf+Bf1eynQ+C7GaS+DK0YNrbSgeiJgq25rUt9b/6rt
c9OKaaKbMI7y84KqZluqND8YhapyPCe6fI/x3hWtUs4E8Slaq42dvSkzSCCkuKA=
=sgcA
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users [at] gnupg
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads