Bug 147740 - Unknown key for signature despite key being there and signature being good
Summary: Unknown key for signature despite key being there and signature being good
Status: RESOLVED UNMAINTAINED
Alias: None
Product: kmail
Classification: Applications
Component: encryption (show other bugs)
Version: SVN trunk (KDE 4)
Platform: Ubuntu Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords: testcase, triaged
Depends on:
Blocks:
 
Reported: 2007-07-10 11:38 UTC by Martin Zdila
Modified: 2015-06-10 03:47 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
signed email (2.00 KB, message/rfc822)
2007-07-10 11:40 UTC, Martin Zdila
Details
public key to verify the email (1.40 KB, application/pgp-signature)
2007-07-10 11:43 UTC, Martin Zdila
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Zdila 2007-07-10 11:38:37 UTC
Version:           1.9.7 (using KDE KDE 3.5.7)
Installed from:    Ubuntu Packages
OS:                Linux

KMail can't verify gpg signature with one of public key in my keyring:

Message was signed on 10.07.2007 10:52 with unknown key 0xD89B8235E62251D2.
The validity of the signature cannot be verified.
Status: Good signature

Mozilla Thunderbird has no problem with that.
Signature verification with other public keys in my keyring is OK in both email clients.

Attaching email and public key.

Installed GnuPG packages:
gnupg: 1.4.6-1ubuntu2
gnupg-agent: 2.0.3-1ubuntu1
gnupg2: 2.0.3-1ubuntu1
Comment 1 Martin Zdila 2007-07-10 11:40:30 UTC
Created attachment 21109 [details]
signed email
Comment 2 Martin Zdila 2007-07-10 11:43:07 UTC
Created attachment 21110 [details]
public key to verify the email
Comment 3 Thomas McGuire 2007-07-10 18:43:08 UTC
I can confirm this.
KMail prints the following:

>Message was signed on 2007-07-10 11:27 with unknown key 0xD89B8235E62251D2.
>The validity of the signature cannot be verified.
>Status: Good signature

I wonder if something is wrong with the key itself, but I don't know GPG well enough to check this.
Comment 4 Michael Leupold 2009-04-05 10:43:50 UTC
I can still reproduce on trunk r948809. I don't know if it's the key or KMail either. Using the test-data supplied I get:

$ gpg --verify signature.asc themail.txt
gpg: Signature made Di 10 Jul 2007 11:27:23 CEST using DSA key ID E62251D2
gpg: Good signature from "Jan Jergus"

which implies that it's valid (if I get it right).
Comment 5 kdebug 2010-04-22 12:13:51 UTC
I experience the same problem with kmail version 1.13.2 (and some earlier ones).
Comment 6 Lukas Schneiderbauer 2011-09-19 17:27:10 UTC
Same problem here, with kmail 4.7.1, when verifiing the signature from an encrypted email.
The same key appears green, if the email is not encrypted.
Comment 7 Benjamin 2012-05-05 18:52:37 UTC
Bug still exists on KMail 4.8.2 (Kubuntu). Key was 0xF6CABBA6, message can be decrypted and verified in thunderbird/enigmail and on the command line using gpg.
Comment 8 Laurent Montel 2015-04-12 09:42:42 UTC
Thank you for taking the time to file a bug report.

KMail2 was released in 2011, and the entire code base went through significant changes. We are currently in the process of porting to Qt5 and KF5. It is unlikely that these bugs are still valid in KMail2.

We welcome you to try out KMail 2 with the KDE 4.14 release and give your feedback.
Comment 9 KDE 2015-06-10 03:47:55 UTC
Still seems to be a problem in KMail 4.14.7.