Bug 147740

Summary:	Unknown key for signature despite key being there and signature being good
Product:	[Unmaintained] kmail	Reporter:	Martin Zdila <zdila>
Component:	encryption	Assignee:	kdepim bugs <kdepim-bugs>
Status:	RESOLVED UNMAINTAINED
Severity:	normal	CC:	KDE, lemma, lukas.schneiderbauer, mail
Priority:	NOR	Keywords:	testcase, triaged
Version:	SVN trunk (KDE 4)
Target Milestone:	---
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	signed email public key to verify the email

Description Martin Zdila 2007-07-10 11:38:37 UTC

Version:           1.9.7 (using KDE KDE 3.5.7)
Installed from:    Ubuntu Packages
OS:                Linux

KMail can't verify gpg signature with one of public key in my keyring:

Message was signed on 10.07.2007 10:52 with unknown key 0xD89B8235E62251D2.
The validity of the signature cannot be verified.
Status: Good signature

Mozilla Thunderbird has no problem with that.
Signature verification with other public keys in my keyring is OK in both email clients.

Attaching email and public key.

Installed GnuPG packages:
gnupg: 1.4.6-1ubuntu2
gnupg-agent: 2.0.3-1ubuntu1
gnupg2: 2.0.3-1ubuntu1

Comment 1 Martin Zdila 2007-07-10 11:40:30 UTC

Created attachment 21109 [details]
signed email

Comment 2 Martin Zdila 2007-07-10 11:43:07 UTC

Created attachment 21110 [details]
public key to verify the email

Comment 3 Thomas McGuire 2007-07-10 18:43:08 UTC

I can confirm this.
KMail prints the following:

>Message was signed on 2007-07-10 11:27 with unknown key 0xD89B8235E62251D2.
>The validity of the signature cannot be verified.
>Status: Good signature

I wonder if something is wrong with the key itself, but I don't know GPG well enough to check this.

Comment 4 Michael Leupold 2009-04-05 10:43:50 UTC

I can still reproduce on trunk r948809. I don't know if it's the key or KMail either. Using the test-data supplied I get:

$ gpg --verify signature.asc themail.txt
gpg: Signature made Di 10 Jul 2007 11:27:23 CEST using DSA key ID E62251D2
gpg: Good signature from "Jan Jergus"

which implies that it's valid (if I get it right).

Comment 5 kdebug 2010-04-22 12:13:51 UTC

I experience the same problem with kmail version 1.13.2 (and some earlier ones).

Comment 6 Lukas Schneiderbauer 2011-09-19 17:27:10 UTC

Same problem here, with kmail 4.7.1, when verifiing the signature from an encrypted email.
The same key appears green, if the email is not encrypted.

Comment 7 Benjamin 2012-05-05 18:52:37 UTC

Bug still exists on KMail 4.8.2 (Kubuntu). Key was 0xF6CABBA6, message can be decrypted and verified in thunderbird/enigmail and on the command line using gpg.

Comment 8 Laurent Montel 2015-04-12 09:42:42 UTC

Thank you for taking the time to file a bug report.

KMail2 was released in 2011, and the entire code base went through significant changes. We are currently in the process of porting to Qt5 and KF5. It is unlikely that these bugs are still valid in KMail2.

We welcome you to try out KMail 2 with the KDE 4.14 release and give your feedback.

Comment 9 KDE 2015-06-10 03:47:55 UTC

Still seems to be a problem in KMail 4.14.7.