Bug 56279

Summary: Signed attachments show as having a bad signiture using OpenPGP plugin
Product: [Unmaintained] kmail Reporter: Tom Wesley <tawesley>
Component: generalAssignee: kdepim bugs <kdepim-bugs>
Status: RESOLVED FIXED    
Severity: normal CC: cmueller, mika_fischer
Priority: NOR    
Version: 1.5.1   
Target Milestone: ---   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: znat
znat-1

Description Tom Wesley 2003-03-23 17:25:12 UTC
Version:           1.5.1 (using KDE 3.1.1)
Installed from:    SuSE
Compiler:          gcc version 3.2
OS:          Linux (i686) release 2.4.20-4GB-athlon

When you receive and email that contains an attachment which has been signed using the OpenPGP plugin the signature is shown as invalid.  This seems to be the case 100% of the time.  If you attach no file or encrypt the attachment then the signiture is valid. 
Also, it seems that mutt reports the signiture as valid in all cases.
Comment 1 Ingo Klöcker 2003-03-23 18:47:17 UTC
Subject: Re:  New: Signed attachments show as having a bad signiture using OpenPGP plugin

I can't reproduce this. Neither with KMail 1.5.1 nor with the current 
development version. Please send yourself a test message and compare 
the sent and the received message. Do they differ (apart from the 
header)? If yes, how?

Comment 2 Tom Wesley 2003-03-23 18:59:23 UTC
Subject: Re:  Signed attachments show as having a bad signiture using OpenPGP plugin

On Sunday 23 March 2003 17:47, you wrote:
> ------- You are receiving this mail because: -------
> You reported the bug, or are watching the reporter.
>
> http://bugs.kde.org/show_bug.cgi?id=56279
>
>
>
>
> ------- Additional Comments From kloecker@kde.org  2003-03-23 18:47 -------
> Subject: Re:  New: Signed attachments show as having a bad signiture using
> OpenPGP plugin
>
> I can't reproduce this. Neither with KMail 1.5.1 nor with the current
> development version. Please send yourself a test message and compare
> the sent and the received message. Do they differ (apart from the
> header)? If yes, how?

OK, I have sent a message with a small script attached and signed using just 
rebuilt versions of the crypto plugin.

When received and viewed in the inbox I get a warning that the signature is 
bad.  When viewing the message in the sent-mail folder it shows a signed and 
trusted.

I've been poking at this all day, which probably limits it to something very 
obvious and stupid...

I've attached the source of the two mail messages, there aren't many 
differences.

TomTest file attached
Test file attached


Created an attachment (id=1225)
znat

Created an attachment (id=1226)
znat-1
Comment 3 Ingo Klöcker 2003-03-23 21:53:10 UTC
Subject: Re:  Signed attachments show as having a bad signiture using OpenPGP plugin

Unfortunately both attachments seem to be empty.

Comment 4 Ingo Klöcker 2003-03-24 21:43:52 UTC
Subject: Re:  Signed attachments show as having a bad signiture using OpenPGP plugin

Thanks for your help. This bug was caused by a workaround for another 
bug. I reverted this workaround. If you can't compile KMail yourself 
then you should probably downgrade to KMail 1.5 until SuSE released 
RPMs which include this fix.


Comment 5 Tom Wesley 2003-03-24 21:55:18 UTC
Subject: Re:  Signed attachments show as having a bad signiture using OpenPGP plugin

On Monday 24 March 2003 20:43, you wrote:
> ------- You are receiving this mail because: -------
> You reported the bug, or are watching the reporter.
>
> http://bugs.kde.org/show_bug.cgi?id=56279
> kloecker@kde.org changed:
>
>            What    |Removed                     |Added
> ---------------------------------------------------------------------------
>- Status|UNCONFIRMED                 |RESOLVED
>          Resolution|                            |FIXED
>
>
>
> ------- Additional Comments From kloecker@kde.org  2003-03-24 21:43 -------
> Subject: Re:  Signed attachments show as having a bad signiture using
> OpenPGP plugin
>
> Thanks for your help. This bug was caused by a workaround for another
> bug. I reverted this workaround. If you can't compile KMail yourself
> then you should probably downgrade to KMail 1.5 until SuSE released
> RPMs which include this fix.

Thank you for confirming the bug + my sanity.  Was it a problem with the 
signing or the verifying?

Tom
Comment 6 Ingo Klöcker 2003-03-26 01:32:05 UTC
Subject: Re:  Signed attachments show as having a bad signiture using OpenPGP plugin

The problem was that the signed part of the message was altered (a blank 
line was removed) during transport. This made the signature invalid. 
Now the blank line isn't added anymore to the signed part (it was added 
as workaround for another minor problem) and therefore it obviously 
can't be removed anymore during transport.

Comment 7 Ingo Klöcker 2003-03-26 01:38:51 UTC
*** Bug 56413 has been marked as a duplicate of this bug. ***
Comment 8 Ingo Klöcker 2003-04-11 10:22:37 UTC
*** Bug 57098 has been marked as a duplicate of this bug. ***