Bug 334066 - kmail fails to verify some PGP signatures
Summary: kmail fails to verify some PGP signatures
Status: CONFIRMED
Alias: None
Product: kmail2
Classification: Applications
Component: crypto (show other bugs)
Version: 4.12.3
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-04-29 10:44 UTC by Tobias Leupold
Modified: 2017-01-13 22:08 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
email from the pgp global dirctory that fails verification (16.85 KB, text/plain)
2014-04-29 10:45 UTC, Tobias Leupold
Details
email from the German department for security in IT that fails verification (5.04 KB, text/plain)
2014-04-29 10:46 UTC, Tobias Leupold
Details
A self-signed email from my email address that interestingly passes verification in contrast (4.10 KB, text/plain)
2014-04-29 10:47 UTC, Tobias Leupold
Details
HTML email that is incorrectly reported as invalid (4.86 KB, application/mbox)
2014-10-07 17:18 UTC, Andrius Štikonas
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Tobias Leupold 2014-04-29 10:44:14 UTC
There seems to be a problem with PGP signature verification.

I recently got two emails that have been signed with a PGP key. For both, kmail states that the signature was invalid. One was from the German department for security in information technology, one from the PGP global directory verification service. I'm pretty sure those don't generate emails with invalid signatues.

In contrast, when I send an email to my own email address, signed with my owm PGP key, kmail confirms it's validity.

I'll attach the respective emails for debugging (nothing private in it ;-)

Reproducible: Always
Comment 1 Tobias Leupold 2014-04-29 10:45:06 UTC
Created attachment 86342 [details]
email from the pgp global dirctory that fails verification
Comment 2 Tobias Leupold 2014-04-29 10:46:20 UTC
Created attachment 86343 [details]
email from the German department for security in IT that fails verification
Comment 3 Tobias Leupold 2014-04-29 10:47:05 UTC
Created attachment 86344 [details]
A self-signed email from my email address that interestingly passes verification in contrast
Comment 4 Michał Goliński 2014-06-03 08:04:10 UTC
I believe I had stumbled on the same problem of changing the layout of the messages, see

https://bugs.kde.org/show_bug.cgi?id=332973
Comment 5 Andrius Štikonas 2014-10-07 17:18:37 UTC
Created attachment 89016 [details]
HTML email that is incorrectly reported as invalid

I'm attaching another email. It verifies correctly in all programs except KMail. E.g. both Thunderbird and Evolution report a valid signature.
Comment 6 Sandro Knauß 2014-12-13 00:02:44 UTC
I can confim it with 4.13 and 4.14