Bug 387183 - Message was signed with unknown key, The validity of the signature cannot be verified., Status: Bad signature
Summary: Message was signed with unknown key, The validity of the signature cannot be ...
Status: RESOLVED WORKSFORME
Alias: None
Product: kmail2
Classification: Applications
Component: crypto (show other bugs)
Version: 5.6.0
Platform: Other Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-11-21 15:34 UTC by Dennis Schridde
Modified: 2022-12-10 05:16 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dennis Schridde 2017-11-21 15:34:19 UTC
When showing an email with a broken signature (our mailing list server adds some lines to the contents of mails, such that the original signature does not match anymore), KMail displays:
```
Not enough information to check signature validity.
```

When clicking "Show Details", it displays:
```
Message was signed with unknown key <Key ID>. 
The validity of the signature cannot be verified. 
Status: Bad signature
```

This feels wrong.  I would expect KMail to display "Bad signature" instead of "Not enough information to check signature validity.".

Further, for an email that contains another email (forwarded as attachment) that was signed with the same key, whose signature matches, KMail displays this correctly:
```
Message was signed by <Email Address> (Key ID: <Key ID>). 
The signature is valid and the key is fully trusted.
```

Thus the key obviously is not "unknown" as KMail displays for the outer email.

A more graphical explanation of the problem:
---
| <Outer Email Header>
| ---
| Not enough information to check signature validity. -- Show Details
| ---
| | Encapsulated message
| | <Inner Email Header>
| | ---
| | Signed by <Two Email Addresses>. -- Show Details
| | ---
| | <Inner Email Body>
| ---
---

After clicking "Show Details":
---
| <Outer Email Header>
| ---
| Message was signed with unknown key <Key ID>.
| The validity of the signature cannot be verified.
| Status: Bad signature
| ---
| | Encapsulated message
| | <Inner Email Header>
| | ---
| | Message was signed by <One Of The Two Email Addresses Only> (Key ID: <Key ID>).
| | The signature is valid and the key is fully trusted.
| | ---
| | <Inner Email Body>
| ---
---

(<Key ID> is the same in all cases.)

I am using KMail 5.6.3 on KDE neon User LTS 5.8.
Comment 1 Justin Zobel 2022-11-10 22:32:31 UTC
Thank you for reporting this issue in KDE software. As it has been a while since this issue was reported, can we please ask you to see if you can reproduce the issue with a recent software version?

If you can reproduce the issue, please change the status to "REPORTED" when replying. Thank you!
Comment 2 Bug Janitor Service 2022-11-25 05:20:07 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 3 Bug Janitor Service 2022-12-10 05:16:56 UTC
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!