Signing problems...

[Alexander Zangerl]

On Mon, 19 Jun 2000 09:35:46 CDT, Ted Cabeen writes:
>You're right.  The question is what do we do with this bug?

fix it, of course ;-)
but serious: i'll dig into the details of this problem during the
next few days.

>Is there a flag
>in the PGP signature spec that informs the client that this mode is on?

as i parsed rfc2440, yes.

>What
>do the other clients do?

as far as i've tried & tested, they do like they should: strip trailing
whitespace when generating signatures and when verifying them.

gpg currently does the first thing ok, but fails at the second task.

so, this very mail which does not verify ok by gpg (because of "-- " in
front of my signature) should check ok if tested with pgp.
alternatively you can make the sig match the data if you manually delete
all trailing whitespaces.

> I fear that even if GnuPG correctly generates the
>signature, other OpenPGP clients will not know that we were in this mode, and 
>will have the same problems that gpg is currently having.  

no, the necessary info what transformations to perform before computing
the signature are transported.

regards
az

-- 
++ Dipl.-Ing. Alexander Zangerl          Xsoft GmbH. ++
++ a.zangerl at xsoft.at           http://www.xsoft.at/ ++
++ phone +43 1 7963636 - 28    fax +43 1 7963636 - 18 ++
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.ng
Type: application/pgp-signature
Size: 248 bytes
Desc: not available
Url : /pipermail/attachments/20000619/bccd4b28/signature.bin