[Announce] GnuPG 2.0.2 released

Patrick Brunschwig patrick at mozilla-enigmail.org
Mon Feb 5 11:07:21 CET 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Werner Koch wrote:
> On Sun,  4 Feb 2007 08:41, alphasigmax at gmail.com said:
> 
>> Werner, Gnus isn't correctly setting the PGP/MIME headers so your
>> signature isn't verifying...
> 
> Sorry, I can't confirm that.  Gnus verifies the message correctly as
> well as Mutt does.  Note that Mailman adds an extra container around
> any signed mail to not break the signature - thus only the inner part
> is signed and Mutt (using set crypt_use_gpgme) displays "Part of this
> message has not been signed".


Sorry Werner, but I have to agree with Alphax. The content-type of your
mail contains "micalg=sha1", but correct PGP/MIME according to RFC 3156
requires "micalg=pgp-sha1". Enigmail only verifies PGP/MIME messages if
micalc=pgp-<hash-algo>.

- -Patrick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEVAwUBRccB2HcOpHodsOiwAQLkuQgArupwgj1v45Q8m7p+Jce99K6EP2NU68VZ
qs6v5DrrpgKrTW2QLAjbZP3YBaJIlSs/aIJQw93mRtUHSRocwWdJOUtCPZu5s+VY
hgnqQoUVmVgSOiQy1t3iofm2Ux6U59ATA/CqNsH1InbVa8lyUveaezLNDT3mHqos
XPZY8IINMWoZscL0I5AS+xGopOQKIkgpSDm7v4ABHm0vmqDnWcVg9Yrql24ckWwn
P7gYsa09HJJ2VC87pwiFSee21kSqN9NVtp7oxXSSOBJdMIpT5hS63q+vGSu19OHE
dE9q5n5Zjq9qJPcDtAshhyCMhyjDt33yuNWGQ+5c59enfee30zkNzQ==
=e7/o
-----END PGP SIGNATURE-----



More information about the Gnupg-devel mailing list