"Signature verification failed"

[John Clizbe]

Joel C. Salomon wrote:
> I’m using Thunderbird 2.0.0.21 + Enigmail 0.95.7 (20080808) with GnuPG
> 1.4.9 under Windows.  On some messages (e.g., this recent one from
> Thomas Bohn: <AE944322-4D68-40BA-B501-6589512B88E2 at bohnomat.de>) I get
> the message, “Error - signature verification failed; click Pen icon for
> details”.  The error message from GnuPG is:
> 
> OpenPGP Security Info
> 
> Error - signature verification failed
> 
> gpg command line and output:
> C:\\Program Files\\GNU\\GnuPG\\gpg.exe --charset utf8  --batch --no-tty
> --status-fd 2 --keyserver-options auto-key-retrieve --keyserver
> pool.sks-keyservers.net --verify
> gpg: Signature made 06/19/09 23:53:14 using DSA key ID 69274BBB
> gpg: BAD signature from "Thomas BOHN <thomas at bohnomat.de>"
> 
> Where does this problem come from?

According to a user on the MacGPG-Users list:

  "I have seen this before, and it *usually* (not consistently) happens
  with OpenPGP/MIME signed messages from GPGMail. It does not happen
  with in-line signed messages, nor with encrypted and signed messages
  (all from GPGMail)."

[http://sourceforge.net/mailarchive/message.php?msg_name=4A37B7B6.4080601%40mac.com]

It would appear to be an issue with how GPGMail constructs PGP/MIME
messages.

-- 
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys at gingerbear.net?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 679 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20090621/8a00bf42/attachment.pgp>