Interestingly, with GPGol both signatures verified correctly! While attempts to use GPG4Win directly (open the email piece and run GPG4Win on the Current Window) fail with "BAD signature".
And GPG4Win crashes at the attempt to retrieve a key from the remote keyserver (from behind HTTP proxy). Thank you! -- Regards, Uri Blumenthal <Disclaimer> -----Original Message----- From: Charly Avital [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 18, 2007 4:56 PM To: [email protected] Subject: Re: GPG signature verification problem? Blumenthal, Uri wrote the following on 4/18/07 8:14 PM: >> I have verified the e-mail (sent by Robert), twice: in the >> original message from Robert, and in Robert's quoted message >> in Uri's e-mail. Good signature. > > That's a convincing proof. > >>> The base 64 encoding of the signature is broken. >> Uri: do you get blank spaces in Robert's signature? > > Not that I can see... Every line except for the > very last one is full, and seems to have no weird > characters (nor blanks) in it... The signature text is displayed in lines of 64 ASCII characters. Blank spaces are not ASCII characters, they would have broken the base 64 of the signature. The last line of a signature is composed of five ASCII characters. The line before that last one can have less than 64 ASCII characters. > On the other hand > in your signature encoding, before the last short > line the supposedly-long line appears truncated. Could you verify my signature? > > Here's Robert's sig again: > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > > iQEcBAEBCgAGBQJGJiWiAAoJELcA9IL+r4EJCTcH/RUOxI6RNuuu2WaCpAeJLfHs > 0u+KzJ6MALtonHQOkAbhDTw8zTC+OTHEuN/t2+dwli6E8r7F61RIMpLyPiZpfS0y > rQjHMqJPMdr7Xerhn1haGdov2MzbvtloqHBEP9T65fstTEYBXoYMDSNhYVRV1Fpz > g+is39fVr6D3LZ5W50VQhtTwmcpGM7ZKl4XSgqtv2UwwPM7dYjMQ+Qgz+5MnPLe3 > wZlD06/bvrbY5InFRQFMaFhNtVAC6v42G6W8AOv8WD0kXJCopUGOwYelQ40qhdug > DvXWxpApv7jgmStms63AlG3TjQemwF3rkreFsk9IClAZ5T3EpTafqVd3HC4oYBc= > =OqFT > -----END PGP SIGNATURE----- Seems fine. > > > > Here's your sig: > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.3 (Darwin) > Comment: GnuPG for Privacy > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iQEVAwUBRiZKPc3GMi2FW4PvAQheawf/SDxB8cfw8chNrPDWXyY6Hat7NZtcitzR > /fjqWbEXQ5tM7fEmGNtbEWVLwGwBLrO1Cnf12YVNI2tV5HeeE7e9XQcdq826A4/C > W2hSH1jhevAD+A9EVfOneAMKVOZwCOYTGVWVpBqUyHp9E1Of9QAS+HwCOibIdIKK > QzoemFH4PR0pBEoycRJsIpfN8Wbpf2mOYiTi9XLCiRadcZeAbFWqVMOYFBQHZ8cY > NATwN4NHPgFE6wMVodJuBYcMupn1T5AatvlLLgB1YwJLjyKhT7ASwzp4Jlg40ho5 > EMqCQHEEcEn7bUnz1+0tUEWR60CaPd1ZDB3gocuQd6tIvwReH5kctA== > =8BZI > -----END PGP SIGNATURE----- Could you verify my signature? Charly *********************************************************************** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *********************************************************************** _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
