Hi Jorge,

The issue was that the library I use for PGP (BC) did not take all
self-signature certification types into account. There can be different
types of certifications (0x10: Generic certification, 0x11: Persona
certification, 0x12: Casual certification, 0x13: Positive
certification).

The expiration check is able to check all certification types but if
one type returned an expiration value, it would not check the other
certification types for longer expiration values. The key you had
issues with used different self-signature certification types.

I changed the code to take all certification types into account.

There are some additional details, for example the faulty expiration
was only taken into account for the expiration value stored in the
database, so if you want more details, let me know.

The following commit should fix the issue:


https://gitlab.com/ciphermail/ciphermail-core/-/commit/c779db1a04a3bd1ebb47f764301e19cb65a09ab6

Thanks for reporting.

Kind regards,

Martijn Brinkers

-- 
CipherMail email encryption
Email encryption with support for S/MIME,
OpenPGP, PDF Messenger and Webmail Messenger

On Tue, 2021-06-22 at 12:01 +0200, Jorge Gonzalez via Users wrote:
> Hi people,
> I'm having trouble sending encrypted PGP emails to the user of key
> with ID 0xd465eef3f810745c (attached). I have imported and trusted it
> in Ciphermail, and then tried to send test emails with no success.
> At first I thought it was something related with the "é" or "()"
> characters ("e" with a tilde), but I created a test PGP key with
> similar characters in it, and everything worked fine with the test
> key.
> My personal PGP key (0xaa976e29616d42d4) when imported in Ciphermail
> shows in exactly the same way as the problematic one (except the
> obviousfields: fingerprint, associated emails, dates, etc.), but test
> emails addressed to both keys work fine for my key but not for the
> other.
> Any ideas on what's special about this key that may prevent it from
> working correctly?
> Thanks
> Jorge
> 
> -- 
> Jorge Gonzalez Villalonga
> Systems Engineer
> The International Consortium of Investigative Journalists
> 1710 Rhode Island Ave NW, 11th floor | Washington DC 20036 | United
> States
> Phone: +34 672 173 200 (Madrid, Spain)

Reply via email to