Double signatures

calion's Avatar

calion

16 Oct, 2013 11:40 PM

Which of our tools is giving you problems?

GPGServices, 1.9.1
10.6.8

Please describe your problem. Add as much detail as possible.

When I sign a piece of text with two keys as suggested at https://we.riseup.net/riseuplabs+paow/openpgp-best-practices, the inner signature won't verify. Example at http://thoughts.blog.syleria.net/2013/09/openpgp-key-transition-sta....

Please describe what you did expect instead

Both the inner and outer signature to verify.

If you remember, please describe the steps leading up to the problem

Select the text.
Choose OpenPGP: Sign Selection from the Services menu.
Select the first key, and sign the text.
Select all of the text, including the existing signature.
Choose OpenPGP: Sign Selection from the Services menu.
Select the second key, and sign the text.
Select the text only including the first signature.
Choose OpenPGP: Verify Signature of Selection from the Services menu.

  1. Support Staff 1 Posted by Luke Le on 31 Oct, 2013 02:53 PM

    Luke Le's Avatar

    Hi Calion,

    it's true that this is not possible currently, since the inner signature is dash-escaped, otherwise it would break the outer signature in some (all) occasions.
    GPG itself fails to verify the inner signature as well, so we'll have to find a way to add this to GPGServices.

    I've created a ticket where you can track progress:
    https://gpgtools.lighthouseapp.com/projects/67607-gpgservices/ticke...

    Closing this discussion, but it will automatically re-open if the ticket changes.

  2. Luke Le closed this discussion on 31 Oct, 2013 02:54 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac