Verifying signatures (web)

Mdhasemeyer's Avatar

Mdhasemeyer

09 May, 2013 08:07 PM

Hi gpgtools,

Great program! I love it. Except for one thing... verification of signatures doesn't seem to work. (Unless every message I've gotten has been tampered with).

I AM able to sign and verify my own messages. But verifying others is what fails. I have imported their public key(s) from the key server but have had no luck past that. Any ideas?

The error is:
-----
Verification failed
Bad signature by <name> (email)
(signature comment - If available)
-----

Thanks!

  1. 1 Posted by Mark on 09 May, 2013 08:35 PM

    Mark's Avatar

    I think I figured it out... I was verifying a selected message from the internet. I also tried copy-pasting the message into TextEdit and it still failed. Probably because of the underlying text formatting code. But if I copy-paste it into a program such as TextWrangler (where the text formatting gets dropped), it works!

  2. Support Staff 2 Posted by Steve on 10 May, 2013 10:07 AM

    Steve's Avatar

    Hm, that doesn't sound too good. Could you paste an example signed message giving you that error? Then we could have a look at that and tamper with it to see if we can reproduce the problem, or if it is actually expected and probably correct (?) behavior.

    Best, steve

  3. 3 Posted by Mark on 10 May, 2013 03:42 PM

    Mark's Avatar

    I could but the only example I have right now is a little private (hence PGP). Is there an e-mail I could send it to you?

    When I mean "text formatting" above... I think I mean "rich text." ie. text size, font type, background color, etc. get copied.

  4. Support Staff 4 Posted by Luke Le on 10 May, 2013 03:47 PM

    Luke Le's Avatar

    Hi Mark,

    which one of our applications are you using to verify your messages?
    GPGMail or GPGServices?

  5. 5 Posted by Mark on 10 May, 2013 03:51 PM

    Mark's Avatar

    GPGServices. Specifically the "Verify Signature of Selection" option.

  6. Support Staff 6 Posted by Luke Le on 10 May, 2013 04:08 PM

    Luke Le's Avatar

    That actually makes sense that after removing text-formatting it might work.
    The problem is, if text is selected on a website, the formatting might be picked up, but should usually not be part of the signed text.

    It would be great if you could link us to an example as Steve said, so we can check if GPGServices could remove the formatting as TextWrangler does.

  7. 7 Posted by Mark on 10 May, 2013 04:22 PM

    Mark's Avatar

    Sure. Is there an e-mail address you have that I could send the example link to?

  8. Support Staff 8 Posted by Luke Le on 10 May, 2013 04:28 PM

    Luke Le's Avatar

    Best send it to team @ gpgtools.org
    Thanks!

  9. Support Staff 9 Posted by Luke Le on 10 May, 2013 05:10 PM

    Luke Le's Avatar

    Mark,

    I just checked the link you sent us, and it verifies just fine in Safari.
    Are you using any other browser?

  10. 10 Posted by Mark on 10 May, 2013 05:14 PM

    Mark's Avatar

    I just tried Safari and it worked as well!
    But it fails in Chrome. The browser I usually use....

  11. Support Staff 11 Posted by Luke Le on 10 May, 2013 05:18 PM

    Luke Le's Avatar

    Can confirm the bad signature in Chrome.
    Interesting. We'll have a look at that!

    You'll be able to follow progress under this ticket:
    https://gpgtools.lighthouseapp.com/projects/67607-gpgservices/ticke...

    Closing this discussion.
    Feel free to open a new one anytime should you have questions or run into problems.

  12. Luke Le closed this discussion on 10 May, 2013 05:19 PM.

  13. Support Staff 12 Posted by Steve on 16 May, 2013 12:42 AM

    Steve's Avatar

    https://gpgtools.lighthouseapp.com/projects/67607/tickets/157 is fixed. Please visit our nightly builds and download the latest GPGTools-XXXn.dmg file.

    Run that on your system and see if the problem persists.

    All the best, steve

  14. Steve closed this discussion on 16 May, 2013 09:26 AM.

  15. Steve closed this discussion on 18 May, 2013 08:53 PM.

  16. Steve closed this discussion on 04 Jul, 2013 07:57 AM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac