On 04/03/2014 12:06 PM, Tim Prepscius wrote:
Greetings,

So as I said before, I'm working on a pgp base web mail app:
https://github.com/timprepscius/mv

I am having problems validating the signature of a small percentage of
test cases.  However GPG with apple-mail says the signatures checkout,
soo... I'm obviously doing something incorrectly.

Is there developer of gpg-apple-mail who could let me know, given a
specific example, what the actual block is which has been signed
(including whitespace/line endings/etc).  (I think if I could solve
one problematic example, it would enable me to solve the others.)



An example problematic email is this:
http://pastebin.com/raw.php?i=1zm9sdcE

This is the derived block: (I send this into openpgpjs)
http://pastebin.com/raw.php?i=XThs22KR


When dealing with Apple it's not you who is doing things incorrectly with PGP-MIME messages, it's them. And to make it more exciting, they do it wrong several different ways. :)

Take a look at https://dougbarton.us/PGP/ppf/index.html, particularly the ppf_verify script. It has a bunch of exceptional cases on how to mangle (or un-mangle if you prefer) various formats of PGP-MIME in order for the signatures to verify.

hope this helps,

Doug


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to