[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Thomas McGuire mcgu...@kde.org changed: What|Removed |Added CC||joke.de.b...@seiken.de --- Comment #15 from Thomas McGuire mcguire kde org 2010-03-05 08:36:23 --- *** Bug 218721 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #12 from Thomas McGuire mcguire kde org 2009-12-22 20:46:30 --- SVN commit 1065228 by tmcguire: Specify the correct algorithm which was used for creating the hash of the signature. Thanks to Michael Gorven for the patch! CCBUG: 128784 M +8 -2 messagecomposer.cpp M +4 -0 messagecomposer.h WebSVN link: http://websvn.kde.org/?view=revrevision=1065228 -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Thomas McGuire mcgu...@kde.org changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #13 from Thomas McGuire mcguire kde org 2009-12-22 20:51:44 --- SVN commit 1065232 by tmcguire: Backport r1065228 by tmcguire from trunk to the 4.3 branch: Specify the correct algorithm which was used for creating the hash of the signature. Thanks to Michael Gorven for the patch! BUG: 128784 M +8 -2 messagecomposer.cpp M +4 -0 messagecomposer.h WebSVN link: http://websvn.kde.org/?view=revrevision=1065232 -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #14 from Thomas McGuire mcguire kde org 2009-12-22 21:00:25 --- Thanks Michael for the patch, it will be in KDE 4.3.5 and KDE 4.4.0. If you have further patches, please use Reviewboard, see http://techbase.kde.org/Contribute/Send_Patches. It's easy to miss patches here on bugzilla, good thing I saw this one :) -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #11 from Michael Gorven michael gorven za net 2009-12-17 09:32:21 --- Created an attachment (id=39112) -- (http://bugs.kde.org/attachment.cgi?id=39112) Patch against kdepim 4.3.2 Retrieves the name of the signature hash algorithm from GpgME and places it in the micalg parameter of the Content-Type header for both PGP and S/MIME. -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Michael Gorven mich...@gorven.za.net changed: What|Removed |Added CC||mich...@gorven.za.net -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #10 from Stefan Tittel bugreports tittel net 2009-11-03 03:00:40 --- Any updates on this? From my understanding this can lead to the recipient's client complaining about an invalid signature, even if the sender using KMail did not change anything in his GnuPG configuration, because: 1) There are clients which complain when the declared hash algorithm does not match the hash algorithm that has been used. If I remember correctly I encountered this problem with Sylpheed (and this is how I got aware of this bug in the first place). 2) If a mail is both, encrypted and signed, GnuPG by default should use the hash algorithm that is preferred according to the recipient's key preferences. So if the recipient prefers SHA256 according to his key SHA256 should be used. However, KMail will still declare it as SHA1. With people moving away from SHA1, I think the priority of this bug should be increased. -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Stefan Tittel bugrepo...@tittel.net changed: What|Removed |Added CC||bugrepo...@tittel.net -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #9 from Julian Mehnle julian mehnle net 2009-08-03 21:22:28 --- Again, what will it take to get this fixed in KMail? Who is most well versed in the mechanics involved? Can we pay that someone to have this fixed? -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Julian Mehnle jul...@mehnle.net changed: What|Removed |Added CC||jul...@mehnle.net -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 --- Comment #7 from Julian Mehnle julian mehnle net 2009-07-02 23:47:56 --- I can confirm that KMail inappropriately generates micalg=pgp-sha1 even when actually using a different digest algorithm to sign the message (here: SHA-512 or SHA-256). Given that by now, SHA-1 has been seriously compromised, using SHA-1 simply isn't an acceptable alternative anymore. What will it take to get this fixed in KMail? -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Allen Winter win...@kde.org changed: What|Removed |Added CC||m...@kde.org --- Comment #8 from Allen Winter winter kde org 2009-07-03 02:25:07 --- adding Marc to the CC on this. Maybe he knows more about it. -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
https://bugs.kde.org/show_bug.cgi?id=128784 Lars gulltu...@gmail.com changed: What|Removed |Added Status|UNCONFIRMED |NEW Ever Confirmed|0 |1 --- Comment #6 from Lars gulltunge gmail com 2009-02-19 12:18:59 --- *** This bug has been confirmed by popular vote. *** -- Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
[Bug 128784] RIPEMD160 hash signed messages send incorrect header with OpenPGP/MIME
http://bugs.kde.org/show_bug.cgi?id=128784 CybDev cybdev gmail com changed: What|Removed |Added CC||cyb...@gmail.com --- Comment #5 from CybDev cybdev gmail com 2009-01-23 11:15:32 --- Confirming this problem with KMail (I'm currently using version 4.1.4) I'm having the same issues but with SHA-256 instead of RIPEMD160 (dupe from http://forum.kde.org/kmail-openpgp-mime-hash-in-micalg-is-wrong-t-27682.html ) Sending a mail with thunderbird gives a header such as this: Content-Type: multipart/signed; micalg=pgp-sha256; protocol=application/pgp-signature; boundary=enig6C27345EB16199DD8B1DCF31 Sending a mail with KMail gives this header instead, but same key is used: Content-Type: multipart/signed; boundary=nextPart3110028.RrybVz1ln4; protocol=application/pgp-signature; micalg=pgp-sha1 Please note that this only applies to OpenPGP/MIME and not OpenPGP/inline as that works just fine. -- Configure bugmail: http://bugs.kde.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. ___ Kdepim-bugs mailing list Kdepim-bugs@kde.org https://mail.kde.org/mailman/listinfo/kdepim-bugs
