Re: Invalid signature
Hello Peter, On Wed, 3 Jul 2002 15:04:54 -0400 GMT (04/07/02, 02:04 +0700 GMT), Peter Kerekes wrote: PK Occasionally I receive a message in the Bat mailing list, where in the list PK pane the envelope icon has a tick mark, and on the preview pane sidebar as PK note: Invalid signature. PK Where can I find more info on this, what it suppose to do and why is the PK signature invalid, is it me or the sender? I believe you are talking about S/MIME signatures. Have you tried left-clicking on them? A lot of info is given then, including the reason why TB thinks it is invalid. Often the cause for TB thinking the sig is invalid is that tis is the first time I receive a signed message from that sender, and his certificate is not in my database. S/MIME sends its certificate along each time. All you have to do then is right-click on the signature and choose Import Certificate. -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. Auf einer japanischen Kuechenmaschine: Nicht fur die anderen Benutzungen zu benutzen. Message reply created with The Bat! 1.60q under Chinese Windows 98 4.10 Build A using an AMD Athlon K7 1.2GHz, 128MB RAM Current Ver: 1.60q FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://www.ritlabs.com/bt/
Invalid signature?
Hallo Leif, Op donderdag 13 september 2001, 19:21:30, schreef jij: LG Cheers, LG Leif Gregory Your message (as it appeared on my screen) went accompanied by an attachment called Invalid Signature. What's the meaning of such an attachment stating that the message was altered? -- Groetjes, Roelof -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Roelof, On Thu, 13 Sep 2001 at 20:11:26 [GMT +0200], you wrote: RO Your message (as it appeared on my screen) went accompanied by an RO attachment called Invalid Signature. What's the meaning of such RO an attachment stating that the message was altered? Well, it didn't get altered (context wise), so I'll look into it. I have no problem sending myself messages where the signature is fine, so it must be the Dutaint server list software. I'll look into it. But to answer your question, the signature is from a X.509 certificate issued through Thawte, and is more or less a digital signature saying the message came from me (or at least my machine), and that nothing was altered in the message. If you're interested in obtaining your own e-mail certificates free of charge (from Thawte), please view the how-to by Ulrich Peters at: http://www.mindquake.com.br/thebat/ Cheers, Leif Gregory - -- List Moderator (and fellow registered end-user) PCWize Editor / ICQ 216395 / PGP Key ID 0x7CD4926F Web Site http://www.PCWize.com TB FAQ http://www.silverstones.com/thebat/FAQ.html Using The Bat! 1.54 Beta/8 under Windows 98 4.10 Build A on a Pentium III 500 MHz notebook with 256MB. Tagline of the day: Guillotining him would make only an aesthetic difference. -BEGIN PGP SIGNATURE- Version: PGP 6.5i iQA/AwUBO6D9gI8+1rl81JJvEQJnawCgk40Bs6AMYSPAClg7a7JRX0iJCjwAoNh1 Ita2KJFNzAd2kTVHsOtSvscb =4Xs7 -END PGP SIGNATURE- S/MIME Cryptographic Signature
Re: Invalid signature?
Hello Roelof, 13. september 2001, 20:11:26, you wrote: RO Hallo Leif, RO Op donderdag 13 september 2001, 19:21:30, schreef jij: LG Cheers, LG Leif Gregory RO Your message (as it appeared on my screen) went accompanied by an RO attachment called Invalid Signature. RO What's the meaning of such an attachment stating that the message was RO altered? I think that TB says Invalid sig because it doesn't support internally the PGP version it was made with. -- Jernej Simoncic, [EMAIL PROTECTED] http://www2.arnes.si/~sopjsimo/ ICQ: 26266467 [The Bat! v1.53d on Windows 98 4.10.1998. ] The fact that you do not know the answer does not mean that someone else does. -- Stein's Maxim -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re[2]: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Op donderdag 13 september 2001 schreef Leif Gregory: But to answer your question, the signature is from a X.509 certificate issued through Thawte, and is more or less a digital signature saying the message came from me (or at least my machine), and that nothing was altered in the message. leif, i saw you were using *both* the PGP and the S/MIME signature. isn't that rather an overkill? and, of the 7435 bytes of your original message 3125 bytes were taken up by that S/MIME signature. that is over 40% in this particular case, which was a rather long mail. i find that number ridiculous, which is my general argument against using S/MIME for signing messages. in my opinion the PGP signature is cleaner and smaller (and inline! didn't list policy dictate 'no attachments'?), so that one is and always will be my favorite. Mrten. -BEGIN PGP SIGNATURE- Version: PGP 6.5i iQA/AwUBO6D6EcxmXGfKa+lHEQLs+wCgw7XgaMtscEW9gSoo0MJ+tzkMIUUAnRy4 G2OhRfhn9orU9j/c1wIrSbIA =W5PG -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hello Leif, On Thursday, September 13, 2001 at 8:39:55 PM you wrote: LG Well, it didn't get altered (context wise), so I'll look into it. I LG have no problem sending myself messages where the signature is fine, LG so it must be the Dutaint server list software. I'll look into it. This is a test if and what 'listar' may alter ... Please ignore :-) - -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] (The Bat! v1.54 Beta/8 on Windows NT 5.0 Build 2195 Service Pack 1) I do not know whether I was then a man dreaming I was a butterfly, or whether I am now a butterfly dreaming I am a man. -BEGIN PGP SIGNATURE- Version: PGP 6.5.8 iQEVAwUBO6D6L6B3jTk4gBiHAQF39Qf/RlOUhwgZzAm7Hr0lYZpfKdJ/e2QSNU4G Ig9gP0XK5BB34bmtv6oHjGdFq36J4V/cZnV1daUR2M3SEosJQvMfSycKHa9baa/R +jSWH3ReBt0lhgkxeQXtwZAkySLYNtrmV9QIXuZ0f080as1gf9jwUF2a3toTGPiC eF7ZV4D1lHn6PhDLZH4YG5voOxvYOYoJM0UzXeAE4X8zsWbG0ZdQ0KUHHe6N03bl CnUjSNnM+gBlFMgej50XHP1rrRyxfxKYwx8dxsZjaebiLzSnVRSIJ1ZgzkZsTLqa XCkHnu+sNHvfxfa01knS7fvWRYTUwS+KYK9cWWwPrmHKqHdlU5t7uA== =iMB1 -END PGP SIGNATURE- S/MIME Cryptographic Signature
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thursday, September 13, 2001, 9:45:30 PM, Jernej Simonèiè wrote: I think that TB says Invalid sig because it doesn't support internally the PGP version it was made with. Well actually it's something similar to what PGP does but it aint PGP. That attachment is cause of a S/MIME sig. For this to be made one needs to import or get a certificate from an authority such as Verisign, Thawte etc. and guarantees that the signer is who he says he is. More about this can be found in TB's help file. - -- Well, what was the ham cured OF? __ -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (MingW32) Comment: Member of the PGP-Basics, Encryption Help Team iD8DBQE7oQoy8WBGNj3ut+0RAivBAJ9aewRHsWMpLpdqccMq569OVrbB2wCg2ugQ kThIFHv1tIIIRw+ARF1RX3w= =VPQo -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Leif, On 13 September 2001 at 14:39:55 -0400 (which was 19:39 where I live) Leif Gregory wrote to Roelof Otten and made these points: LG Well, it didn't get altered (context wise), so I'll look into it. One clue is that the message content arrived doubled up here. Could it be anything to do with the fact that we're not supposed to have attachments on TBUDL? (Just a thought). - -- Cheers -- .\\arck D. Pearlstone -- List moderator and fellow end user ~~~ \ BrainStorm - free thinking - www: http://www.brainstormsw.com / \ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com / . SB! v1.53s/iKey1000- on Windows NT 5.0.2195 Service Pack 2 . -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (MingW32) Comment: GPG Sealed for freshness iD8DBQE7oQtDOeQkq5KdzaARAk2mAJ0VDXvK1fEPiaycLRswzqBf8Jqx0gCg3XOy loFpMF35ATr1jtRNkXitCV8= =icts -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hello Peter, On Thursday, September 13, 2001 at 9:25:37 PM you wrote: PP Hello Leif, PP On Thursday, September 13, 2001 at 8:39:55 PM you wrote: LG Well, it didn't get altered (context wise), so I'll look into it. I LG have no problem sending myself messages where the signature is fine, LG so it must be the Dutaint server list software. I'll look into it. PP This is a test if and what 'listar' may alter ... PP Please ignore :-) OK .. it is the normal ML-Footer attached to the message that caused the 'alteration'. Sadly this footer is not even shown because it is not appended as 'next part' in mime-boundary style but plainly added as text. Although the whole mail is plain text (except the S/MIME attachment) the footer is not shown because there's a boundary rule that makes it this way quite impossible to TB! to recognize the footer as text. I think it is really _complex_ a ML-Software adding the footer in a MIME context 100% correctly, so I think we should not concern about this special case :-) Normally nobody but moderators is using S/MIME so there should be no disturbing at this :-) Have a nice evening/night/whatever Pit - -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] (The Bat! v1.54 Beta/8 on Windows NT 5.0 Build 2195 Service Pack 1) In the beginning the Universe was created. This has made a lot of people very angry and been widely regarded as a bad move. -BEGIN PGP SIGNATURE- Version: PGP 6.5.8 iQEVAwUBO6D+2KB3jTk4gBiHAQGaeQgAgaRZIXz0yGkR+99H8TI1+WQ0OCBwCCbV jtSmoLWsgIY3J2eW3PkVHNSNb/BiQkFZCP6ycP5uBOdG35xXByR3rLNBhRpjmbLZ pEEVY/2SmR9F8PrQYfee6Jx8saAgexG7UCw9Q1YZ8WB/r8O8nUDFUEjRN7w+AjLv yZ2uVF5HQJySpe18nJNtdqmTi9HsCMOsUqobE0ZBgDd5Tstc4ZXyKjipi98HjUPF QJLbuIdnfeMYsVSOfINj+vOYiPC6hbNxZKq5fG4HDsrkEGD4HtiYq6SFpBMO+i/1 rC9JfKxDuZ5dqn7kbKLy25i/ZTh8hh6ANAqgBm0Jtee/iEvuLf4ETg== =TlnR -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I don't recall whether the signature at issue was signed with PGP, GnuPG or another program. With PGP, and probably with other approaches that utilize a public key infrastructure, validity refers to a level of trust. An invalid signature is one for which the applicable public key has not been given an attribute of trustworthiness. Unless one *knows* with a very high degree of certainty that the public key has not been tampered with, that it was generated by the key owner, and that the key owner is who he/she/it purports to be, then there is no reason to endow a key with trust; consequently, invalid signatures are not uncommon. There are a number of practical ways of dealing with the trust issue, including inheriting trust from other key signers, verifying accuracy through personal or telephonic confirmation, and key fingerprints. Probably more, but I've just hit the ceiling on my understanding of PKI. Thursday, September 13, 2001, 1:11:26 PM, you wrote: RO Your message (as it appeared on my screen) went accompanied by an RO attachment called Invalid Signature. What's the meaning of such RO an attachment stating that the message was altered? -BEGIN PGP SIGNATURE- Version: PGP 6.5.8 iQA/AwUBO6EasOH2IGJNcAawEQLv6gCeNTMXyOW2YT94du+xlN8rQHJrQ28AoOwI cOeSUwaIwIN8PKtMMaYYCY9o =fd6g -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: Invalid signature?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thursday, September 13, 2001, 10:25:37 PM, Peter Palmreuther wrote: This is a test if and what 'listar' may alter ... Please ignore :-) Hmm your sig is ok on TBBETA but not here. Ok it's not TB's fault. Seems the server alters somehow the e-mail. - -- Error reading disk! (Retry/Abort/Persuade with a big hammer): __ -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (MingW32) Comment: Member of the PGP-Basics, Encryption Help Team iD8DBQE7oQ3y8WBGNj3ut+0RAj+YAJ9IJc/bHrtQa+aWIbW+CsSk00bh1ACdG7B+ SfmlrbknuolIJoX6d1Rqq7g= =O2L7 -END PGP SIGNATURE- -- Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] Latest Vers: 1.53d
Re: PGP signature verification: always get invalid signature format
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 26 Oct 2000 00:20:24 -0500, Tony A. T. Mendina wrote: [snip] TATM Moral of the story: check all your settings carefully when you TATM discover a "bug!" A very important moral there. Another is to also carefully check if other applications or system settings are interfering when others cannot duplicate your 'bug'. ;-) - -- A. Curtis Martin.. Moderator TBUDL/TBBETA | PGP Key ID: 0xEE079937 PGP Key: mailto:[EMAIL PROTECTED]?Subject=SendAlliePGPKey - --- ** "Locked coathanger in car. Good thing I had a key. " _ TB! v1.47 Halloween Edition (S/N CCA4F9B8) «» Win2k Pro SP1 -BEGIN PGP SIGNATURE- Version: PGP 6.5.8 Comment: Digitally signed for sender verification. iQA/AwUBOfgIqfAXeSHuB5k3EQLXXgCeMlaXvYqhy4WYYr2Tv02iLR+vJ84An2RI bJUZckDwYVChFgZOiH0xCwoa =YoNo -END PGP SIGNATURE- -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Re: PGP signature verification: always get invalid signature format
Tony A. T. Mendina [EMAIL PROTECTED] said at 11:57 PM on 10/24/2000: This kind of think came up this time last year, and though the discussion on how to transliterate Russian names was interesting, I couldn't find a solution in the archives. So here I am. And now I want to post my solution for the benefit of anyone else who runs across it: I erased my hard drive a month or so ago; it's something I do periodically to make Windows loose some weight (usually 50% if it's a six-months old installation. I try out a lot of software). After I did this, of course, I re-installed my apps (Including TheBat!) and filled in the mail base from another copy. When I set up the bat I did point it, as always, to my proper keyrings and randseed file. Alas, I forgot to check the box that indicates that I'm using version 6. SO, it was trying to use the version 6 keyrings according to the "internal" method. Neither the public nor the private keyring contained anything it could recognize---and all signatures came up as invalid. Moral of the story: check all your settings carefully when you discover a "bug!" Tony -- Tony A.T. Mendina "Windows: a big, pretty, expensive virus." Get my stuff PGP keys at: http://members.home.net/mendina Also available: [EMAIL PROTECTED] [EMAIL PROTECTED] -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
PGP signature verification: always get invalid signature format
This kind of think came up this time last year, and though the discussion on how to transliterate Russian names was interesting, I couldn't find a solution in the archives. So here I am. Whenever I try to validate a signature using The Bat!, the PGP signature validation log pops up and tells me that the signature is invalid, and the signer is "unknown," because of "(unknown signature format)". I assume I've got something set up wrong, but I've tried pgp 5.5, 6.5.8, no pgp installed, and versions of The Bat! 1.42 thru 1.47. Reboots don't help. Both the Bat! PGP plugin dlls and the pgp dlls that come with 6.5.8 are in the windows/system directory, which is of course in the system path. The bat's pgp plugin dlls are also found in The Bat's program directory. Any suggestions? Is there something obvious I've missed? Thanks, Tony -- Tony A.T. Mendina "Partial Lobotomies are for sissies!" Get my stuff PGP keys at: http://members.home.net/mendina Also available: [EMAIL PROTECTED] [EMAIL PROTECTED] -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
