Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 76440 - gnupg-1.4.0 creates wrong signatures with Thunderbird 1.0
Summary: gnupg-1.4.0 creates wrong signatures with Thunderbird 1.0
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: x86 Linux
: High major (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-01-02 13:03 UTC by Prakash Punnoor
Modified: 2005-03-17 01:11 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
correctly signed email (signatur-1.2.6.eml,1.88 KB, text/plain)
2005-01-02 13:03 UTC, Prakash Punnoor
Details
wrongly signed email (signatur-1.4.0.eml,1.88 KB, text/plain)
2005-01-02 13:04 UTC, Prakash Punnoor
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Prakash Punnoor 2005-01-02 13:03:16 UTC
Atatched one email signed with 1.2.6 (which is OK) and same with 1.4.0. The 1.4.0 one is broken. not all emails get badly signed. The example text always though.

Reproducible: Sometimes
Steps to Reproduce:
1.
2.
3.




Portage 2.0.51-r8 (default-linux/x86/2004.3, gcc-3.4.3, glibc-2.3.4.20041102-r0,
2.6.10-ck1 i686)
=================================================================
System uname: 2.6.10-ck1 i686 AMD Athlon(tm)
Gentoo Base System version 1.6.7
Python:              dev-lang/python-2.3.4 [2.3.4 (#1, Nov 29 2004, 12:17:47)]
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
dev-lang/python:     2.3.4
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.8.5-r2, 1.9.3, 1.5, 1.6.3, 1.7.9, 1.4_p6
sys-devel/binutils:  2.15.92.0.2-r2
sys-devel/libtool:   1.5.10-r2
virtual/os-headers:  2.6.8.1-r1
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CFLAGS="-march=athlon-xp -mtune=athlon-xp -O2 -pipe -frename-registers
-fomit-frame-pointer -fprefetch-loop-arrays"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.3/env
/usr/kde/3.3/share/config /usr/kde/3.3/shutdown/usr/kde/3/share/config
/usr/lib/X11/xkb /usr/share/config /usr/share/texmf/dvipdfm/config/
/usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/
/usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=athlon-xp -mtune=athlon-xp -O2 -pipe -frename-registers
-fomit-frame-pointer -fprefetch-loop-arrays -fvisibility-inlines-hidden"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig candy ccache digest distlocks prelink sandbox
sfperms"
GENTOO_MIRRORS=" ftp://ftp.tu-clausthal.de/pub/linux/gentoo/
ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LDFLAGS="-Wl,-O1 -Wl,--enable-new-dtags -Wl,--sort-common -Wl,-z,combreloc
-Wl,--relax"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/lportage"
SYNC="rsync://linux.rz.ruhr-uni-bochum.de/gentoo-portage/"
USE="x86 3dnow 3dnowex S3TC X Xaw3d aac acl acpi acpi4linux alsa apm audiofile
avi berkdb bitmap-fonts bzip2 cddb cdparanoia cdr crypt cups curl dga divx4linux
dts dv dvb dvd dvdr dvdread edl encode ext-png ext-zlib faac faad fam ffmpeg
fftw flac foomaticdb freetype gdbm gif gimp gimpprint gnome gphoto2 gpm gs
gstreamer gtk gtk2 gtkhtml hal ieee1394 imagemagick imlib ipv6 ithreads java
javascript jpeg jpeg2k junit kde ldap libwww live lm_sensors lzo mad matroska
mikmod mmx mmx2 monkey motif moznocompose mpeg mpi nas ncurses network nls nocd
nptl nvidia oggvorbis openal opengl openssh oss pam pdflib perl pic png povray
ppds python qt qtmt quicktime readline real rtc samba scanner sdl slang smime
snmp speex spell sqlite sse ssl tcpd tetex theora threads tiff transcode
truetype truetype-fonts type1-fonts usb videos wmf wxwindows xfs xine xinetd xml
xml2 xmms xprint xv xvid xvmc yv12 zlib linguas_de"
Comment 1 Prakash Punnoor 2005-01-02 13:03:48 UTC
Created attachment 47396 [details]
correctly signed email
Comment 2 Prakash Punnoor 2005-01-02 13:04:43 UTC
Created attachment 47397 [details]
wrongly signed email
Comment 3 Prakash Punnoor 2005-01-02 13:13:52 UTC
Btw,

LDFLAGS="" CFLAGS="-march=i686 -O2" emerge gnupg

does *not* solve the issue, so I guess my CFLAGS are not breaking stuff...
Comment 4 Daniel Black (RETIRED) gentoo-dev 2005-01-02 17:17:46 UTC
http://lists.gnupg.org/pipermail/gnupg-users/2004-December/023923.html

Can you try this fix?

do an ebuild gnupg-1.4.0.ebuild unpack
apply the patch
ebuild gnupg-1.4.0.ebuild merge
Comment 5 Daniel Black (RETIRED) gentoo-dev 2005-01-02 21:36:43 UTC
From http://enigmail.mozdev.org/
 12/18/2004 Enigmail v0.89.6 has been released. Fixed compatibility issued with GnuPG 1.4

Mozilla devs,

Can you please make 
mozilla-thunderbird-0.9-r3.ebuild
mozilla-thunderbird-1.0.ebuild

depend on <=app-crypt/gnupg-1.4.0

(is this bad for gnupg-1.9* users(?) - probably but do we care?)

and add a revision bump to use EMVER="0.89.6"

Thankyou.
Comment 6 Prakash Punnoor 2005-01-03 00:56:43 UTC
Yes, the mentioned patch fixes my issue, at least with above example.
Comment 7 Prakash Punnoor 2005-01-03 01:04:53 UTC
BTW; if mozdev devs are reading this:

Why doesn't enigmail show up as extension in the Extensions windows? Because of this I cannot simply uninstall it and upgrade it w/o recompiling complete tb. (Or is there a way?)

Why is the decrypt icon so ugly? It doesn't seem to use default theme. On Windows it does. (I haven't tried binary tb on linux, though.)
Comment 8 Prakash Punnoor 2005-01-03 01:05:42 UTC
Oh, while bumping enigmail, please bump IPC, as well to 1.1.2.
Comment 9 Prakash Punnoor 2005-01-03 01:15:11 UTC
Forget my last comment, I was looking at the wrong place. ;)
Comment 10 Xavier Neys (RETIRED) gentoo-dev 2005-01-04 05:48:33 UTC
FWIW, I just set EMVER="0.89.6" (see #5), remerged thunderbird, problem solved.
Comment 11 Matteo Settenvini 2005-01-06 08:23:26 UTC
Yes, recompiling is ok also for me.
While you're at it, could you also fix bug #64606 - comment #7 reminded me of that.

Cheers,
Matteo
Comment 12 Matteo Settenvini 2005-01-07 09:37:34 UTC
Also Enigmail 0.90.0 compiles and works well.
Comment 13 Prakash Punnoor 2005-01-07 12:48:43 UTC
I had a case where enigmail 0.89.6 and the patch didn't work, but now 0.90.0 seems to work.
Comment 14 Benjamin Judas (RETIRED) gentoo-dev 2005-01-18 13:01:51 UTC
Sorry guys, I don't want to dissapoint you, but it's not only Enigmail ;)

Wrong Signatures are also created for Evolution 2 and kMail.

I have gnupg-1.2 on my notebook and the signatures show up correctly in both MUAs. But on my Desktop (gnupg-1.4) both apps show the signatures wrong.

Interesting is that it doesn't affect all Mails. Only some signatures seem to be affected (and no, I didn't see similarities in them). At this point it looks to me like random e-mails are affected.

What's also interesting is, that on my desktop (gnupg-1.4), Thunderbird was the only MUA that showed the signatures correctly.

Guess this is going to be a hard one ;)

Downgrading to gnupg-1.2 now since I need working signatures ;)
Comment 15 Andrej Kacian (RETIRED) gentoo-dev 2005-01-18 14:24:02 UTC
Sylpheed-claws suffers from the same thing - badly made signatures. Plus, in some cases, signature verification throws a failure, when the signature is perfectly valid.
Comment 16 Torsten Veller (RETIRED) gentoo-dev 2005-01-18 14:25:26 UTC
FYI: <http://article.gmane.org/gmane.comp.gnu.gnupg.users/5652>
"Subject: GnuPG 1.4.0 and PGP/MIME signatures"
Comment 17 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-03-16 14:34:51 UTC
GnuPG 1.4.1 is now in the tree.
Please check if this resolves the problem, and report back.
Comment 18 Tom Wesley 2005-03-17 00:44:02 UTC
Works for me.
Comment 19 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-03-17 01:11:23 UTC
Thanks, I'll close this then.