Mailing List Archive

Sign test (was: Netscape GPG)
On Fri, 7 Jan 2000, Lars Hecking wrote:

> signed mails is that your message was multipart/mixed, and maybe

Which is correct

> the list software has problems with that. Or there was some broken
> MTA in the path.

This maybe the problem, so we do another test here. The difference
to Walter's message is that this one is composed using Mutt 1.1 where
walter used 1.0 and of course it is a DSA key.

Let's have some Umlaute äöü to force quoted-printable, but I think
Mutt does this anyway.

--
Werner Koch at guug.de www.gnupg.org keyid 621CC013

Boycott Amazon! - http://www.gnu.org/philosophy/amazon.html
Re: Sign test (was: Netscape GPG) [ In reply to ]
Werner Koch writes:
> On Fri, 7 Jan 2000, Lars Hecking wrote:
>
> > signed mails is that your message was multipart/mixed, and maybe
>
> Which is correct
>
> > the list software has problems with that. Or there was some broken
> > MTA in the path.
>
> This maybe the problem, so we do another test here. The difference
> to Walter's message is that this one is composed using Mutt 1.1 where
> walter used 1.0 and of course it is a DSA key.
>
> Let's have some Umlaute äöü to force quoted-printable, but I think
> Mutt does this anyway.

Reading with mutt-1.1.1i and gpg-1.0.1, here is gpg's output on your
message:

[.-- PGP output follows (current time: Fri Jan 7 12:42:48 2000) --]
gpg: Signature made Fri Jan 07 12:15:58 2000 GMT using DSA key ID 621CC013
gpg: requesting key 621CC013 from blackhole.pca.dfn.de ...
gpg: key 621CC013: invalid subkey binding
gpg: key 621CC013: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg: w/o user IDs: 1
gpg: Can't check signature: public key not found
[-- End of PGP output --]

and this is from mutt's attachment "v"iew

1 <no description> [multipa/mixed, 7bit, 5.1K]
2 |-><no description> [text/plain, quoted, iso-8859-1, 0.6K]
3 `->8bit-in-header.c [text/plain, 7bit, us-ascii, 4.2K]
4 <no description> [applica/pgp-signat, 7bit, 0.2K]
Re: Sign test [ In reply to ]
On Fri, 7 Jan 2000, Lars Hecking wrote:

> Reading with mutt-1.1.1i and gpg-1.0.1, here is gpg's output on your

same configuration here (some CVS Mutt)

> message:
>
> [.-- PGP output follows (current time: Fri Jan 7 12:42:48 2000) --]
> gpg: Signature made Fri Jan 07 12:15:58 2000 GMT using DSA key ID 621CC013
> gpg: requesting key 621CC013 from blackhole.pca.dfn.de ...
> gpg: key 621CC013: invalid subkey binding

Ahh. That's the problem. The kezservers messed my key up after the
last upload. It seems that they can't cope with subkey revocations or
something like this. Everyone using the keyserver to get my key will
have this problem - there is no way to correct this except for the
keyserver admins and I think it is not easy either.

BTW, a good copy of the key is in g10/pubring.asc


--
Werner Koch at guug.de www.gnupg.org keyid 621CC013

Boycott Amazon! - http://www.gnu.org/philosophy/amazon.html
Re: Sign test [ In reply to ]
> > [.-- PGP output follows (current time: Fri Jan 7 12:42:48 2000) --]
> > gpg: Signature made Fri Jan 07 12:15:58 2000 GMT using DSA key ID 621CC013
> > gpg: requesting key 621CC013 from blackhole.pca.dfn.de ...
> > gpg: key 621CC013: invalid subkey binding
>
> Ahh. That's the problem. The kezservers messed my key up after the
> last upload. It seems that they can't cope with subkey revocations or
> something like this. Everyone using the keyserver to get my key will
> have this problem - there is no way to correct this except for the
> keyserver admins and I think it is not easy either.
>
> BTW, a good copy of the key is in g10/pubring.asc

As this one works fine, your analysis is probably correct.

[.-- PGP output follows (current time: Fri Jan 7 14:59:14 2000) --]
gpg: Signature made Fri Jan 07 12:15:58 2000 GMT using DSA key ID 621CC013
gpg: Good signature from "Werner Koch <werner.koch@guug.de>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
gpg: Fingerprint: ECAF 7590 EB34 43B5 C7CF 3ACB 6C7E E1B8 621C C013
[-- End of PGP output --]
Re: Sign test (was: Netscape GPG) [ In reply to ]
On Fri, 07 Jan 2000, Werner Koch wrote:

> On Fri, 7 Jan 2000, Lars Hecking wrote:
>
> > signed mails is that your message was multipart/mixed, and maybe
>
> Which is correct
>
> > the list software has problems with that. Or there was some broken
> > MTA in the path.
>
> This maybe the problem, so we do another test here. The difference
> to Walter's message is that this one is composed using Mutt 1.1 where
> walter used 1.0 and of course it is a DSA key.
>
> Let's have some Umlaute äöü to force quoted-printable, but I think
> Mutt does this anyway.

Please note that the problem seems to be caused by a mail that was QP
encoded without an apparent need; there were no 8bit characters in it.
The Mail attachment that came from the list was 7bit/us-ascii encoded.

Unfortunately I configured mutt so that it doesn't save the attachment
in my local copy, so I cannot say exactly what was sent to the list. I
have however recreated the same message again & appended it to the end
of this one (not as an attachment & unsigned, hope this will get through
unchanged).

Walter


The message I sent:

----------------------------------------------------------------------
From walter.hofmann@physik.stud.uni-erlangen.de Sat Jan 8 06:59:07 2000
Return-Path: <walter.hofmann@physik.stud.uni-erlangen.de>
Received: (from wh@localhost)
by frodo.uni-erlangen.de (8.9.3/8.8.8) id GAA16049
for wh; Sat, 8 Jan 2000 06:59:07 +0100
Date: Sat, 8 Jan 2000 06:59:06 +0100
From: Walter Hofmann <walter.hofmann@physik.stud.uni-erlangen.de>
To: Walter Hofmann <wh@frodo.uni-erlangen.de>
Subject: Re: Can't get key from keyserver: eof
Message-ID: <20000108065905.A16030@frodo.rrze.uni-erlangen.de>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="VrqPEDrXMn8OVzN4"
X-Mailer: Mutt 1.0pre4i
Status: RO
Content-Length: 2970
Lines: 105


--VrqPEDrXMn8OVzN4
Content-Type: multipart/mixed; boundary="AqsLC8rIMeq19msA"


--AqsLC8rIMeq19msA
Content-Type: text/plain; charset=us-ascii

On Fri, 03 Dec 1999, David DeSimone wrote:

> David DeSimone <fox@rsn.hp.com> wrote:
> >
> > gpg: Signature made Sat, Oct 30, 1999 04:25:24 PM CDT using RSA key ID 766CD151
> > gpg: requesting key 766CD151 from wwwkeys.us.pgp.net ...
> > gpg: can't get key from keyserver: eof
> > gpg: Can't check signature: public key not found
>
> I have an update on this problem. If I comment out the following
> statement, it works!

Sorry, I didn't read this thread, do you happen to use Internet Junk
Buster and forward your key request via this proxy??

If so, ijb breaks the connection once the browser closes the sending
part of the connection, which leads to this error. Commenting out the
shutdown call solves the problem, but leaves the socket open. You can
also move the shutdown call a few lines further down, which should solve
your problem without creating the other.

In case you really use ijb there is a patch attached which should help
as well.

Walter

--AqsLC8rIMeq19msA
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=ijb-patch
Content-Transfer-Encoding: quoted-printable

diff -ur ijb20/jcc.c ijb20.patched/jcc.c
--- ijb20/jcc.c Sat Oct 31 04:58:47 1998
+++ ijb20.patched/jcc.c Tue Oct 12 18:28:53 1999
@@ -198,6 +198,7 @@
struct cookie_spec *cs;
struct gateway *gw;
struct http_request *http;
+ int client_closed_connection =3D 0;
=20
http =3D csp->http;
=20
@@ -442,7 +443,8 @@
for(;;) {
FD_ZERO(&rfds);
=20
- FD_SET(csp->cfd, &rfds);
+ if (!client_closed_connection)
+ FD_SET(csp->cfd, &rfds);
FD_SET(csp->sfd, &rfds);
=20
n =3D select(maxfd+1, &rfds, NULL, NULL, NULL);
@@ -461,14 +463,19 @@
=20
n =3D read_socket(csp->cfd, buf, sizeof(buf));
=20
- if(n <=3D 0) break; /* "game over, man" */
-
- if(write_socket(csp->sfd, buf, n) !=3D n) {
- fprintf(logfp, "%s: write to: %s failed: ",
- prog, http->host);
- fperror(logfp, "");
- return;
- }
+ if (n=3D=3D0) {
+ /* The web browser shut down the sending half of
+ the connection. We shut down the sending part
+ of our connection to the server as well. */ =09
+ client_closed_connection =3D 1;
+ shutdown(csp->sfd,1);
+ } else
+ if(write_socket(csp->sfd, buf, n) !=3D n) {
+ fprintf(logfp, "%s: write to: %s failed: ",
+ prog, http->host);
+ fperror(logfp, "");
+ return;
+ }
continue;
}
=20

--AqsLC8rIMeq19msA--

--VrqPEDrXMn8OVzN4
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)

iQCVAwUBOHbSKPzeA3/eVHOFAQHk9gP/f+w8H1SQEHGL8ODZ7XdPlTuZWOYLmIb6
hKaWCaK1Gj4/vOM0NfRXJiMoW3WUCgqALCfBFxPAL8hTIecgPAakRSwUfHPWIVHh
T5UudeXJtbzY3gZX8slKuMiv1Zif58YZNd1dXZE8sKa4+0pURzJn+juEDTgmQw06
iyZeE3H1qKA=
=1srw
-----END PGP SIGNATURE-----

--VrqPEDrXMn8OVzN4--

----------------------------------------------------------------------



The message I received:

----------------------------------------------------------------------
From gnupg-users-request@gnupg.org Sat Dec 4 19:11:47 1999
Return-Path: <gnupg-users-request@gnupg.org>
Received: from localhost (root@localhost [127.0.0.1])
by frodo.uni-erlangen.de (8.9.3/8.8.8) with ESMTP id TAA00878
for <postmaster@localhost>; Sat, 4 Dec 1999 19:11:46 +0100
Received: from imap.rrze.uni-erlangen.de
by localhost with IMAP (fetchmail-5.1.2)
for postmaster@localhost (multi-drop); Sat, 04 Dec 1999 19:11:46 +0100 (MET)
Received: from pharos.hsp.de by max5.rrze.uni-erlangen.de with ESMTP for Walter.Hofmann@physik.stud.uni-erlangen.de; Sat, 4 Dec 1999 19:09:28 +0100
Received: (from slist@localhost)
by pharos.hsp.de id TAA23689;
Sat, 4 Dec 1999 19:06:47 +0100
Resent-Date: Sat, 4 Dec 1999 19:06:47 +0100
Date: Sat, 4 Dec 1999 16:16:06 +0100
From: Walter Hofmann <Walter.Hofmann@physik.stud.uni-erlangen.de>
To: David DeSimone <fox@rsn.hp.com>
Cc: gnupg-users@gnupg.org
Subject: Re: Can't get key from keyserver: eof
Message-Id: <19991204161604.A2317@frodo.rrze.uni-erlangen.de>
References: <19991202175806.A12763@fuzzy.rsn.hp.com> <x19991203134144.A18446@fuzzy.rsn.hp.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="9Ek0hoCL9XbhcSqy"
X-Mailer: Mutt 1.0pre4i
In-Reply-To: <x19991203134144.A18446@fuzzy.rsn.hp.com>; from fox@rsn.hp.com on Fri, Dec 03, 1999 at 01:41:45PM -0600
Resent-Message-ID: <KGeVjD.A.GyF.2gVS4@pharos>
Resent-From: gnupg-users@gnupg.org
X-Mailing-List: <gnupg-users@gnupg.org> archive/latest/835
X-Loop: gnupg-users@gnupg.org
Precedence: list
Resent-Sender: gnupg-users-request@gnupg.org
X-Fetchmail-Warning: no recipient addresses matched declared local names
Status: RO
Content-Length: 2939
Lines: 106


--9Ek0hoCL9XbhcSqy
Content-Type: multipart/mixed; boundary="lEGEL1/lMxI0MVQ2"


--lEGEL1/lMxI0MVQ2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

On Fri, 03 Dec 1999, David DeSimone wrote:

> David DeSimone <fox@rsn.hp.com> wrote:
> >
> > gpg: Signature made Sat, Oct 30, 1999 04:25:24 PM CDT using RSA key=
ID 766CD151
> > gpg: requesting key 766CD151 from wwwkeys.us.pgp.net ...
> > gpg: can't get key from keyserver: eof
> > gpg: Can't check signature: public key not found
>=20
> I have an update on this problem. If I comment out the following
> statement, it works!

Sorry, I didn't read this thread, do you happen to use Internet Junk
Buster and forward your key request via this proxy??

If so, ijb breaks the connection once the browser closes the sending
part of the connection, which leads to this error. Commenting out the
shutdown call solves the problem, but leaves the socket open. You can
also move the shutdown call a few lines further down, which should solve
your problem without creating the other.

In case you really use ijb there is a patch attached which should help
as well.

Walter

--lEGEL1/lMxI0MVQ2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=ijb-patch

diff -ur ijb20/jcc.c ijb20.patched/jcc.c
--- ijb20/jcc.c Sat Oct 31 04:58:47 1998
+++ ijb20.patched/jcc.c Tue Oct 12 18:28:53 1999
@@ -198,6 +198,7 @@
struct cookie_spec *cs;
struct gateway *gw;
struct http_request *http;
+ int client_closed_connection = 0;

http = csp->http;

@@ -442,7 +443,8 @@
for(;;) {
FD_ZERO(&rfds);

- FD_SET(csp->cfd, &rfds);
+ if (!client_closed_connection)
+ FD_SET(csp->cfd, &rfds);
FD_SET(csp->sfd, &rfds);

n = select(maxfd+1, &rfds, NULL, NULL, NULL);
@@ -461,14 +463,19 @@

n = read_socket(csp->cfd, buf, sizeof(buf));

- if(n <= 0) break; /* "game over, man" */
-
- if(write_socket(csp->sfd, buf, n) != n) {
- fprintf(logfp, "%s: write to: %s failed: ",
- prog, http->host);
- fperror(logfp, "");
- return;
- }
+ if (n==0) {
+ /* The web browser shut down the sending half of
+ the connection. We shut down the sending part
+ of our connection to the server as well. */
+ client_closed_connection = 1;
+ shutdown(csp->sfd,1);
+ } else
+ if(write_socket(csp->sfd, buf, n) != n) {
+ fprintf(logfp, "%s: write to: %s failed: ",
+ prog, http->host);
+ fperror(logfp, "");
+ return;
+ }
continue;
}


--lEGEL1/lMxI0MVQ2--

--9Ek0hoCL9XbhcSqy
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)

iQCVAwUBOEkwMvzeA3/eVHOFAQEHAwP/WSzDaqWz9/hCILnUlAH47bf1y2tuRVuN
grKu8eJ/MzpN97NCJPX6oD8ddtf1r/745bt72umhLygK7aMabRAwOSSbzPEe2Uhq
6MkVTKwoIxziDh//DVyd/N9Q9epZmrGevoB6mzOj5kO949NjzDa+v7c/+ntQfusb
xFk8NRsqQJk=
=+B31
-----END PGP SIGNATURE-----

--9Ek0hoCL9XbhcSqy--

----------------------------------------------------------------------