Mailing List Archive: probs w/ uncompressed encapsulating signature files

I'm signing some files without compression, but gpg is then
having problems verifying its own output. I've hand parsed
gpg's output using rfc 2440, and it looks fine. The output
is a one pass signature packet, followed by a literal data
packet (with binary data), followed by a signature packet.

Here's how to repeat the problem:

% gpg --version
gpg (GnuPG) 1.0.0
...

% gpg -s -z 0 testfile
...

% gpg --verify testfile.gpg
gpg: no valid OpenPGP data found.
gpg: verify signatures failed: eof

% gpg --list-packets testfile.gpg
gpg: no valid OpenPGP data found.
gpg: processing message failed: eof

Let me know if you need more data, want me to try on a
newer version of gpg, or if I'm just misunderstanding some
of gpg's command line options.

Thanks,
- Dave

On Mon, 10 Jan 2000, David Hallinan wrote:

> I'm signing some files without compression, but gpg is then
> having problems verifying its own output. I've hand parsed
> gpg's output using rfc 2440, and it looks fine. The output
> is a one pass signature packet, followed by a literal data
> packet (with binary data), followed by a signature packet.

Fixed. As a workaround use

gpg --no-armor --verify

The problem was that one pass signatures are not detected as binary
data but it tries to apply the unarmor filter. There should be
a backoff method in case no armor header has been found, but this
get's complicated so we stick to the current (fixed) solution.

Thanks,

Werner

--
Werner Koch at guug.de www.gnupg.org keyid 621CC013

Boycott Amazon! - http://www.gnu.org/philosophy/amazon.html