[Bug 1007094] Re: "gpg --clearsign" does not create the "-----END PGP SIGNED MESSAGE-----" tag

Michael Bienia michael at bienia.de
Thu May 31 21:10:38 UTC 2012


Citing http://tools.ietf.org/html/rfc4880#page-59:

| 7. Cleartext Signature Framework
[...]
| The cleartext signed message consists of:
|
|     - The cleartext header '-----BEGIN PGP SIGNED MESSAGE-----' on a
|       single line,
|
|     - One or more "Hash" Armor Headers,
|
|     - Exactly one empty line not included into the message digest,
|
|     - The dash-escaped cleartext that is included into the message
|       digest,
|
|     - The ASCII armored signature(s) including the '-----BEGIN PGP
|       SIGNATURE-----' Armor Header and Armor Tail Lines.

To my understanding the message ends with the signature armor tail line:
'-----END PGP SIGNATURE-----'

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg in Ubuntu.
https://bugs.launchpad.net/bugs/1007094

Title:
  "gpg --clearsign" does not create the "-----END PGP SIGNED
  MESSAGE-----" tag

Status in “gnupg” package in Ubuntu:
  New

Bug description:
  Input file:

  raub at ubuntu86:/tmp$ cat pickles
  Hey there!

  Think of the metaphysical consequences!
  Banana banana banana!
  raub at ubuntu86:/tmp$ 

  Now, run gpg --clearsign pickles, creating pickles.asc. And then see
  its contents:

  raub at ubuntu86:/tmp$ cat pickles.asc 
  -----BEGIN PGP SIGNED MESSAGE-----
  Hash: SHA1

  Hey there!

  Think of the metaphysical consequences!
  Banana banana banana!
  -----BEGIN PGP SIGNATURE-----
  Version: GnuPG v1.4.11 (GNU/Linux)

  iQEcBAEBAgAGBQJPx8l7AAoJECyBIzVoGuw2hG0H+gM8iv33q2g21MDlbNXb8nKt
  SdKxkBA6XYF5jC6mXanlG0FeOkAqW4nJgWTC3p3AcsKWVrP+IZY3ok1F+cSKXDrW
  a2r1Yu0EojrS0cP29+bSB6gQqKu8yPpsyc11Hc3RGXzNdTIzlUBTK444ND6la13U
  z2Nhdgz9lsefla02ESayx0+zZMQ1h1wR77VGcXnBx/yQwePEkX8a/ieQJ7Vp6ts4
  w/FZJlY4GQDzWLQJc1lafHPVaA4JXok5i4hNvfHpIAaId3mINDt17dXbBtmPC/1D
  Le92XgGiq4qu6/FpfLcXkX8xcHGq+a8zxuyY4/NNTREX7/EyfYsXE0hwsld2IVs=
  =jb46
  -----END PGP SIGNATURE-----
  raub at ubuntu86:/tmp$

  As you can see, no "-----END PGP SIGNED MESSAGE-----" tag present.

  raub at ubuntu86:/tmp$ lsb_release -a
  No LSB modules are available.
  Distributor ID: Ubuntu
  Description:    Ubuntu 11.10
  Release:        11.10
  Codename:       oneiric
  raub at ubuntu86:/tmp$

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg/+bug/1007094/+subscriptions




More information about the foundations-bugs mailing list