Comments you submit will be routed for moderation. If you have an account, please log in first.

Ticket #4 (accepted bug)

Modify ↓

Opened 2 years ago

Last modified 6 months ago

YAM doesn't check signature on files created with YAM

Reported by: amigasurfer@… Owned by: somebody
Priority: normal Milestone: YAM 2.8
Component: PGP/GPG encryption Version: 2.5
Severity: major Keywords: SF
Cc: Blocked By:
Blocking:

Description (last modified by damato) (diff)

I wrote an e-mail with YAM, signed it with PGP and send it to a mailinglist.

Then I tried to check the signatur. If I open this message or choose in the menubar to check the signatur I will get no message. I thought no error message says it would be good. But then I modified a character with a hex-editor. Same result, no error message about the now invalid signatur.

I have the impression, that YAM save header, text and signatur after converting quoted printable at T: in three separate files, but then only send the file with the signatur to PGP, not the file with the signed text. But I can't verify this with SnoopDos, because SnoopDos does only catch 99 characters of the command send from YAM to PGP.

Attached you will find this e-mail for testing.

Same problem appears e.g. with e-mails generated with User-Agent: Mutt/1.5.11, e.g. Message-ID: <20070311171652.GA8118@…> at the NetBSD-Amiga Mailinglist port-amiga@….

Moved from SF:
​https://sourceforge.net/tracker/?func=detail&aid=1879341&group_id=13560&atid=113560

Attachments

OIwB0gAKbV4=.001,R​ (6.9 KB) - added by damato 2 years ago.
Moved from SF. Original author: amigasurfer
YAM.debug.zip​ (101.4 KB) - added by damato 2 years ago.
Moved from SF. Original author: thboeckel

Change History

Changed 2 years ago by damato

Moved from SF. Original author: amigasurfer

comment:1 Changed 2 years ago by damato

To be sure which file PGP is fed with just create a "util" log and post it
here. See
​http://faq.yam.ch/content/12/54/en/basics-about-yam_s-debugging-facilities.html
for more information about YAM's debugging facility. The 2.6 nightly builds
will log some information, but even with 2.5 you will see the used file
names.

Moved from SF. Original poster: thboeckel

Changed 2 years ago by damato

Moved from SF. Original author: thboeckel

comment:2 Changed 2 years ago by damato

I made a "util" log with YAM 2.5 debug and the env yamdebug set to "util
@all".
Attached you will find the whole debug.log as zipped file.

The lines calling PGP are:

YAM_UT.c:5480:Entering PGPCommand
YAM_UT.c:5482:[pgpv] [T:YAMr00000014-p2.txt -o T:YAMt00000015.tmp
+batchmode=1 +force +language=us] - flags: 48
YAM_UT.c:5603:Entering Busy

Moved from SF. Original poster: amigasurfer

comment:3 Changed 2 years ago by damato

  • Priority changed from major to undecided
  • Severity set to major

comment:4 Changed 2 years ago by damato

  • Component changed from nightly build to undefined

comment:5 Changed 2 years ago by damato

  • Cc yamos-svn@… removed

comment:6 Changed 2 years ago by damato

  • Priority changed from undecided to normal
  • Status changed from new to accepted
  • Component changed from undefined to PGP/GPG encryption
  • Milestone set to YAM 2.7

comment:7 Changed 6 months ago by damato

  • Description modified (diff)
  • Milestone changed from YAM 2.7 to YAM 2.8
View ↑

Add a comment

Modify Ticket

Action
as accepted
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.

This list contains all users that will be notified about changes made to this ticket.

These roles will be notified: Reporter, Owner, Subscriber

  • amigasurfer@…(Reporter)