close
Comments you submit will be routed for moderation. If you have an account, please log in first.
Modify ↓

Opened 3 years ago

Closed 8 months ago

#4 closed bug (fixed)

YAM doesn't check signature on files created with YAM

Reported by: amigasurfer@… Owned by: somebody
Priority: normal Milestone: YAM 2.8
Component: PGP/GPG encryption Version: 2.5
Severity: major Keywords: SF
Cc: Blocked By:
Blocking:
Release Notes:

Description (last modified by damato)

I wrote an e-mail with YAM, signed it with PGP and send it to a mailinglist.

Then I tried to check the signatur. If I open this message or choose in the menubar to check the signatur I will get no message. I thought no error message says it would be good. But then I modified a character with a hex-editor. Same result, no error message about the now invalid signatur.

I have the impression, that YAM save header, text and signatur after converting quoted printable at T: in three separate files, but then only send the file with the signatur to PGP, not the file with the signed text. But I can't verify this with SnoopDos, because SnoopDos does only catch 99 characters of the command send from YAM to PGP.

Attached you will find this e-mail for testing.

Same problem appears e.g. with e-mails generated with User-Agent: Mutt/1.5.11, e.g. Message-ID: <20070311171652.GA8118@…> at the NetBSD-Amiga Mailinglist port-amiga@….

Moved from SF:
​https://sourceforge.net/tracker/?func=detail&aid=1879341&group_id=13560&atid=113560

Attachments (2)

OIwB0gAKbV4=.001,R​ (6.9 KB) - added by damato 3 years ago.
Moved from SF. Original author: amigasurfer
YAM.debug.zip​ (101.4 KB) - added by damato 3 years ago.
Moved from SF. Original author: thboeckel

Download all attachments as: .zip

Change History (12)

Changed 3 years ago by damato

Moved from SF. Original author: amigasurfer

comment:1 Changed 3 years ago by damato

To be sure which file PGP is fed with just create a "util" log and post it
here. See
​http://faq.yam.ch/content/12/54/en/basics-about-yam_s-debugging-facilities.html
for more information about YAM's debugging facility. The 2.6 nightly builds
will log some information, but even with 2.5 you will see the used file
names.

Moved from SF. Original poster: thboeckel

Changed 3 years ago by damato

Moved from SF. Original author: thboeckel

comment:2 Changed 3 years ago by damato

I made a "util" log with YAM 2.5 debug and the env yamdebug set to "util
@all".
Attached you will find the whole debug.log as zipped file.

The lines calling PGP are:

YAM_UT.c:5480:Entering PGPCommand
YAM_UT.c:5482:[pgpv] [T:YAMr00000014-p2.txt -o T:YAMt00000015.tmp
+batchmode=1 +force +language=us] - flags: 48
YAM_UT.c:5603:Entering Busy

Moved from SF. Original poster: amigasurfer

comment:3 Changed 3 years ago by damato

  • Priority changed from major to undecided
  • Severity set to major

comment:4 Changed 3 years ago by damato

  • Component changed from nightly build to undefined

comment:5 Changed 3 years ago by damato

  • Cc yamos-svn@… removed

comment:6 Changed 3 years ago by damato

  • Component changed from undefined to PGP/GPG encryption
  • Milestone set to YAM 2.7
  • Priority changed from undecided to normal
  • Status changed from new to accepted

comment:7 Changed 19 months ago by damato

  • Description modified (diff)
  • Milestone changed from YAM 2.7 to YAM 2.8

comment:8 Changed 8 months ago by thboeckel

  • Resolution set to fixed
  • Status changed from accepted to closed

This should finally be fixed by the next nightly build (see r6350 to r6359).

comment:9 Changed 8 months ago by damato

  • Resolution fixed deleted
  • Status changed from closed to reopened

reopening this ticket as recent tests show that now with every execution of the PGP command output is shown in a console window. Thus, the output is not supressed anymore.

comment:10 Changed 8 months ago by thboeckel

  • Resolution set to fixed
  • Status changed from reopened to closed

(In [6364]) * YAM_UT.c: reworked the command output redirection to redirect the output of PGP to NIL: as it seems to use stderr for the general output. This closes #4 again.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.

This list contains all users that will be notified about changes made to this ticket.

These roles will be notified: Reporter, Owner, Subscriber

  • amigasurfer@…(Reporter)