Package: sylpheed
Version: 3.5.0~beta1~r3420-1
Severity: normal

I'm looking at a test OpenPGP e-mail message in sylpheed that is
signed using PGP/MIME.

sylpheed presents the message with the following footer:


[signature (Good signature)]
Signature made at Thu 03 Jan 2013 07:47:11 PM EST
Good signature from "Daniel Kahn Gillmor <[email protected]>"
                aka "Daniel Kahn Gillmor <[email protected]>"
                aka "Daniel Kahn Gillmor <[email protected]>"
                aka "Daniel Kahn Gillmor <[email protected]>"
                aka "Daniel Kahn Gillmor <[email protected]>"
                aka "Daniel Kahn Gillmor <[email protected]>"

However, two of these User IDs are revoked:

[ revoked] (3)  Daniel Kahn Gillmor <[email protected]>
[ revoked] (4)  Daniel Kahn Gillmor <[email protected]>

sylpheed should not present them to the user when verifying a
signature.

I'm attaching the message i used to verify.  I hope this is useful.

    --dkg


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages sylpheed depends on:
ii  libassuan0           2.1.2-2
ii  libatk1.0-0          2.12.0-1
ii  libc6                2.19-11
ii  libcairo2            1.12.16-5
ii  libcompfaceg1        1:1.5.2-5
ii  libdbus-1-3          1.8.6-2
ii  libdbus-glib-1-2     0.102-1
ii  libenchant1c2a       1.6.0-10.1
ii  libfontconfig1       2.11.0-6.1
ii  libfreetype6         2.5.2-1.1
ii  libgdk-pixbuf2.0-0   2.30.8-1
ii  libglib2.0-0         2.40.0-5
ii  libgpg-error0        1.16-2
ii  libgpgme11           1.5.1-5
ii  libgtk2.0-0          2.24.24-1
ii  libgtkspell0         2.0.16-1.1
ii  libldap-2.4-2        2.4.39-1.1+b1
ii  libonig2             5.9.5-2
ii  libpango-1.0-0       1.36.7-1
ii  libpangocairo-1.0-0  1.36.7-1
ii  libpangoft2-1.0-0    1.36.7-1
ii  libpisock9           0.12.5-dfsg-1
ii  libssl1.0.0          1.0.1i-2
ii  multiarch-support    2.19-11

Versions of packages sylpheed recommends:
pn  aspell-en | aspell-dictionary  <none>
ii  ca-certificates                20140325
pn  sylpheed-i18n                  <none>
ii  xfonts-75dpi                   1:1.0.3

Versions of packages sylpheed suggests:
pn  bogofilter        <none>
pn  bsfilter          <none>
pn  claws-mail-tools  <none>
ii  curl              7.38.0-1
pn  jpilot            <none>
pn  sylpheed-doc      <none>

-- debconf-show failed
Message-ID: <[email protected]>
Date: Sat, 22 Feb 2014 22:36:55 -0500
From: Daniel Kahn Gillmor <[email protected]>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 
Icedove/24.2.0
MIME-Version: 1.0
To: Daniel Kahn Gillmor <[email protected]>
Subject: woo a test
X-Enigmail-Version: 1.6
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="4R6NnimCO9cXQQw0QOwlTL0FL67LIC2ht"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--4R6NnimCO9cXQQw0QOwlTL0FL67LIC2ht
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

a test message for seeing if things look bad.

2014-02-22

here we go


--4R6NnimCO9cXQQw0QOwlTL0FL67LIC2ht
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iQJ8BAEBCgBmBQJTCWzaXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB
NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpcL34P/imTSIQPPmVU3n4hn8RdgY0w
CcWjjayzAV3OTdwOj15uZRiIbmcomfy5IyTrXZvogdpNMm5Y0hPoa6sr06bbQ+vC
9ssg/JhXmNL2ZYs8ULV3DHK/VSWGjKVv0Dcr/oGdmLBWZc7yflUeset2gDXPztZV
ekj6L6PWLe9c59iv/Yh6mcnTGUGnZpPH8uwTKS3gbPRXtsjSUkiLJxLmHzqaQDTj
mOMMgKhqBELfoZ7myHD+zFtIqR9cUAl5Qd5pnYU+3PChLEj/WmLzlXzS1zvH6DRb
FLSL+skg45h06DQY/2NxfpHijwuNl/mFvf0Skpu2oEdQebij+ihqJJYfR30R75OG
peHLuOR1WlL8+tjVRbCsaktQmwtaaUWxFcqjHPPggObzPzPmhn6h5HXCI94L2z5C
a1xlvuUwksSBwtUnh23nbbejbJhTWR4CG8D+3hqksuNZBOVxbmS6uN65hpX9lbIc
tQ/DZJt7REr8M7lTLLKAQWN9Z4g0B/RQTx5eLdU4IjuIweo6fbxzPTLLJfKESqzx
MYi/cw/pTIZ3twhkMvnjBjg0IbRsl65+Md83NAQxPHf54NuglQdubmLrQjo3Cu+O
2WOKumfA+HW9vl5kfAmPPbmQijZa/Q65I3hPWSuNtdUgOlNwmz54URKQm1GJBVvt
6P0kpv+/+BZRa7k5t/P9
=7Iro
-----END PGP SIGNATURE-----

--4R6NnimCO9cXQQw0QOwlTL0FL67LIC2ht--

Reply via email to