On Sun, 22 Apr 2012 16:22:14 +0300, Andrei POPESCU wrote:

> On Du, 15 apr 12, 16:28:28, Camaleón wrote:
>> 
>> As I thought, verifying PGP/MIME detached signatures can be also done
>> from command line with GPG. I have tried with some posts from this same
>> mailing list coming from users that use detached signatures and in
>> every case it worked fine:
> ...
>> The recipe is very easy and the only needed ingredients are:
>> 
>> - Browsing to the mailing list archive - Telnet to "news.gmane.org"
>> server to get the message - Use "gpg --verify"
>> 
>> And that's all.
>> 
>> If anyone is interested in the detailed steps, just ask.
> 
> Can you reproduce this with local copies from a mail agent (ideally
> mutt)? My quick experiments failed. Just curious, nothing critical.
                                                    ^^^^^^^^^^^^^^^^ :-)

I can't test it because I'm not subscribed to Debian mailing lists and 
thus I don't get copies of the messages. But just two quick notes on your 
question:

1/ Mutt can verify PGP/GPG signatures (inline and detached) automatically 
or on user demand so why not using Mutt instead having to deal with the 
raw message? Mutt itself does the hard job of injecting "gpg" with the 
correct format of the message, separating the signature from the signed 
content.

2/ A common error when you have to manually verify the signature it comes 
from the extra lines you leave between the content of the message body 
and the signature which makes the verification proccess to fail. Removing 
the extra lines solves the problem and the signature can be properly 
checked.

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/jn12ch$ha3$9...@dough.gmane.org

Reply via email to