On Tue, Mar 15, 2011 at 09:34:37AM -0500, Derek Martin wrote:
> Actually, do either of these last two messages (this one, and the one
> I'm replying to) verify correctly?  I upgraded OpenSSL, and now I see
> this:
>
> $ gpg --list-packets foo4.txt
> :signature packet: algo 17, keyid 1C49C048DFBEAD02
>         version 3, created 1300199147, md5len 5, sigclass 01
>         digest algo 2, begin of digest 57 51
>         data: [160 bits]
>         data: [160 bits]
>
> Starting to look like an OpenSSL bug after all..

Both messages don't verify for me here in mutt (tip, gpg 1.4.10,
Debian Squeeze).

    gpg: Signature made Tue 15 Mar 2011 03:34:37 PM CET using DSA key ID 
DFBEAD02
    gpg: BAD signature from "Derek D. Martin <snip>"

I get this output on the signature:

    $ gpg --list-packets
    :signature packet: algo 17, keyid 1C49C048DFBEAD02
            version 3, created 1300199677, md5len 5, sigclass 0x01
            digest algo 2, begin of digest 12 73
            data: [160 bits]
            data: [158 bits]

Regards,
Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9

Attachment: pgpN5VCTDLZuV.pgp
Description: PGP signature

Reply via email to