On Tue, Mar 15, 2011 at 09:34:37AM -0500, Derek Martin wrote: > Actually, do either of these last two messages (this one, and the one > I'm replying to) verify correctly? I upgraded OpenSSL, and now I see > this: > > $ gpg --list-packets foo4.txt > :signature packet: algo 17, keyid 1C49C048DFBEAD02 > version 3, created 1300199147, md5len 5, sigclass 01 > digest algo 2, begin of digest 57 51 > data: [160 bits] > data: [160 bits] > > Starting to look like an OpenSSL bug after all..
Both messages don't verify for me here in mutt (tip, gpg 1.4.10, Debian Squeeze). gpg: Signature made Tue 15 Mar 2011 03:34:37 PM CET using DSA key ID DFBEAD02 gpg: BAD signature from "Derek D. Martin <snip>" I get this output on the signature: $ gpg --list-packets :signature packet: algo 17, keyid 1C49C048DFBEAD02 version 3, created 1300199677, md5len 5, sigclass 0x01 digest algo 2, begin of digest 12 73 data: [160 bits] data: [158 bits] Regards, Simon -- + privacy is necessary + using gnupg http://gnupg.org + public key id: 0x92FEFDB7E44C32F9
pgpN5VCTDLZuV.pgp
Description: PGP signature