<<< Date Index >>>     <<< Thread Index >>>

Re: Mutt and GPG: how to manually verify the signature of a message?



On date Monday 2007-04-16 01:09:40 -0600, Kyle Wheeler muttered:
> On Sunday, April 15 at 01:45 AM, quoth Stefano Sabatini:
> [...]
> > I'm testing mutt and gnupg, I can verify with no problem messages 
> > signatures, but it fails when I do it manually, saving in distinct 
> > files the message and the signature.
> >
> > For example if I save the (clear) message in "message", and the 
> > signature in "signature.asc", then the command:
> >
> > gpg --verify signature.asc message
> 
> The message *body* or the message itself? Generally the message 
> includes all sorts of things (headers and such) that are not part of 
> what gets signed.

Sorry if I've not been very clear.

I'm considering multipart/signed attatchments. In order to save the
different parts of the attachment, I'm using the mutt attachment menu,
I save the text/plain and the application/pgp-signature in different
files (respectively message and signature.asc), so the "message" file
only contains the body of the mail (which is supposedly the part which
is signed).

Cheers
-- 
Stefano Sabatini
Linux user number 337176 (see http://counter.li.org)