<<< Date Index >>>     <<< Thread Index >>>

Re: GPG and good signature (mis?)behaviour



Stefano Sabatini wrote:
> This is my crypto setting:
> 
> # %f: message file
> # %s: signature file
> # %a: pgp_sign_as value
> set pgp_decode_command="gpg %?p? --passphrase-fd 0? --no-verbose --batch 
> --output - %f"
> set pgp_verify_command="gpg --no-verbose --batch --output - --verify %s %f"
> set pgp_decrypt_command="gpg --passphrase-fd 0 --no-verbose --batch --output 
> - %f"
> set pgp_sign_command="gpg --no-verbose --batch --output - --passphrase-fd 0 
> --armor --detach-sign --textmode %?a?-u %a? %f"
> set pgp_clearsign_command="gpg --no-verbose --batch --output - 
> --passphrase-fd 0 --armor --textmode --clearsign %?a?-u %a? %f"
> set pgp_encrypt_only_command="pgpewrap gpg --batch --quiet --no-verbose 
> --output - --encrypt --textmode --armor --always-trust --encrypt-to 
> 0xC9C40C31 -- -r %r -- %f"
> set pgp_encrypt_sign_command="pgpewrap gpg --passphrase-fd 0 --batch --quiet 
> --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? --armor 
> --always-trust --encrypt-to 0xC9C40C31 -- -r %r -- %f"
> set pgp_import_command="gpg --no-verbose --import -v %f"
> set pgp_export_command="gpg --no-verbose --export --armor %r"
> set pgp_verify_key_command="gpg --no-verbose --batch --fingerprint 
> --check-sigs %r"
> set pgp_list_pubring_command="gpg --no-verbose --batch --with-colons 
> --list-keys %r" 
> set pgp_list_secring_command="gpg --no-verbose --batch --with-colons 
> --list-secret-keys %r" 
> 
> # a regexp: if that matches the mutt output from pgp_verify_command then the 
> message is considered verified
> # I'm not sure this is necessary, since gpg already exit with an useful exit 
> code of 0 in case
> # of success
> set pgp_good_sign="^gpg: Good signature from"
> #set pgp_check_exit=no
> 
> I'm using mutt 1.5.13. 
> 
> Can you explain this behaviour? Is it maybe a mutt bug?
> Thanks in advance for any help.

As Sander pointed out, my previous reply missed the mark a bit...

Looking a little closer (still without the benefit of a morning sugar
solution), I think that your settings could be the problem.  I've been
using the gpg.rc that comes with mutt for a while now (surely before
1.5.13).  You may want to try sourcing that to see it if helps.

The relevant things that I believe are different from your config
above are:

pgp_verify_command="gpg --status-fd=2 --no-verbose --quiet --batch --output - 
--verify %s %f"
pgp_good_sign="^\[GNUPG:\] GOODSIG"

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
======================================================================
Now, now my good man, this is no time for making enemies.
    -- Voltaire, on his deathbed in response to a priest asking that
    he renounce Satan.

Attachment: pgpoTgJzDA57Y.pgp
Description: PGP signature