• Re: Hash: SHA1 = problem?

    From Wilfred van Velzen@2:280/464 to August Abolins on Sun Jan 5 13:01:06 2020
    Hi August,

    On 2020-01-05 02:14:47, you wrote to me:

    The message I am replying to in this message gave me this report:

    Error - signature verification failed

    gpg command line and output:
    C:\Program Files\gnupg\bin\gpg.exe
    gpg: Signature made 01/04/20 12:47:07 Eastern Standard Time
    gpg: using RSA key 3BB37DA84A97932B
    gpg: BAD signature from "Wilfred van Velzen <wvvelzen@gmail.com>" [unknown]

    It's the one you wrote to Tommi with:

    So you don't have the key I used there?


    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From August Abolins@2:221/360 to Wilfred van Velzen on Sun Jan 5 17:29:37 2020
    On 1/5/2020 7:01 AM, between "Wilfred van Velzen : August Abolins":

    Error - signature verification failed

    gpg command line and output: C: \Program
    Files\gnupg\bin\gpg.exe gpg: Signature made 01/04/20
    12:47:07 Eastern Standard Time gpg: using RSA key
    3BB37DA84A97932B gpg: BAD signature from "Wilfred van
    Velzen <wvvelzen@gmail.com>" [unknown]

    It's the one you wrote to Tommi with:

    So you don't have the key I used there?


    Hello Wilfred,

    Send me the fingerprint of the keys I should be using, and I'll grab
    them from a server.

    BTW, is it this one:

    keys.openpgp.org

    https://keys.openpgp.org/vks/v1/by-fingerprint/D50ECD4F514B75DC0A064F893BB37DA84A97932B



    ../|ug

    --- Thunderbird 2.0.0.24 (Windows/20100228)
    * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)
  • From Wilfred van Velzen@2:280/464 to August Abolins on Sun Jan 5 17:08:40 2020
    Hi August,

    On 2020-01-05 17:29:37, you wrote to me:

    gpg command line and output: C: \Program
    Files\gnupg\bin\gpg.exe gpg: Signature made 01/04/20
    12:47:07 Eastern Standard Time gpg: using RSA key
    3BB37DA84A97932B gpg: BAD signature from "Wilfred van
    Velzen <wvvelzen@gmail.com>" [unknown]

    It's the one you wrote to Tommi with:

    So you don't have the key I used there?


    Hello Wilfred,

    Send me the fingerprint of the keys I should be using, and I'll grab
    them from a server.

    BTW, is it this one:

    keys.openpgp.org

    https://keys.openpgp.org/vks/v1/by-fingerprint/D50ECD4F514B75DC0A064F893BB3
    7DA84A97932B

    Yes that looks like it. The ID that's quoted above is enough to search for it! ;)

    wilfred@wilnux5:~> gpg --fingerprint -k 4A97932B
    pub 4096R/4A97932B 2017-10-25 [expires: 2023-01-01]
    Key fingerprint = D50E CD4F 514B 75DC 0A06 4F89 3BB3 7DA8 4A97 932B
    uid [ultimate] Wilfred van Velzen <wvvelzen@gmail.com>
    uid [ultimate] Wilfred van Velzen <wilfred@vvlzn.nl>
    uid [ultimate] [jpeg image of size 5943]
    sub 4096R/2D3482F3 2017-10-25


    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From August Abolins@2:221/360 to Wilfred van Velzen on Sun Jan 5 20:28:30 2020
    On 05/01/2020 11:08 a.m., Wilfred van Velzen : August Abolins wrote:

    gpg command line and output: C: \Program
    Files\gnupg\bin\gpg.exe gpg: Signature made 01/04/20 12:47:07
    Eastern Standard Time gpg: using RSA key 3BB37DA84A97932B
    gpg: BAD signature from "Wilfred van Velzen
    <wvvelzen@gmail.com>" [unknown]

    BTW, is it this one:

    keys.openpgp.org

    https://keys.openpgp.org/vks/v1/by-fingerprint/D50ECD4F514B75DC0A064F893BB3
    7DA84A97932B

    Yes that looks like it. The ID that's quoted above is enough to
    search for it!

    I found out that is not always the case. It seems to depend on the
    server. For example, I used your RSA key 3BB37DA84A97932B as above, but
    the server at keys.openpgp.org reported that they do not support
    abbreviated keys.

    wilfred@wilnux5: ~> gpg -- fingerprint - k 4A97932B pub
    4096R/4A97932B 2017-10-25 [expires: 2023-01-01] Key
    fingerprint = D50E CD4F 514B 75DC 0A06 4F89 3BB3 7DA8 4A97 932B
    uid [ultimate] Wilfred van Velzen <wvvelzen@gmail.com> uid
    [ultimate] Wilfred van Velzen <wilfred@vvlzn.nl> uid [ultimate]
    [jpeg image of size 5943] sub 4096R/2D3482F3 2017-10-25

    What is interesting, I just fetched your updated keys from the *same*
    server that I used on my lessor TB 2.0.0.24 pc, but this time on my TB
    60 there was no photo offered or recorded. :(

    I wonder why the difference.

    --- Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
    * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)
  • From Wilfred van Velzen@2:280/464 to August Abolins on Sun Jan 5 20:25:45 2020
    Hi August,

    On 2020-01-05 20:28:30, you wrote to me:

    https://keys.openpgp.org/vks/v1/by-fingerprint/D50ECD4F514B75DC0A064F8 93BB37DA84A97932B

    Yes that looks like it. The ID that's quoted above is enough to
    search for it!

    I found out that is not always the case. It seems to depend on the
    server. For example, I used your RSA key 3BB37DA84A97932B as above, but the server at keys.openpgp.org reported that they do not support abbreviated keys.

    Strange. Why wouldn't they support it? What would be the benefit of that?

    wilfred@wilnux5: ~> gpg -- fingerprint - k 4A97932B pub
    4096R/4A97932B 2017-10-25 [expires: 2023-01-01] Key
    fingerprint = D50E CD4F 514B 75DC 0A06 4F89 3BB3 7DA8 4A97 932B
    uid [ultimate] Wilfred van Velzen <wvvelzen@gmail.com> uid
    [ultimate] Wilfred van Velzen <wilfred@vvlzn.nl> uid [ultimate]
    [jpeg image of size 5943] sub 4096R/2D3482F3 2017-10-25

    What is interesting, I just fetched your updated keys from the *same* server that I used on my lessor TB 2.0.0.24 pc, but this time on my TB
    60 there was no photo offered or recorded. :(

    I wonder why the difference.

    When I export the key to the server, I have the option not to export attributes
    (photo ID). Maybe it's optional on importing to, but the option isn't given to you?

    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From August Abolins@2:221/360 to Wilfred van Velzen on Sun Jan 5 22:12:20 2020
    On 05/01/2020 2:25 p.m., Wilfred van Velzen : August Abolins wrote:

    I found out that is not always the case. It seems to depend on
    the server. For example, I used your RSA key 3BB37DA84A97932B
    as above, but the server at keys.openpgp.org reported that they
    do not support abbreviated keys.

    Strange. Why wouldn't they support it? What would be the
    benefit of that?

    Clarification: When I use the keys.openpgp.org website directly, it
    reports that SEARCHES do not support short IDs.

    That probably explains why using that server in Enigmail searching with
    the short ID fails also.


    When I export the key to the server, I have the option not to
    export attributes (photo ID). Maybe it's optional on importing
    to, but the option isn't given to you?

    I dunno. The default config in the Enigmail version for TB 2.0.0.24
    imported the image, no problem. If I have to enable it in the Enigmail
    version for TB 60, I haven't looked. I just assumed it ought to work
    like the other Enigmail.

    --- Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1
    * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)