[Resolved] GnuPG problems from webmail

[Gilboooo]

I am using GnuPG from the webmail. I connect to the webmail using a HTTPS connection, and I have a key pair there.

One of my friends that I was exchanging emails from can no longer send me any GnuPG protected emails.

Previously, it worked just fine. Now whatever the message he sends me I get this error :

This message has been encrypted with PGP.

Could not decrypt PGP data.

I can still verify the GnuPG emails but I cannot decipher.

So I have created a new keypair and gave him the public key. We checked directly that the fingerprint was OK. When he sends me an email, I still get the same error message.

I can verify his messages but not decipher them.

If I send myself an email (enciphered + signed) it is decrypted correctly.

He is using Twofish as defautl cipher on his key. We have tried with AES 256 bits, but the problem is the same.

He has not modified anything on his side. His key is the same, no change. He is using PGP Desktop 9.0.2

What is happening ?

Is there a possibility of seeing in the near future an upgrade of the GnuPG installed and used from the Webmail ? It's not a recent version there :/

I don't know what's happening. I can verify so I got the good public key.

But as soon he sends me an email, I cannot decipher while it worked fine previously.

I have tried with and without checking the option "Check body for PGP content" but there is no change.

[Jeff G.]

Please contact JT about this matter via support<at>spamcop.net. Thanks!

[Wazoo]

I am using GnuPG from the webmail. I connect to the webmail using a HTTPS connection, and I have a key pair there.

One of my friends that I was exchanging emails from can no longer send me any GnuPG protected emails.

So I have created a new keypair and gave him the public key. We checked directly that the fingerprint was OK. When he sends me an email, I still get the same error message.

32389[/snapback]

Test e-mail sent using the key dated 9/3/05.

PGP 7.03 used from this end.

[Gilboooo]

Test e-mail sent using the key dated 9/3/05.

PGP 7.03 used from this end.

32395[/snapback]

Works fine. So my friend is probably sending mangled data to me

But when he signs it works

I have created a new key today because we thought it was the key that was bad.

[Wazoo]

Works fine. So my friend is probably sending mangled data to me

But when he signs it works

I have created a new key today because we thought it was the key that was bad.

32396[/snapback]

Response was received. Typical "problem" with the use of OE here, as it arrived looking like one of the infmurs "blank e-mails" ... Anyway, the critical data is;

*** PGP Signature Status: good

*** END PGP VERIFIED MESSAGE ***

So yes, you and I have proven that things are working as they should ... There does not appear to be an issue with the SpamCop e-mail account ... marking as Resolved. Thanks for the follow-up/feedback.

[Gilboooo]

Response was received.  Typical "problem" with the use of OE here, as it arrived looking like one of the infmurs "blank e-mails" ... Anyway, the critical data is;

*** PGP Signature Status: good

*** END PGP VERIFIED MESSAGE ***

So yes, you and I have proven that things are working as they should ...  There does not appear to be an issue with the SpamCop e-mail account ... marking as Resolved.  Thanks for the follow-up/feedback.

32402[/snapback]

Thanks for your help

[Gilboooo]

We have found the source of the problem.

It's the comment line that gets truncated by the webmail.

We have been trying various versions of PGP and the problem

is not because of his PGP version or anything.

When he sends me a message, it appears as such in the

Spamcop webmail :

-----BEGIN PGP MESSAGE-----

Version: PGP Desktop 9.0.2 (Build 2424) - not licensed for commercial use: www.pgp.com

qANQR1DBwE4DhmqKQ+OnUlIQBACyiiqiYEaqGYtarKoXEhmLJI0ACjiQBxHJwJDG

bV62fQ49QukLQ9iS0V6QvvyIUSgkVoJ8GrRyMBUSEicuzJXLV2GC940UutXSz2Xz

The problem is the webmail inserts a carriage return after the "use:"

and this makes GnuPG and PGP complain. Spamcop's message just says

it cannot decrypt. But if the message is saved to disk and GnuPG used

over it, it gets interesting :

gpg: invalid armor header: www.pgp.com

It thinks this line is an header. It means it's in a beginning of line,

where it should not be. By removing the carriage return at the line

before, PGP and GnuPG are now able to decrypt properly the enciphered

message.

Since my friend is using a free version of PGP, he cannot remove

that comment line. And I do think, too, that PGP armored content

should be formated to 71 or 72 characters wide so PGP is in fault

here, as too long lines do get truncated often.

So is there a way for me to ask Spamcop's webmail NOT to truncated

lines in PGP received content so I can decrypt from the webmail,

rather than having to save to the disk the PGP message, remove

the carriage return and decrypt it locally. I'm at work, using a Windows 2k

machine which has no swap encryption as my NetBSD at home...

Glad to have found why it fails. Now I need a fix

[Wazoo]

On the other hand, send your friend to Tom McCune's FAQ at http://www.mccune.cc/PGPpage2.htm ... as "all" data wasn't provided on the friend's configuration and applications involved, I'll just say that there is probably an answer in this FAQ .... somewhere between the editing of some data to setting some line-wrap lengths ....

[Gilboooo]

My friend has turned off the comment line in his PGP.

Now it works as fine as previously.