Gilboooo Posted September 3, 2005 Posted September 3, 2005 I am using GnuPG from the webmail. I connect to the webmail using a HTTPS connection, and I have a key pair there. One of my friends that I was exchanging emails from can no longer send me any GnuPG protected emails. Previously, it worked just fine. Now whatever the message he sends me I get this error : This message has been encrypted with PGP. Could not decrypt PGP data. I can still verify the GnuPG emails but I cannot decipher. So I have created a new keypair and gave him the public key. We checked directly that the fingerprint was OK. When he sends me an email, I still get the same error message. I can verify his messages but not decipher them. If I send myself an email (enciphered + signed) it is decrypted correctly. He is using Twofish as defautl cipher on his key. We have tried with AES 256 bits, but the problem is the same. He has not modified anything on his side. His key is the same, no change. He is using PGP Desktop 9.0.2 What is happening ? Is there a possibility of seeing in the near future an upgrade of the GnuPG installed and used from the Webmail ? It's not a recent version there :/ I don't know what's happening. I can verify so I got the good public key. But as soon he sends me an email, I cannot decipher while it worked fine previously. I have tried with and without checking the option "Check body for PGP content" but there is no change.
Jeff G. Posted September 3, 2005 Posted September 3, 2005 Please contact JT about this matter via support<at>spamcop.net. Thanks!
Wazoo Posted September 3, 2005 Posted September 3, 2005 I am using GnuPG from the webmail. I connect to the webmail using a HTTPS connection, and I have a key pair there. One of my friends that I was exchanging emails from can no longer send me any GnuPG protected emails. So I have created a new keypair and gave him the public key. We checked directly that the fingerprint was OK. When he sends me an email, I still get the same error message. 32389[/snapback] Test e-mail sent using the key dated 9/3/05. PGP 7.03 used from this end.
Gilboooo Posted September 3, 2005 Author Posted September 3, 2005 Test e-mail sent using the key dated 9/3/05. PGP 7.03 used from this end. 32395[/snapback] Works fine. So my friend is probably sending mangled data to me But when he signs it works I have created a new key today because we thought it was the key that was bad.
Wazoo Posted September 3, 2005 Posted September 3, 2005 Works fine. So my friend is probably sending mangled data to me But when he signs it works I have created a new key today because we thought it was the key that was bad. 32396[/snapback] Response was received. Typical "problem" with the use of OE here, as it arrived looking like one of the infmurs "blank e-mails" ... Anyway, the critical data is; *** PGP Signature Status: good *** END PGP VERIFIED MESSAGE *** So yes, you and I have proven that things are working as they should ... There does not appear to be an issue with the SpamCop e-mail account ... marking as Resolved. Thanks for the follow-up/feedback.
Gilboooo Posted September 4, 2005 Author Posted September 4, 2005 Response was received. Typical "problem" with the use of OE here, as it arrived looking like one of the infmurs "blank e-mails" ... Anyway, the critical data is; *** PGP Signature Status: good *** END PGP VERIFIED MESSAGE *** So yes, you and I have proven that things are working as they should ... There does not appear to be an issue with the SpamCop e-mail account ... marking as Resolved. Thanks for the follow-up/feedback. 32402[/snapback] Thanks for your help
Gilboooo Posted September 11, 2005 Author Posted September 11, 2005 We have found the source of the problem. It's the comment line that gets truncated by the webmail. We have been trying various versions of PGP and the problem is not because of his PGP version or anything. When he sends me a message, it appears as such in the Spamcop webmail : -----BEGIN PGP MESSAGE----- Version: PGP Desktop 9.0.2 (Build 2424) - not licensed for commercial use: www.pgp.com qANQR1DBwE4DhmqKQ+OnUlIQBACyiiqiYEaqGYtarKoXEhmLJI0ACjiQBxHJwJDG bV62fQ49QukLQ9iS0V6QvvyIUSgkVoJ8GrRyMBUSEicuzJXLV2GC940UutXSz2Xz The problem is the webmail inserts a carriage return after the "use:" and this makes GnuPG and PGP complain. Spamcop's message just says it cannot decrypt. But if the message is saved to disk and GnuPG used over it, it gets interesting : gpg: invalid armor header: www.pgp.com It thinks this line is an header. It means it's in a beginning of line, where it should not be. By removing the carriage return at the line before, PGP and GnuPG are now able to decrypt properly the enciphered message. Since my friend is using a free version of PGP, he cannot remove that comment line. And I do think, too, that PGP armored content should be formated to 71 or 72 characters wide so PGP is in fault here, as too long lines do get truncated often. So is there a way for me to ask Spamcop's webmail NOT to truncated lines in PGP received content so I can decrypt from the webmail, rather than having to save to the disk the PGP message, remove the carriage return and decrypt it locally. I'm at work, using a Windows 2k machine which has no swap encryption as my NetBSD at home... Glad to have found why it fails. Now I need a fix
Wazoo Posted September 11, 2005 Posted September 11, 2005 On the other hand, send your friend to Tom McCune's FAQ at http://www.mccune.cc/PGPpage2.htm ... as "all" data wasn't provided on the friend's configuration and applications involved, I'll just say that there is probably an answer in this FAQ .... somewhere between the editing of some data to setting some line-wrap lengths ....
Gilboooo Posted September 11, 2005 Author Posted September 11, 2005 My friend has turned off the comment line in his PGP. Now it works as fine as previously.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.