| Subject: | Module::Signature 0.54 backward compatibility issue |
Module::Signature updated (fixed) the way it handles text files with
CR code in it. That breaks SIGNATURE file verification created by
Module::Signature prior to 0.53.
It should fallback to the prior-0.53 way to calculate digest, if the
verification failed and the content includes CR inside.
Content-Type: multipart/signed; protocol="application/pgp-signature";
micalg=pgp-sha1; boundary="Apple-Mail-2-170974851"
Message-Id: <901AB4C7-162D-456D-954C-E9D37D288F85@audreyt.org>
Cc: "Dave Rolsky" <autarch@urth.org>, "Audrey Tang"
<autrijus@autrijus.org>
Content-Transfer-Encoding: 7bit
From: Audrey Tang <audreyt@audreyt.org>
Subject: Re: DateTime::Format::Mail and Module::Signature
Date: Wed, 14 Jun 2006 11:21:06 +0200
To: Tatsuhiko Miyagawa <miyagawa@gmail.com>
X-Pgp-Agent: GPGMail 1.1.2 (Tiger)
X-Mailer: Apple Mail (2.750)
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-2-170974851
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=BIG5; delsp=yes; format=flowed
=A6b 2006/6/14 =A4W=A4=C8 4:58 =AE=C9=A1ATatsuhiko Miyagawa
=BCg=A8=EC=A1G=
Show quoted text
> So it looks to me, the SIGNATURE file created with Module::Signature
> <=3D 0.53 (by Dave) can't be verfied using Module::Signature (0.54).
> Eek.
A thought is to verify it twice; once in old-verbatim (no CRLF =20
translation) mode and once with new-normalized mode.
Can you look at a patch to Module::Signature perhaps? Or submit a RT
=20=
ticket...
Audrey=
--Apple-Mail-2-170974851
content-type: application/pgp-signature; x-mac-type=70674453;
name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iD8DBQFEj9UCtLPdNzw1AaARAop1AKCh18P3ChxxkW8Izb2QnRsAnZitIwCeI/H7
OhUjHLF9LtGLKgRwMaGpQ0M=
=MxiY
-----END PGP SIGNATURE-----
--Apple-Mail-2-170974851--