Skip Menu |

This queue is for tickets about the Mail-GnuPG CPAN distribution.

Report information
The Basics
Id: 4388
Status: resolved
Priority: 0/
Queue: Mail-GnuPG

People
Owner: Nobody in particular
Requestors: cm [...] coretec.at
Cc:
AdminCc:

Bug Information
Severity: Normal
Broken in: (no value)
Fixed in: (no value)



Date: Thu, 13 Nov 2003 20:45:31 +0100
From: christian mock <cm [...] coretec.at>
To: bug-Mail-GnuPG [...] rt.cpan.org
Subject: bad signatures due to MIME modules changing data
hello, while toying around with Mail::GnuPG, I found a problem that most probably lies somewhere in the MIME modules. Take a message, convert the line endings to CRLF as the RFC says, encode it as quoted/printable, but don't encode the CRs. Sign it (e.g. using the sylpheed mail client). The MIME modules will take the message, apparently convert it to some internal representation, and when ENTITY->as_string is called, will spit out the message with the CRs as "=0D"; the message is changed, signature verification failed. Have you got any ideas how to solve this? It has bitten me already WRT to S/MIME... cm. -- Christian Mock Wiedner Hauptstr. 15 Senior Security Engineer 1040 Wien CoreTEC IT Security Solutions GmbH +43-1-5037273
Date: Thu, 13 Nov 2003 19:23:35 -0800
From: Robert Spier <rspier [...] pobox.com>
To: "christian mock via RT" <bug-Mail-GnuPG [...] rt.cpan.org>
CC: "AdminCc of cpan Ticket #4388": ;
Subject: Re: [cpan #4388] bad signatures due to MIME modules changing data
RT-Send-Cc:
Hi Christian, Sadly, I don't have a good answer for you. This is a known issue, and I haven't had much time to look into it. I think there might be a MIME::something switch to turn off entity decoding, although I think I'm confusing with some HTML:: module. I know that there is some talk about a new MIME parsing suite, but I think it's still in the wings. You can also look at http://rt.cpan.org/Ticket/Display.html?id=2718 which has a patch for MIME::Parser to not parse things, but I don't believe it's been accepted into the MIME::Parser distribution. -R
The patch of ticket 2718 has been accepted into MIME-Tools, so I'm closing this bug. See also ticket 46168.