Need to support the PGP Global Directory Verification Key

[kaie]

We were asked to support key 0x50BB6FFC9719DFD2BEBB04C69710B89BCA57AD7C - PGP Global Directory Verification Key.

Importing fails with the following error:

[parse_signature_material() rnp/src/librepgp/stream-packet.cpp:1747] extra 2 bytes in signature packet [process_pgp_key_signatures() rnp/src/librepgp/stream-key.cpp:656] failed to parse signature at 2473682

I'll upload a copy of the key which I found on a keyserver.

[kaie]

50BB6FFC9719DFD2BEBB04C69710B89BCA57AD7C.txt

[kaie]

@rjhansen

[ni4]

@kaie Thanks for reporting, I'll take a look.

[ni4]

@kaie I was able to import this key to RNP with PERMISSIVE option enabled. It actually contains a bunch of illformed signatures, GnuPG reports those as well. Or is it something specific to that exact signature, so it must be imported?

[ni4]

This should be re-checked, and added (in a whole or partially) to the CI, as could contain interesting artifacts. There are following suspicious error messages to be checked:

• [armored_src_read() /Users/nickolay/Ribose/rnp/src/librepgp/stream-armor.cpp:340] premature end of armored input
• [parse_material() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1416] extra 2 bytes in signature packet
• [parse() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1330] unknown signature version: 20
• [parse_v4() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1271] wrong packet or hashed subpackets length
• [parse_material() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1411] Unknown pk algorithm : 103
• [rsa_verify_pkcs1() /Users/nickolay/Ribose/rnp/src/lib/crypto/rsa_ossl.cpp:440] RSA verification failure: error:04067072:rsa routines:rsa_ossl_public_decrypt:padding check failed
• [rsa_verify_pkcs1() /Users/nickolay/Ribose/rnp/src/lib/crypto/rsa_ossl.cpp:440] RSA verification failure: error:04091077:rsa routines:int_rsa_verify:wrong signature length
• [validate_sig() /Users/nickolay/Ribose/rnp/src/lib/pgp-key.cpp:1996] issuer fingerprint doesn't match signer's one