Open kaie opened 4 years ago
@rjhansen
@kaie Thanks for reporting, I'll take a look.
@kaie I was able to import this key to RNP with PERMISSIVE option enabled. It actually contains a bunch of illformed signatures, GnuPG reports those as well. Or is it something specific to that exact signature, so it must be imported?
This should be re-checked, and added (in a whole or partially) to the CI, as could contain interesting artifacts. There are following suspicious error messages to be checked:
[armored_src_read() /Users/nickolay/Ribose/rnp/src/librepgp/stream-armor.cpp:340] premature end of armored input
[parse_material() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1416] extra 2 bytes in signature packet
[parse() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1330] unknown signature version: 20
[parse_v4() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1271] wrong packet or hashed subpackets length
[parse_material() /Users/nickolay/Ribose/rnp/src/librepgp/stream-sig.cpp:1411] Unknown pk algorithm : 103
[rsa_verify_pkcs1() /Users/nickolay/Ribose/rnp/src/lib/crypto/rsa_ossl.cpp:440] RSA verification failure: error:04067072:rsa routines:rsa_ossl_public_decrypt:padding check failed
[rsa_verify_pkcs1() /Users/nickolay/Ribose/rnp/src/lib/crypto/rsa_ossl.cpp:440] RSA verification failure: error:04091077:rsa routines:int_rsa_verify:wrong signature length
[validate_sig() /Users/nickolay/Ribose/rnp/src/lib/pgp-key.cpp:1996] issuer fingerprint doesn't match signer's one
We were asked to support key 0x50BB6FFC9719DFD2BEBB04C69710B89BCA57AD7C - PGP Global Directory Verification Key.
Importing fails with the following error:
[parse_signature_material() rnp/src/librepgp/stream-packet.cpp:1747] extra 2 bytes in signature packet [process_pgp_key_signatures() rnp/src/librepgp/stream-key.cpp:656] failed to parse signature at 2473682
I'll upload a copy of the key which I found on a keyserver.