[Tickets #12763] Re: "BAD signature" message appears when verifying a PGP signed HTML message with attachment

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12763
------------------------------------------------------------------------------
  Ticket             | 12763
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | "BAD signature" message appears when verifying a PGP
                     | signed HTML message with attachment
  Queue              | IMP
  Version            | Git master
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             | Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2013-10-21 21:20) wrote:

There is some sort of fringe case going on here.  I was able to  
reproduce last night from my laptop.  But sending the EXACT same  
message from my desktop is not causing the issue.

The issue has to do with extra spaces being inserted into the base64  
output.  The bad signature message has the following:

VounL3tD6iFSE+oC5iyVcH2yOtYTvBGylG47MZPGPlPesEmpXZslBiEuQEA4Bp202IcU0Zmuq8cU

k6TBSVJwy549/b2xXpZenzpo8nMYJ0j0D/gltOr6Brs7FVY61MAB93OeoFdvFNN+yT8l+R+S5nH/

Can verify that the bad signature is exactly two bytes larger - this  
additional CRLF in the middle of the data.

However, I can't reproduce this anymore.

So almost certain this is a transient issue dealing with stream EOL  
processing, that is only tripped on some sort of edge case I have yet  
to find.