[Tickets #12991] Fetching PGP public keys from keyservers is broken by default config

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12991
------------------------------------------------------------------------------
  Ticket             | 12991
  Created By         | mmarx at netdmon.de
  Summary            | Fetching PGP public keys from keyservers is broken by
                     | default config
  Queue              | Horde Framework Packages
  Version            | FRAMEWORK_5_1
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


mmarx at netdmon.de (2014-02-23 22:33) wrote:

Hi,

I just upgraded my Horde installation from 5.0.5 to 5.1.5.

Afterwards I noticed that IMP could no longer verify the PGP signature  
for all mails which have a PGP signature attached but where the sender  
is not in my addressbook. It complains with the message "Could not  
retrieve public key for ...."
For user, which are in my address book and have a PGP public key  
attached, the verification is still working.

After looking into the PGP keyserver unit test, see output below, I  
could fix the problem by adding "http://" to the config setting in  
horde/config.php:
$conf['gnupg']['keyserver'] = array('pgp.mit.edu');
e.g.:
$conf['gnupg']['keyserver'] = array('http://pgp.mit.edu');

Which results again in correct verified PGP signatures in IMP "gpg:  
Good signature from ..."

Since you cannot change the list of available keyservers in the "GnuPG  
Settings" tab of the Horde configuration I guess something is broken,  
either the default entries or the method of fetching keys from the  
keyservers.

###### Output of keyserver unit test
phpunit Horde_Crypt_PgpKeyserverTest PgpKeyserverTest.php
PHPUnit 3.7.20 by Sebastian Bergmann.

Configuration read from  
/usr/share/php/tests/Horde_Crypt/Horde/Crypt/phpunit.xml

EE

Time: 14 ms, Memory: 5.75Mb

There were 2 errors:

1) Horde_Crypt_PgpKeyserverTest::testKeyserverRetrieve
Horde_Crypt_Exception: Problem with  
pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x4DE5B969:  
fopen(pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x4DE5B969):  
failed to open stream: No such file or directory

/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:92
/usr/share/php/Horde/Http/Client.php:181
/usr/share/php/Horde/Http/Client.php:93
/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:90
/usr/share/php/tests/Horde_Crypt/Horde/Crypt/PgpKeyserverTest.php:37

Caused by
Horde_Http_Exception: Problem with  
pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x4DE5B969:  
fopen(pool.sks-keyservers.net:11371/pks/lookup?op=get&search=0x4DE5B969):  
failed to open stream: No such file or directory

/usr/share/php/Horde/Http/Request/Fopen.php:117
/usr/share/php/Horde/Http/Client.php:181
/usr/share/php/Horde/Http/Client.php:93
/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:90
/usr/share/php/tests/Horde_Crypt/Horde/Crypt/PgpKeyserverTest.php:37

2) Horde_Crypt_PgpKeyserverTest::testKeyserverRetrieveByEmail
Horde_Crypt_Exception: Problem with  
pool.sks-keyservers.net:11371/pks/lookup?op=index&options=mr&search=jan%40horde.org: fopen(pool.sks-keyservers.net:11371/pks/lookup?op=index&options=mr&search=jan%40horde.org): failed to open stream: No such file or  
directory

/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:163
/usr/share/php/Horde/Http/Client.php:181
/usr/share/php/Horde/Http/Client.php:93
/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:161
/usr/share/php/tests/Horde_Crypt/Horde/Crypt/PgpKeyserverTest.php:44

Caused by
Horde_Http_Exception: Problem with  
pool.sks-keyservers.net:11371/pks/lookup?op=index&options=mr&search=jan%40horde.org: fopen(pool.sks-keyservers.net:11371/pks/lookup?op=index&options=mr&search=jan%40horde.org): failed to open stream: No such file or  
directory

/usr/share/php/Horde/Http/Request/Fopen.php:117
/usr/share/php/Horde/Http/Client.php:181
/usr/share/php/Horde/Http/Client.php:93
/usr/share/php/Horde/Crypt/Pgp/Keyserver.php:161
/usr/share/php/tests/Horde_Crypt/Horde/Crypt/PgpKeyserverTest.php:44

FAILURES!
Tests: 2, Assertions: 0, Errors: 2.
##################

Kind Regards

Matthias Marx