Re: Error when verifying tags signed using 1.7.3.1
From: Pat Thoyts <hidden>
Date: 2016-06-15 22:49:42
On Monday 04 October 2010 19:04:51 Stephan Hugel wrote:quoted
Daniel, Those are the exact steps I'm using. When I run tag -v on existing tags, I don't see the -----BEGIN PGP MESSAGE----- Version: GnuPG v1.4.9 (Darwin) iD8DBQBMqlpo8Y2TgZsQ1pARAmBQAJ9NV0IX7jlzeB8ogddlutFKAjyWJwCfSI5A yZeXw/EddYrfdad/VvOrL1o= =/0PJ -----END PGP MESSAGE—— block. It's only present on tags created using the current version. I've also just upgraded to GnuPG 1.4.10, but the result is the same. I'm not sure how else I can determine where the problem arises; I'm using the git and GnuPG versions for OS X built by homebrew, and GnuPG is happy to use the same key for en/decryption and signing. I've also verified that none of the subkeys are expired, and that the trust db is OK.
When I try this using 1.7.3.1 the tag signature header says "PGP SIGNATURE" and not "PGP MESSAGE". I wonder if you just have some odd gpg settings. C:\src\git-gui>git version git version 1.7.2.3.msysgit.0 C:\src\git-gui>git tag -s -a -m "test" test1 You need a passphrase to unlock the secret key for user: "Pat Thoyts [off-list ref]" 1024-bit RSA key, ID F084E489, created 1995-04-11 C:\src\git-gui>git cat-file tag test1 object 00e9de72c8f9b7c048bb56a59be9567d69dc1e01 type commit tag test1 tagger Pat Thoyts [off-list ref] 1286268190 +0100 test -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) iQCVAwUATKrlHmB90JXwhOSJAQJx2QP+OVRpcPyGgi2HF3OyOQ7immsMHpXb4ySx nhvt7iWEfMlzm/8/+LlW6NnYkcTkAW3g3pgECXTAzXgUqhj9ectrprLg5XFT717O SHJ4qyai08stlC86kHVLyYhdi2C96rgtN9+63CQUl4R7Ofv/l+IRE22IYES5942Z LZgpbtPyp7w= =Oydf -----END PGP SIGNATURE----- C:\src\git-gui>git verify-tag test1 gpg: Signature made 10/05/10 09:43:10 using RSA key ID F084E489 gpg: Good signature from "Pat Thoyts [off-list ref]" gpg: aka "Pat Thoyts [off-list ref]" -- Pat Thoyts http://www.patthoyts.tk/ PGP fingerprint 2C 6E 98 07 2C 59 C8 97 10 CE 11 E6 04 E0 B9 DD