• Re: GPG Test Sign

    From Wilfred van Velzen@2:280/464 to August Abolins on Wed Jun 17 15:52:10 2020
    Hi August,

    On 2020-06-17 09:27:00, you wrote to me:

    But what do you get with Tommi's signed reply. The result is strange:


    H:\DOWNLOADS\OpenXP\FILES>gpg --verify tk.msg
    gpg: NOTE: you should run 'diskperf -y' to enable the disk statistics
    gpg: Signature made 06/17/20 01:23:19 Eastern Daylight Time
    gpg: using RSA key E3735F29A0E5E20B1E47448C513962F44B8A1677 gpg: Can't check signature: No public key

    It seems you don't have the key used that signed that message...

    wilfred@wilnux5:~> gpg --verify tommi.msg
    gpg: Signature made Wed 17 Jun 2020 07:23:19 AM CEST using RSA key ID 4B8A1677 gpg: checking the trustdb
    gpg: public key FBBB8AB1 is 58138 seconds newer than the signature
    gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
    gpg: depth: 0 valid: 6 signed: 4 trust: 0-, 0q, 0n, 0m, 0f, 6u
    gpg: depth: 1 valid: 4 signed: 0 trust: 2-, 0q, 0n, 1m, 1f, 0u
    gpg: next trustdb check due at 2021-11-12
    gpg: Good signature from "Tommi Koivula <tommi@rbb.fidonet.fi>" [unknown]
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: E373 5F29 A0E5 E20B 1E47 448C 5139 62F4 4B8A 1677


    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From Wilfred van Velzen@2:280/464 to August Abolins on Wed Jun 17 16:24:20 2020
    Hi August,

    On 2020-06-17 10:18:00, you wrote to me:

    gpg: Signature made Wed 17 Jun 2020 07:23:19 AM CEST

    gpg: Signature made 06/17/20 01:23:19 Eastern Daylight Time

    It is VERY interesting that the sig includes a time-stamp.

    That seems to be expected to me. Nice though that gpg translates it to the local time of the user...

    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From Tommi Koivula@2:221/1 to Wilfred van Velzen on Wed Jun 17 18:19:20 2020
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    On 17.06.2020 15:52, Wilfred van Velzen - August Abolins :

    gpg: Signature made 06/17/20 01:23:19 Eastern Daylight Time
    gpg: using RSA key E3735F29A0E5E20B1E47448C513962F44B8A1677
    gpg: Can't check signature: No public key

    It seems you don't have the key used that signed that message...

    It seems that I don't have that key either. I wrote that message with my work computer using Thunderbird/Soupgate. Right now I cannot say where the hell that key came from. :D

    'Tommi
    -----BEGIN PGP SIGNATURE-----
    Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

    iQEzBAEBCAAdFiEEQTJnraOsQBoYwCPS0ikymSpvgioFAl7qNHgACgkQ0ikymSpv girYxwf+NMi4ZeVAZriF209s2BntzsXjAw8ade7cobw5W8WMY4tKCbJ6fhrnC+0T W49MwARunnM/KsfpkdRB1V8la3Xk36pLi60CSuJkHFt8f2y39kQ8h+uvcd2RrVWQ vM04TSD9Tp/U1VhIV/vKLhcwMHfut49e1gU20OV7TQBGiRSJImenvBOGq4sYtbC6 yJsByFJwc45nq0Z6H0nv24AYRyidhqB5RojpR8efNmbuij/Ds66A21Rolct9gIcz fJ7hXahRude11I0UwFs0mvqCOsmMIijtAdr1qkzAsbPCnQWiotSy2hnMXgmgCE4c z+oBsiwsENz7QYIJsMIxw/Y7PGKkeg==
    =ArhL
    -----END PGP SIGNATURE-----

    --- Mozilla/5.0 (Windows NT 6.1; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.9.0
    * Origin: - rbb.fidonet.fi - Lake Ylo - Finland - (2:221/1)
  • From Sean Rima@2:263/1 to Tommi Koivula on Wed Jun 17 16:50:20 2020

    Hello Tommi!

    17 Jun 20 08:23, you wrote to me:

    On 16.6.2020 22.30, Sean Rima wrote:

    Hello everybody!

    Testing GPG Signing

    Sean

    Works!

    'Tommi

    I need to find a way to get gpg to verify the signature as popup in GoldED

    Sean


    --- GoldED+/LNX 1.1.5-b20180707
    * Origin: A Destination in the Sun (2:263/1@FidoNet)
  • From August Abolins@2:221/360 to Tommi Koivula on Wed Jun 17 19:17:10 2020
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    On 17/06/2020 11:19 a.m., Tommi Koivula : Wilfred van Velzen wrote:

    gpg: Signature made 06/17/20 01:23:19 Eastern Daylight Time AA> gpg:
    using RSA key E3735F29A0E5E20B1E47448C513962F44B8A1677 AA> gpg: Can't
    check signature: No public key

    It seems you don't have the key used that signed that message...

    It seems that I don't have that key either. I wrote that message with my
    work computer using Thunderbird/Soupgate. Right now I cannot say where the hell that key came from. :D

    It seems.. You were up to something on 4/25/19, when it was created. LOL

    Or.. it seems we have an imposter?






    -----BEGIN PGP SIGNATURE-----
    Comment: A book fell on my head. I only have my shelf to blame. :(

    iQEzBAEBCAAdFiEE0OsqKVIE8xZ+slA87w6JZVeJWJsFAl7qQfEACgkQ7w6JZVeJ WJtd+Af/cTof6YSBPf8BMVe1vpsHa+Nl3jCQUZ1GqPEY8tUf2098LeLmk0+WtK6U OooA8uBkm4pQEoXdvGSNDg4P11uKnbyXeHxdYroFriRnG9SXNTmPEPNZ2J4f+vU6 y0cvVFnSQYfXZXj9jGSrQ1s5HHL/aLapZUHsyZrhC5j6otaKdg/ozUgOzecT1OhM qadr/zPCQXYLr4U2PLHVCMbfqP+mZ/DKPt6sspUJLg+ahEJXS4gOJWZoRlJhuctX Qi/0zT5IsgFoyLB1mD7i+ZT+ZCWV4MFGhSRtW3NHmAovsR6RAygdtQQjdPHc1/Vk xFuH5wAo5grbAEDQ9JU7sTWNoplRgw==
    =k91G
    -----END PGP SIGNATURE-----

    --- TB(Stealth)/Win7
    * Origin: nntp://rbb.fidonet.fi - Lake Ylo - Finland (2:221/360.0)
  • From Wilfred van Velzen@2:280/464 to Tommi Koivula on Wed Jun 17 18:38:40 2020
    Hi Tommi,

    On 2020-06-17 18:19:20, you wrote to me:

    gpg: Signature made 06/17/20 01:23:19 Eastern Daylight Time
    gpg: using RSA key
    E3735F29A0E5E20B1E47448C513962F44B8A1677
    gpg: Can't check signature: No public key

    It seems you don't have the key used that signed that message...

    It seems that I don't have that key either. I wrote that message with my work computer using Thunderbird/Soupgate. Right now I cannot say where the hell that key came from. :D

    Than it must be on your work computer.

    I have it, at least the public part... ;)

    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)
  • From Richard Menedetter@2:310/31 to Sean Rima on Wed Jun 17 18:54:54 2020
    Hi Sean!

    17 Jun 2020 16:50, from Sean Rima -> Tommi Koivula:

    I need to find a way to get gpg to verify the signature as popup in
    GoldED

    My GPG key is on a partition to which I can't remember the passowrd ;))

    But try this in golded:
    EXTERNOPTIONS -pauseonerror -nokeepctrl -wipe

    EXTERNUTIL 1 gpg +force -sa @tmpfile -u "@oname" -o @file ;sign
    EXTERNUTIL 2 gpg +force -ea @tmpfile "@dname" -u "@oname" -o @file ;encrypt
    EXTERNUTIL 3 gpg +force -eas @tmpfile "@dname" -u "@oname" -o @file ;enc&si
    EXTERNUTIL 4 -pause gpg +force @tmpfile -o @file -u "@dname" ;decrypt
    EXTERNUTIL 5 -noreload gpg +force -ka @file -u "@dname" ;add key
    EXTERNUTIL 6 c:\fido\golded\mykey.bat @file ;add mykey

    EDITSAVEUTIL 1 "S PGP Sign the msg"
    EDITSAVEUTIL 2 "E PGP Encrypt the msg"
    EDITSAVEUTIL 3 "Y PGP EncrYpt & Sign the msg"
    EDITSAVEUTIL 6 "M add My PGP key"

    // Add these key definitions in GOLDKEYS.CFG:
    // F12 ExternUtil04 ; Press F12 to decrypt the current message.
    // #F12 ExternUtil05 ; Press Shift-F12 to add a key to your keyring.

    CU, Ricsi

    ... Teamwork is essential - it allows you to blame someone else.
    --- GoldED+/LNX
    * Origin: Heisenberg may have been here. (2:310/31)
  • From Tommi Koivula@2:221/1.11 to All on Wed Jun 17 19:57:34 2020
    It seems that I don't have that key either. I wrote that message with my work computer using Thunderbird/Soupgate. Right now I cannot say where the
    hell that key came from. :D

    Than it must be on your work computer.

    Found it. Revoked it. I think it was not uploaded to the keyserver.

    I have it, at least the public part... ;)

    That's all what you should have... ;)

    'Tommi

    ---
    * Origin: rbb soupgate, the fidonet nntp junction (2:221/1.11)
  • From Wilfred van Velzen@2:280/464 to Tommi Koivula on Wed Jun 17 21:36:38 2020
    Hi Tommi,

    On 2020-06-17 19:57:34, you wrote to All:

    Than it must be on your work computer.

    Found it. Revoked it. I think it was not uploaded to the keyserver.

    Not yet:

    # gpg --recv-keys E3735F29A0E5E20B1E47448C513962F44B8A1677
    gpg: requesting key 4B8A1677 from hkp server eu.pool.sks-keyservers.net
    gpg: key 4B8A1677: "Tommi Koivula <tommi@rbb.fidonet.fi>" not changed
    gpg: Total number processed: 1
    gpg: unchanged: 1

    I have it, at least the public part... ;)

    That's all what you should have... ;)

    And can have if you did it right! ;-)

    Bye, Wilfred.

    --- FMail-lnx64 2.1.0.18-B20170815
    * Origin: FMail development HQ (2:280/464)