
incorrect verification results for signatures using a public key which has been revoked
Reported by steve | March 9th, 2020 @ 06:36 PM | in 2.0 (closed)
Reproduce
- sign some text with a new test key
- revoke test key
- verifiy signed text
Currently
Verification failed
Unexpected GPG signature status 94
Expected
Verification Results should indeed verify the signature as long as the public key required for that is available. The user should then be informed, that the public key has been revoked.
Suggested message:
EN
Verification successful
Good signature (Trust level):
"Name <email@domain.org>"
WARNING: This key has been revoked by its owner! This could mean that the signature is forged.
DE
Verifizierung erfolgreich
Gute signature (Trust level):
"Name <email@domain.org>"
WARNUNG: Dieser Schlüssel wurde von seinem Besitzer widerrufen! Das könnte bedeuten, dass die Signatur gefälscht ist.
This would align with gpg CLI output:
en
gpg: Signature made Mon Mar 9 17:46:21 2020 CET
gpg: using RSA key E489A0A82D03C67370116C8BD3BB5FB13F370C02
gpg: Good signature from "test key <test@this.key>" [ultimate]
gpg: WARNING: This key has been revoked by its owner!
gpg: This could mean that the signature is forged.
gpg: reason for revocation: No reason specified
de
gpg: Signatur vom Mo 9 Mär 17:46:21 2020 CET
gpg: mittels RSA-Schlüssel E489A0A82D03C67370116C8BD3BB5FB13F370C02
gpg: Korrekte Signatur von "test key <test@this.key>" [ultimativ]
gpg: WARNUNG: Dieser Schlüssel wurde von seinem Besitzer widerrufen!
gpg: Das könnte bedeuten, daß die Signatur gefälscht ist.
gpg: Grund für Widerruf: Kein Grund angegeben
Comments and changes to this ticket
-
-
Mento April 15th, 2020 @ 02:10 PM
- State changed from new to fixed
- Tag cleared.
- Assigned user set to Mento
- Milestone set to 2.0
-
steve May 6th, 2020 @ 03:23 PM
- State changed from fixed to verified
We now show the message:
Revoked signature name <email> Fingerprint
macOS 10.15.4
GPG Suite 2751n
verified -
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป