#260 new
steve

incorrect verification results for signatures using a public key which has been revoked

Reported by steve | March 9th, 2020 @ 06:36 PM

Reproduce

  1. sign some text with a new test key
  2. revoke test key
  3. verifiy signed text

Currently

Verification failed
Unexpected GPG signature status 94

Expected

Verification Results should indeed verify the signature as long as the public key required for that is available. The user should then be informed, that the public key has been revoked.

Suggested message:
EN

Verification successful


Good signature (Trust level): "Name <email@domain.org>"


WARNING: This key has been revoked by its owner! This could mean that the signature is forged.

DE

Verifizierung erfolgreich


Gute signature (Trust level): "Name <email@domain.org>"


WARNUNG: Dieser Schlüssel wurde von seinem Besitzer widerrufen! Das könnte bedeuten, dass die Signatur gefälscht ist.

This would align with gpg CLI output:

en

gpg: Signature made Mon Mar  9 17:46:21 2020 CET
gpg:                using RSA key E489A0A82D03C67370116C8BD3BB5FB13F370C02
gpg: Good signature from "test key <test@this.key>" [ultimate]
gpg: WARNING: This key has been revoked by its owner!
gpg:          This could mean that the signature is forged.
gpg: reason for revocation: No reason specified

de

gpg: Signatur vom Mo  9 Mär 17:46:21 2020 CET
gpg:                mittels RSA-Schlüssel E489A0A82D03C67370116C8BD3BB5FB13F370C02
gpg: Korrekte Signatur von "test key <test@this.key>" [ultimativ]
gpg: WARNUNG: Dieser Schlüssel wurde von seinem Besitzer widerrufen!
gpg:          Das könnte bedeuten, daß die Signatur gefälscht ist.
gpg: Grund für Widerruf: Kein Grund angegeben

Comments and changes to this ticket

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Shared Ticket Bins

People watching this ticket

Tags

Pages