Re: Error when verifying tags signed using 1.7.3.1

From: Pat Thoyts <patthoyts@users.sourceforge.net>
Date: Oct 5, 2010, 09:41 UTC
Message-ID: <87aamtq8mw.fsf@fox.patthoyts.tk>
In-Reply-To: <201010041959.48336.ComputerDruid@gmail.com>

Show 21 quoted lines

>On Monday 04 October 2010 19:04:51 Stephan Hugel wrote: 
>> Daniel,
>> Those are the exact steps I'm using.
>> 
>> When I run tag -v on existing tags, I don't see the
>> 
>> -----BEGIN PGP MESSAGE-----
>> Version: GnuPG v1.4.9 (Darwin)
>> 
>> iD8DBQBMqlpo8Y2TgZsQ1pARAmBQAJ9NV0IX7jlzeB8ogddlutFKAjyWJwCfSI5A
>> yZeXw/EddYrfdad/VvOrL1o=
>> =/0PJ
>> -----END PGP MESSAGE——
>> 
>> block. It's only present on tags created using the current version.
>> I've also just upgraded to GnuPG 1.4.10, but the result is the same.
>> I'm not sure how else I can determine where the problem arises; I'm
>> using the git and GnuPG versions for OS X built by homebrew, and GnuPG
>> is happy to use the same key for en/decryption and signing. I've also
>> verified that none of the subkeys are expired, and that the trust db
>> is OK.

When I try this using 1.7.3.1 the tag signature header says "PGP SIGNATURE" and not "PGP MESSAGE". I wonder if you just have some odd gpg settings.

C:\src\git-gui>git version git version 1.7.2.3.msysgit.0

C:\src\git-gui>git tag -s -a -m "test" test1

You need a passphrase to unlock the secret key for user: "Pat Thoyts <patthoyts@googlemail.com>" 1024-bit RSA key, ID F084E489, created 1995-04-11

C:\src\git-gui>git cat-file tag test1 object 00e9de72c8f9b7c048bb56a59be9567d69dc1e01 type commit tag test1 tagger Pat Thoyts <patthoyts@users.sourceforge.net> 1286268190 +0100

test
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iQCVAwUATKrlHmB90JXwhOSJAQJx2QP+OVRpcPyGgi2HF3OyOQ7immsMHpXb4ySx nhvt7iWEfMlzm/8/+LlW6NnYkcTkAW3g3pgECXTAzXgUqhj9ectrprLg5XFT717O SHJ4qyai08stlC86kHVLyYhdi2C96rgtN9+63CQUl4R7Ofv/l+IRE22IYES5942Z LZgpbtPyp7w= =Oydf -----END PGP SIGNATURE-----

C:\src\git-gui>git verify-tag test1 gpg: Signature made 10/05/10 09:43:10 using RSA key ID F084E489 gpg: Good signature from "Pat Thoyts <patthoyts@googlemail.com>" gpg: aka "Pat Thoyts <patthoyts@users.sourceforge.net>"

-- 
Pat Thoyts                            http://www.patthoyts.tk/
PGP fingerprint 2C 6E 98 07 2C 59 C8 97  10 CE 11 E6 04 E0 B9 DD