Re: Error when verifying tags signed using 1.7.3.1

From: Stephan Hugel <urschrei@gmail.com>
Date: Oct 4, 2010, 23:04 UTC
Message-ID: <AANLkTin1Ysn7Fp32Eoyjo3jjhHwVrc=hMuq+okgKNfmr@mail.gmail.com>
In-Reply-To: <201010041851.46838.ComputerDruid@gmail.com>

On 4 October 2010 23:51, Daniel Johnson <computerdruid@gmail.com> wrote:

Show 50 quoted lines

> On Monday 04 October 2010 18:13:21 Stephan Hugel wrote:
>> Hello, git list.
>> I seem to be unable to verify tags I create and sign using the git -s
>> command in 1.7.3.1
>> Existing tags (i.e. created with 1.7.2.x, using the same key and GnuPG
>> version) can be verified, but attempts to verify created tags result
>> in the following:
>>
>> object 791abd4848d86ea98071f35bbce4d4b274ef0788
>> type commit
>> tag v1.4
>> tagger name <name@host.com> 1286228562 +0100
>>
>> Better header detection and regex
>> -----BEGIN PGP MESSAGE-----
>> Version: GnuPG v1.4.9 (Darwin)
>>
>> iD8DBQBMqkph8Y2TgZsQ1pARAgxrAJ40ATxZw219CWI6FCaDAtbY8UHdoACePF6Q
>> PyNkf67w7AA8hkQqLAYGcyI=
>> =VLWl
>> -----END PGP MESSAGE-----
>> gpg: Signature made Mon  4 Oct 22:42:57 2010 IST using DSA key ID 9B10D690
>> gpg: BAD signature from "name <name@host.com>"
>> error: could not verify the tag 'v1.4'
>>
>>
>> I have confirmed that my key is valid (have
>> signed/encrypted/decrypted/verified using it after this error
>> occurred). I have also tried to create a tag using a newly-created
>> key, with the same result. I have attempted to created signed tags in
>> multiple repos. Is this a known bug?
>
> I can't reproduce this:
>
> $ git --version
> git version 1.7.3.1
> $ git tag -s test_tag -m "test_message"
> $ git tag -v test_tag
> object dbc2fa2a8507f258a353238cde2d9ba5894a8296
> type commit
> tag test_tag
> tagger Daniel Johnson <ComputerDruid@gmail.com> 1286231912 -0400
>
> test_message
> gpg: Signature made Mon 04 Oct 2010 06:38:38 PM EDT using DSA key ID 4A094EDC
> gpg: Good signature from "Daniel Johnson <ComputerDruid@gmail.com>"
>
> Is this not what you are doing? do you have any more info about what you are
> doing to cause this failure?
>

Daniel, Those are the exact steps I'm using.

When I run tag -v on existing tags, I don't see the

-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.9 (Darwin)

iD8DBQBMqlpo8Y2TgZsQ1pARAmBQAJ9NV0IX7jlzeB8ogddlutFKAjyWJwCfSI5A yZeXw/EddYrfdad/VvOrL1o= =/0PJ -----END PGP MESSAGE——

block. It's only present on tags created using the current version. I've also just upgraded to GnuPG 1.4.10, but the result is the same. I'm not sure how else I can determine where the problem arises; I'm using the git and GnuPG versions for OS X built by homebrew, and GnuPG is happy to use the same key for en/decryption and signing. I've also verified that none of the subkeys are expired, and that the trust db is OK.

-- 
steph