#277516 evolution: Error verifying GPG signature on GPG and S/MIME signed mail

Package:
evolution
Source:
evolution
Description:
groupware suite with mail client and organizer
Submitter:
Jamie Jones
Date:
2021-05-20 17:21:18 UTC
Severity:
important
Tags:
#277516#5
Date:
2004-10-20 15:48:33 UTC
From:
To:
G'day,

Testing out my S/MIME certificate I decided to send myself an email from
evolution. I have correct GPG details in my account (They migrated fine from
1.4), and I added a S/MIME certificate from thawte.

I selected both PGP sign, and S/MIME sign on the security menu.
When I received my email, initially only the S/MIME certificate would verify.
I selected another email, then I selected my GPG & S/MIME signed email.

Evolution then displayed the following bright red message.


Error verifying signature
Failed to GPG verify: Broken pipe

gpg: armor header: Version: GnuPG v1.2.5 (GNU/Linux)
gpg: CRC error; 66311d - dc3663
gpg: quoted printable character in armor - probably a buggy MTA has been used


The S/MIME signiture is still good, but the GPG is corrupt.

Jamie

#277516#10
Date:
2004-10-20 16:28:27 UTC
From:
To:
G'day

I've done some further testing and found the following:

PGP Sign Only = No Problems
PGP Sign + PGP Encrypt = No Problems
PGP Sign + S/MIME Sign = Broken PGP Sign*
PGP Sign + S/Mime Encrypt = No problems
PGP Encrypt Only = No Problems
PGP Encrypt + S/MIME Sign = Broken PGP Encrypt*
PGP Encrypt + S/MIME Encrypt = No Problems
S/MIME Sign Only = No Problems
S/MIME Sign + S/MIME Encrypt = No Problems
S/MIME Encrypt Only = No Problems

*Error message from broken PGP Sign is:

Error verifying signature
Failed to GPG verify: Broken pipe

gpg: armor header: Version: GnuPG v1.2.5 (GNU/Linux)
gpg: CRC error; 66311d - dc3663
gpg: quoted printable character in armor - probably a buggy MTA has been
used


*Error message from broken PGP Encrypt is:

Could not parse S/MIME message
gpg: armor header: Version: GnuPG v1.2.5 (GNU/Linux)
gpg: CRC error; 309b67 - dc3309
gpg: quoted printable character in armor - probably a buggy MTA has been
used

#277516#13
Date:
2005-02-04 14:23:47 UTC
From:
To:
Hi!

Last year you submitted a bug related to evolution:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=277516

Can you still reproduce this bug with version 2.0.3 (latest in Sarge and
Sid) ?

Thanks!

#277516#18
Date:
2005-02-05 04:16:38 UTC
From:
To:
G'day

Sorry about the delay. It takes awhile to upgrade evolution and it's
dependancys on dialup.

I ran my tests again with the following results:


PGP Sign Only = No Problems
PGP Sign + PGP Encrypt = No Problems
PGP Sign + S/MIME Sign = Broken PGP Sign*
PGP Sign + S/Mime Encrypt = No problems
PGP Encrypt Only = No Problems
PGP Encrypt + S/MIME Sign = No Problems
PGP Encrypt + S/MIME Encrypt = No Problems
S/MIME Sign Only = No Problems
S/MIME Sign + S/MIME Encrypt = No Problems
S/MIME Encrypt Only = No Problems

*Error message from broken PGP Sign is:
Error verifying signature
Failed to GPG verify: Broken pipe

gpg: armor header: Version: GnuPG v1.2.5 (GNU/Linux)
gpg: CRC error; 9bbae5 - dc39bb
gpg: quoted printable character in armor - probably a buggy MTA has been
used

So it appears the problem with PGP Encrypt + S/MIME Sign has been fixed.

Evolution Package details

jamie@workhorse:~$ dpkg-query -s evolution
Package: evolution
Status: install ok installed
Priority: optional
Section: gnome
Installed-Size: 27372
Maintainer: Takuo KITAME <kitame@debian.org>
Architecture: i386
Version: 2.0.3-1.2
Provides: mail-reader, imap-client
Depends: gtkhtml3.2 (>= 3.2.1), libart-2.0-2 (>= 2.3.16), libatk1.0-0
(>= 1.7.2), libaudiofile0 (>= 0.2.3-4), libbonobo2-0 (>= 2.8.0),
libbonoboui2-0 (>= 2.5.4), libc6 (>= 2.3.2.ds1-4), libcompfaceg1,
libdb4.2, libebook8 (>= 1.0.3), libecal6 (>= 1.0.3), libedataserver3 (>=
1.0.3), libegroupwise6 (>= 1.0.3), libesd0 (>= 0.2.29-1) | libesd-alsa0
(>= 0.2.29-1), libfontconfig1 (>= 2.2.1), libfreetype6 (>= 2.1.5-1),
libgail-common (>= 1.6.6), libgail17 (>= 1.6.6), libgal2.2-1 (>= 2.2.4),
libgconf2-4 (>= 2.8.1), libgcrypt11, libglade2-0 (>= 1:2.3.6),
libglib2.0-0 (>= 2.6.0), libgnome-keyring0 (>= 0.4.0), libgnome-pilot2
(>= 2.0.2), libgnome2-0 (>= 2.8.0), libgnomecanvas2-0 (>= 2.6.0),
libgnomeprint2.2-0 (>= 2.8.0-1), libgnomeprintui2.2-0 (>= 2.8.0),
libgnomeui-0 (>= 2.8.0), libgnomevfs2-0 (>= 2.8.3-7), libgnutls11 (>=
1.0.16), libgpg-error0 (>= 1.0), libgtk2.0-0 (>= 2.4.4),
libgtkhtml3.2-11 (>= 3.2.4), libhowl0 (>= 0.9.8-1), libice6 | xlibs (>>
4.1.0), libjpeg62, libldap2 (>= 2.1.17-1), liborbit2 (>= 1:2.10.0),
libpango1.0-0 (>= 1.6.0), libpisock8, libpisync0, libpopt0 (>= 1.7),
libsm6 | xlibs (>> 4.1.0), libsoup2.2-7 (>= 2.2.1), libtasn1-2 (>=
0.2.8), libx11-6 | xlibs (>> 4.1.0), libxml2 (>= 2.6.11), zlib1g (>=
1:1.2.1), libnss3 (>= 2:1.7), libnspr4 (>= 2:1.7), libgal2.2-common (>=
2.2.0), gconf2 (>= 2.6.2-1), evolution-data-server (>= 1.0.3),
gnome-icon-theme
Recommends: mozilla-psm (>= 2:1.7), gnome-pilot-conduits (>= 2.0.9),
gnome-desktop-data, spamassassin
Suggests: gnupg, gnome-spell (>= 1.0.4)
Conflicts: evolution-data-server (<< 1.0.0), evolution1.5
Description: The groupware suite
 Evolution is the integrated mail, calendar, task and address book
 distributed suite from Novell, Inc.
 .
 See http://www.novell.com/products/evolution/ for more
 information.
No Problems. Thanks for looking into this.

Jamie

#277516#23
Date:
2005-02-05 12:36:04 UTC
From:
To:
Hola Jamie Jones!

Ok, you say PGP because the menu says PGP, but it's actually using gpg,
right?  I guess it is because of the error message, but I want to be sure.

Ok, thanks for the input, I'll see if I can find a fix to this, although I
don't think it'll be trivial.

#277516#30
Date:
2005-02-06 03:56:57 UTC
From:
To:
forwarded 277516 http://bugzilla.ximian.com/show_bug.cgi?id=71980
thanks

This bug has been reported upstream:
http://bugzilla.ximian.com/show_bug.cgi?id=71980

There's no patch, nor a suggested fix yet.

#277516#45
Date:
2019-05-28 12:24:55 UTC
From:
To:
-- 

Hi Friend

My name is Mrs. Aruna Arssabah, I am a banker in one of the prime Banks of
Scotland in our country London United Kingdom, I want to transfer an
abandoned fund sum of £14,600,000.00 (Fourteen million, Six hundred
thousand British pounds). into your bank account, which belongs to our
foreign late customer who died in Indonesia earthquake since May 26/2006,
50% will be for you & 50% for me. No risk involved. Contact me for more
details. Kindly reply me back to my alternative email address (
arssabaharuna1@mail.com)


Best Regards
Mrs. Aruna Arssabah