Clearsigned OpenPGP signatures extracted from undecoded MIME payload

Bug #1387494 reported by Phillip Susi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
High
Unassigned

Bug Description

For the last 24 hours I have been trying to reply via email to a bug report on launchpad and it keeps being rejected saying it can't verify the signature. At first I thought that it was because I created a new keypair last night and it just hadn't synced through the servers, but I just tried removing the new keypair from my keyring ( after backing it up ) and so the old pair was used instead and it still rejects it. It seems to have something to do with the specific content of this message.

I will attach the bounce message which itself contains a copy of my original message, which gpg has no trouble verifying the signature on.

Tags: easy email gpg
Revision history for this message
Phillip Susi (psusi) wrote :
Revision history for this message
William Grant (wgrant) wrote :

Does this still happen? The email is processed fine on my local Launchpad instance using exactly the same keyserver.

Changed in launchpad:
status: New → Incomplete
Revision history for this message
Phillip Susi (psusi) wrote :

Yes, I just tried sending the same message to this bug and it was rejected again.

Changed in launchpad:
status: Incomplete → New
Revision history for this message
William Grant (wgrant) wrote :

Try resending again, Ccing <email address hidden> so I can see exactly what was sent.

Revision history for this message
Phillip Susi (psusi) wrote : Re: [Bug 1383948] Re: Ubiquity Installer doesn't recognize existing btrfs partitions
Download full text (3.6 KiB)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/29/2014 07:04 PM, Damiön la Bagh wrote:
> BTRFS is really easy to add or subtract a disk. Grub2 has no
> problem with it and I can still boot after the disk has been added
> and balanced.

Wow... last I saw they had trouble fitting code to do a simple single
disk case into 64k and were asking about increasing that size. To
handle multiple disks and still fit in 64k is nothing short of miraculous.

> As for other operating systems. This is a moot point, the scenario
> is using Ubuntu+Btrfs with physical SSD's. If the disks need to be
> converted back to legacy partition table format it's as simple as
> writing a few 00's to the first 64kib with dd. dd if=/dev/zero
> of=/dev/sdX count=64

I meant sharing part of the drive, rather than blowing it all away.
With a partition table you can always fire up gparted and shrink down
the btrfs partition and make a new one if you need it. I even patched
things to do this while the volume is mounted a while back ;)

> For UEFI, I've already complained to the UEFI bord that they are
> holding back technology by insisting on using a 1980's file system
> to hold UEFI. It's the most ridiculous 'invention' in computers in
> the last 10 years. I understand the want and need to kill the BIOS
> but there are much more graceful solutions then defaulting to 30+
> year old legacy tech.

It's about as simple as filesystems get, everyone already supports it
and it doesn't really have any drawbacks that matter in a pre boot
environment, so it was a no brainer rather than inventing a whole new
filesystem or mandating that different parties adopt an existing
filesystem of another. Implementations are still free to support other
filesystems if they choose; it's just that fat was the lowest common
denominator and bios vendors never do any more than they absolutely have
to. I've heard that macs can use hfs for the esp though.

> Parted is broken when it comes to btrfs, it doesn't handle it
> gracefully at all. See the screenshot: The top left corner shows
> that parted just defaults to MSDOS even though you can clearly see
> in the top right that there is no partition table written. The
> bottom terminal is the Ubuntu 14.10 Live USB stick for comparison.
> Commands used were sudo parted -l

Looking at your screen shots, it appears that there is something that at
least tries to look like it is an MBR there in the boot sector. In
14.10, I fixed parted to correctly recognize filesystems on bare
devices, but had to take special steps to avoid confusing an ntfs/fat
boot sector for an MBR since they look very similar. My guess is that
grub is trying to mimic an MBR and fooling parted into thinking that it
is one. I probably just need to detect btrfs first and prefer that over
MBR like I did with fat and ntfs.

If you feel comfortable reinstalling grub ( and it sounds like you do ),
then you might conduct an experiment and zero out that first sector and
see if that fixes the problem, though obviously to boot you will then
need to reinstall grub.

> Should I bring this up with the parted developers as well?

You're talking to him ;)

-----BEGIN PGP SIGNATURE...

Read more...

Revision history for this message
Phillip Susi (psusi) wrote : Re: launchpad won't verify signed email

Interesting.. it accepted it this time, but I sent it from my windows machine at work. I'll try again tonight at home.

Revision history for this message
William Grant (wgrant) wrote :

One notable difference was gnupg2 vs gnupg.

Revision history for this message
Phillip Susi (psusi) wrote :

I sent it from home this time and it was again rejected... very strange.

Revision history for this message
William Grant (wgrant) wrote :

One of your MUAs sometimes uses CTE: 8bit, which works, but they mostly use CTE: quoted-printable, which we don't handle properly for clearsigned messages.

As a workaround, switch your MUA to always use 8bit rather than quoted-printable, or use PGP/MIME (which is a much simpler and better-exercised code path).

Changed in launchpad:
importance: Undecided → High
status: New → Triaged
summary: - launchpad won't verify signed email
+ Clearsigned OpenPGP signatures extracted from undecoded MIME payload
tags: added: easy email gpg
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.