[SGVLUG] John - did you change GPG keys?

[John E. Kreznar]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In a posting purportedly from "Emerson, Tom (*IC)"
<Tom.Emerson at wbconsultant.com> but lacking a digital signature, it is
written:

> I know it's possible that either the plug-in I'm using isn't working
> [gpgol & kleopatra], or that the "corporate" e-mail servers
> [exchange] are "munging" a byte or more of the original message
> before it arrives in my inbox, but I'm getting "Bad signature by
> unknown key 61A47CC541AFEF13: Bad signature" on your signed
> messages.

Signature verifies okay here.  Hmm...

Another case of MUA "mutilation", I'd guess :)  Example: In this
snippet of my posting that you included

>  John E. Kreznar jek at ininx.com 9F1148454619A5F08550
> 705961A47CC541AFEF13

there is a line break between the two hex fields.  The line break was
not present in my original posting.  What does your MUA show you when
you look at my posting -- with or without that line break?

> (and yes, I notice that your .sig includes what appears to be the
> full fingerprint, but I thought this would be a 16 byte value, not a
> 20 byte value as you have it listed)

- From /usr/share/doc/gnupg-doc/README.gz:

    8 Ways to Specify a User ID
    ---------=-----------------

    There are several ways to specify a user ID, here are some examples.

    [...]

    * By a fingerprint:

	"1234343434343434C434343434343434"
	"123434343434343C3434343434343734349A3434"
	"0E12343434343434343434EAB3484343434343434"

      The first one is a short fingerprint for PGP 2.x style keys.
      The others are long fingerprints for OpenPGP keys.

So it appears that the short (16-byte) version is old.  (Somewhere
there is a historical note on this, but I don't immediately find it.)

> I'm fairly sure I have your "public" key on my keyring, but I got
> that a couple of years ago -- did you create a new one since then?
> [checking... No, I see I have the same fingerprint for you on my
> keyring -- is anyone else seeing "bad" signatures here?]

Correct.  No change.

In any case, just for the record, my key is appended below outside the
signature.  It should also be available with "finger jek at ininx.com".
If this doesn't work for you, please say.

- -- 
 John E. Kreznar jek at ininx.com 9F1148454619A5F08550 705961A47CC541AFEF13

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>

iD8DBQFJ+jkfYaR8xUGv7xMRAmG2AKCAwM3xQgXfDwvsi2OfWLnllTrpMACeNq1c
ecEBEWIjxmEKrJir80+Hafg=
=5PyR
-----END PGP SIGNATURE-----

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
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=
=e1h1
-----END PGP PUBLIC KEY BLOCK-----