Learn how easy it is to sync an existing GitHub or Google Code repo to a SourceForge project! See Demo

Close

#4 bug when replaying to "remailer-key" rq.

closed-fixed
nobody
Remailer (20)
7
2002-08-21
2001-11-05
Disastry
No

I found that mix when sending keys (in replay to
remailer-key) instead of simply getting public keys
from pubring, reads secret keys from secring and
converts them to public keys and signs public keys
each time.

I think it is really bad!

Ok, maybe it acceptable for RSA keys, because signature
is the same each time, but not for DSS keys. for DSS
keys signature each time is different (because random
number is used when signing). So if one retrieves
remailers public key several times and imports into
keyring he gets key with multiple self signatures.

I think mix should be changed so that it gets public
keys from pubring.

this bug is found in 2.9beta31 but not in previous
versions

ok, I think I found the problem:
in latest version(s) in pgpkey.txt RSA and DSS keys is
stored separately. probably pgpdb_getkey() finds only
first one. and then if the key is not found it takes it
from secring, converts to pubkey and signs.

Discussion

  • Len Sassaman
    Len Sassaman
    2001-11-05

    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Len Sassaman
    Len Sassaman
    2001-11-05

    Logged In: YES
    user_id=29569

    If this problem is due to the seperate RSA and DSS
    keys, then the problem existed since 2.9beta20, which
    is when that change was made.

     
  • Disastry
    Disastry
    2001-11-06

    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Disastry
    Disastry
    2001-11-06

    Logged In: YES
    user_id=363885

    yes, problem exists in 2.9beta23 too,
    but not in beta12

     
  • Len Sassaman
    Len Sassaman
    2001-12-16

    • priority: 5 --> 7
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Len Sassaman
    Len Sassaman
    2001-12-16

    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Len Sassaman
    Len Sassaman
    2001-12-16

    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Len Sassaman
    Len Sassaman
    2001-12-16

    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Logged In: YES
    user_id=1525

    The problem is, that pgp_dearmor() only dearmors the first key

     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • Logged In: YES
    user_id=1525

    possible fix

     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
  • possible fix

     
    Attachments
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
    • labels: --> Remailer
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
    • status: open --> open-fixed
     
  • Logged In: YES
    user_id=1525

    fixed in CVS some time ago
    needs testing

     
    • summary: bug when replaying to "remailer-key" rq. --> bug when replaying to "remailer-key" rq.
    • status: open-fixed --> closed-fixed