From: Matt F. <mf...@fi...> - 2006-10-30 10:47:58
|
Hi. I'm trying to use the cryptix library to verify a message sent against a public key. I've managed to do this successfully for plaintext emails sent and signed using both OpenPGP and PGPDesktop. However html emails sent using PGPDesktop appear to do things a little differently to other html email signing apps. It produces the Signature as a detached signature and doesn't appear to have a BEGIN PGP MESSAGE block. Could anyone tell me which parts of the following message are included in the signature and how I should go about verifying these parts against the signature. At the moment I generateMessages using a message factory then cast as a SignedMessage then verify against the public key. but the MessageFactory.generateMessages doesn't appear to work for these emails. The email I wish to very follows: Content-Type: multipart/signed; boundary="PGP_Universal_6B953E55_15A796E5_56A705A0_EBCD36FC"; protocol="application/pgp-signature"; micalg="pgp-sha1" --PGP_Universal_6B953E55_15A796E5_56A705A0_EBCD36FC Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01C6FBFE.5F722960" This is a multi-part message in MIME format. ------=_NextPart_000_000D_01C6FBFE.5F722960 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Test ------=_NextPart_000_000D_01C6FBFE.5F722960 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.5730.11" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Test</FONT></DIV></BODY></HTML> ------=_NextPart_000_000D_01C6FBFE.5F722960-- --PGP_Universal_6B953E55_15A796E5_56A705A0_EBCD36FC Content-Type: application/pgp-signature; x-mac-type=70674453; name=PGP.sig Content-Disposition: attachment; filename=PGP.sig -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.0 (Build 1202) qANQR1DEDQMBAgFZPe+GV6SkXgHClQMFAUVFuaNZPe+GV6SkXgECeooD/2xNHJpr 0tbd/hrNS52MwPekgqnzQkzWefKmb88jlwoOaGqr5+mRCH23Xjocq5jwg9wKYnTL Vz+hRAy2F+yZbw/KURzgQzmLjzmxfeKEyg4XyRIZn4llet4WDQ5l5TX9I4WX+FYv aWoxX84g+ArtyomDS2E0ijPEZz5N62bBpPh6 =gmqt -----END PGP SIGNATURE----- --PGP_Universal_6B953E55_15A796E5_56A705A0_EBCD36FC-- Thanks... ___________________________________________________________ First Option's outgoing email policy is at http://www.firstoption.net/emailpolicy.html, but a short summary is :- - all email/attachments are confidential; do not use, circulate or release without our consent - email is not authorised unless it is on First Option business - email is not binding unless it is from an authorised person and is signed with a digital certificate First Option Ltd. - Switchboard +44 (0) 1962 738200 Signal House, Jacklyns Lane, Alresford, Hants, SO24 9JJ, United Kingdom ___________________________________________________________ |