1

(2 replies, posted in Bugs & problems)

the_glu wrote:

Hi,

If you use signature.asc, you have things to do  : http://www.ietf.org/rfc/rfc3156.txt (it's called openpgp/mime wink)


Regards,

I was just coming here to say apologies again for not being a bug :]

Yes, I already said that document hours ago. It's a little bit confusing, however I need a lot of time to do that, so it seems I will do that "another time" :]

2

(2 replies, posted in Bugs & problems)

Hi again.

I'm not certain there's a bug (there's not one withouth two :] ), so I will explain the situation:

my web application send Inline signature's and FireGPG detect and works fine (good, or wrong signature).

Now I'm sending those signature's, in a file (signature.asc) but FireGPG does nothing.

Is it normal?

EDIT: I'm seeing signatures created by FireGPG and mine, and are "almost the same".. I tried returning ASCII armored data and binary data but it happens the same.

the_glu wrote:

Just upgrade FireGPG to 0.7.6 wink

And because itis decoder who detect and decrypt pgp block.

Ups, of course, that is the change log smile

Wow, it works very nice! I will put your credits  in my presentation smile

Thank you very  much !

I see there's the implement I need smile But, where do I put it in cgmail2.js?

A question? Why there are modifications in decoder.js  (Mime decoder) ?

Thanks.

the_glu wrote:

I just tested what FireGPG do.

Select the text / Right click / FireGPG / Decrypt. 4 step. I don't think it's a real problem wink

I already said that method works...

It's a problem since my emails almost always more than 4/5 different PGP blocks..

That means you are not going to help me..?

the_glu wrote:

I will do it my self, it's will be faster wink

I really appreciate that, but ok, beside I really do not know much about JS, I like to learn new things, so if then you can explain to me what you changed, I pay you a beer tongue

the_glu wrote:

Hi,

You don't have to do anything in inline.js but un cgmail2.js only :]

I'm searching for autodecrypt but only found noautodecrypt. Can you point to me to line where is AutoDecrypt when private key inserted(byuser). You got to help me, there are a lot of comments in french tongue

Hi again.

I've downloaded FireGPG source code, and I'm seeing right now inline.js. (I have a little hurry smile

For my case, there are two important functions I must change: the one that handles block - HandleBlock and the one that find's block - HandlePage. So, sorry, JS is still a weak point for me. I must change HandlePage, am I right? If you give me a hint or two I might can do something smile

However, there are two scripts to Gmail, and I'm wondering too if its not here that I have to do something.

the_glu wrote:

Ok wink

I will check the FireGPG behaviour in this case, but you can use right-click to decrypt part one by one no ? smile

Unfortunately, I have a "real" bug (i dont know if its from FireGPG, Firefox or another), when I press right click the usual menu does not open (only happens on Gmail so its not my right button not working tongue), so I have to select all the area, EDIT-Copy and then Tools-FireGPG-Text Editor, and then Paste and Decrypt. As you can see, its a little bit annoying do that a lot of times smile

However, its always more efficient have all the parts decrypted automatically. I hope you can do some work on that smile

the_glu wrote:

Ok wink

I will check the FireGPG behaviour in this case, but you can use right-click to decrypt part one by one no ? smile

Unfortunately, I have a "real" bug (i dont know if its from FireGPG, Firefox or another), when I press right click the usual menu does not open (it happens only on Gmail), so I have to select all the area, EDIT-Copy and then Tools-FireGPG-Text Editor, and then Paste and Decrypt. As you can see, its a little bit annoying do that a lot of times smile

However, its always more efficient have all the parts decrypted automatically. I hope you can do some work on that smile

the_glu wrote:

No it's not answering my question. Use gmail to compare the format of mails you're sending !

How can I do that exactly?

Well, an email from my web application, the body (encrypted) has around 1600 chars. The same email (same body) encrypted in Gmail with the same public key and sent with and without Inline has around 1000 chars. With Inline, and with my web application, there's no attachments.

Sorry but I do not have suficient knowledge do know how to exactly answer your question.

Based on this info, I can only assume that my emails use OpenPGP protocol, without Inline option.

EDIT: ok I understand now. You just want to know if its PGP/MIME or PGP/Inline smile Well, as I said, I'm almost sure its Mime, but I will confirm that.

EDIT: Its not MIME, its Inline smile Confirmed wink My emails doesnt have signatures on attachments, they are on the body of email, so its Inline for sure.

Now I hope have answered you question. Finally :]

the_glu wrote:

Why are your making a new topic ???

And it's important to know witch format you use for sending mails...

Many sorry, I thougth once this original thread was to report a bug (and as you well say, its not a bug), I thought that I should create a new one. Sorry if I did that wrong.

Ok, answering your question, Crypt_GPG supports input and output in OpenPGP ascii-armored or binary form.

For signatures, clearsign, detached sign and normal signing are all available.

the_glu wrote:

Check or not 'Inline' when you send a mail.

You do not understood me. I do not the those emails form gmail or another email service. I use a "private" SMTP server, and those emails are sent from my Web application, and the body of those messages are result of query's (data extracted from Database).

I just use Gmail to receive smile

I really dont know if its openpgp or inline as you asked, but Im almost sure its openPGP
http://pear.php.net/package/Crypt_GPG/

But why are you asking ?

the_glu wrote:

A mail,  I forgot a word wink

Two methods? How do I do that?

the_glu wrote:

Not it's not smile

Send a with with Firegpg in gmail with both methods to know witch one is smile

A with? Sorry, I did not understood.

the_glu wrote:

Are you using openpgp/mime or inline (like in your mail) ?

I dont know if I'm answering your question, but I'm using the package Crypt GPG to use with PHP.

the_glu wrote:

I don't understand, can you send me a sample mail ?

[Block A, key A, key B]
[Block B, key B, key C]

So A can decrypt bA, B bA and BB, C bB ?

Why do this ? You can send two mails... And that not because C doesn't know yet how to decrypt bA that you shouldn't try to avoid access to sensible data..

What I do is:

key A- student Key; B- teacher; Key C - another Teacher key; key D - another
Block A,B and C, are all stored encrypted in Database, and signed by teacher (when student access web application, he can see the validation of the mark, but thats another talk :] )

[Block A, key A,key B]
[Block B, key A,key C]
[Block C, key A,key D]
...
and so on

So, in just one e-mail, student have all the information he needs, and I sent it for thousand of students. If I can send 300 emails, I will not send 900 smile

For sure I cant send you an email sample, some parts are in Portuguese:

Nota 1: Mark 1
Exame -> First exam
Assinatura digital -> digital signature

I will send to  you the email, but if you provide me an email address, I send to you public and private key, I'm using for testing.

the_glu wrote:

Ok. But I won't implement strange behaviour in FireGPG for you so .. wink

It's not strange behaviour. It's perfectly possible to receive an Email with different parts encrypted. See: if someone has some data encrypted with two public key, and another one encrypted also with two encrypted key (but one of them the same), someone might want to send it, so the person who receives it, decrypt the two parts with the private key.

Its perfectly possible wink

the_glu wrote:

Why don't you have a big part encrypted with subparts ? It's more comon I think, I'm not sure having more that one subpart encrpyted is standard wink

Unfortunately, that's not an option for me... I work with students marks, so each one is encrypted, and each one has a digital signing. And that's  the objective, so I cant do another way..

the_glu wrote:

No it's not a bug as it's simply not implemented :]

Why are you receving more than one php message in the same email ??

Because  in my University Final Project, one function is send several emails, with diferent data encrypted (diferent fields in Database, all of them encrypted), and I'm thinking use FireGPG in my presentation. But, if this happen I cannot do that...

Unless you implement that until 1 July :]

I'm receiving more than one pgp message in the same email.

So, if I receive two blocks, but encrypted with the same public key, (and so on, its decrypted with the same private key), FIREGPG is just auto decrypting the first pgp message (one more time, in the same email). Looks like its a bug.

Am I wrong?

the_glu wrote:

I don't know wink

FireGPG can't. You said (but there seem to be a misunderstanding) that gnupg can't. So there is no ways to choose the second one.

Exactly smile

FireGPG cant, but gnupg can smile

So FireGPG should can too.

the_glu wrote:

So FireGPG use the gpg behavior, I don't understand where is the problem ..

Sorry for me not explaining very good.

Ill try explain doing just one question:

If encrypt data with 2 public keys, and when im going do decrypt I have the two private keys in key manager(and I just need one to decrypt), how do I choose the second one ?

the_glu wrote:

Hum yes ok, but how gpg know witch key he should ask you ?

And I don't think this situation happens usually...

In my case, he choose the first he find. So if we want to use the second, its not possible unless you delete the first one.

I'm using Crypt GPG PHP package to encrypt data.

so, I encrypt data using two keys:

$gpg->addEncryptKey('rafaelsereno@gmail.com');
$gpg->addEncryptKey('tmachado3@gmail.com');

//just do to a test
$gpg->addDecryptKey('tmachado3@gmail.com','1234');

And I have my data decrypted (in server side) using just one key to decrypt it.

But If I want do decrypt by clients side using FireGPG, and if I try use the private key '1234' (the one it sure works from previous test), I have the information "bad passphrase", and I can only decrypt using the first encrypt key I added (the one from rafaelsereno@gmail.com).

I think thats a bug from FireGPG because decrypt works properly on server side, using the private key that dont work with FireGPG.

EDIT: I've done several tests and the BUG is EXACTLY the following: when you have data encrypted with two keys, and you have the two keys in your key manager, FireGPG automatically choose the first private key, and then you cant decrypt with the second. I have the option "always ask for private key", but does nothing.

So in my, after the encryptation process, if I want to choose the private key I want to use, I have the delete it the other from the key manager.