Skip Menu |
 

This queue is for tickets about the Module-Signature CPAN distribution.

Report information
The Basics
Id: 19894
Status: new
Priority: 0/
Queue: Module-Signature

People
Owner: Nobody in particular
Requestors: MIYAGAWA [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 0.54
Fixed in: (no value)



Subject: Module::Signature 0.54 backward compatibility issue
Download (untitled) / with headers
text/plain 2.1k
Module::Signature updated (fixed) the way it handles text files with CR code in it. That breaks SIGNATURE file verification created by Module::Signature prior to 0.53. It should fallback to the prior-0.53 way to calculate digest, if the verification failed and the content includes CR inside. Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha1; boundary="Apple-Mail-2-170974851" Message-Id: <901AB4C7-162D-456D-954C-E9D37D288F85@audreyt.org> Cc: "Dave Rolsky" <autarch@urth.org>, "Audrey Tang" <autrijus@autrijus.org> Content-Transfer-Encoding: 7bit From: Audrey Tang <audreyt@audreyt.org> Subject: Re: DateTime::Format::Mail and Module::Signature Date: Wed, 14 Jun 2006 11:21:06 +0200 To: Tatsuhiko Miyagawa <miyagawa@gmail.com> X-Pgp-Agent: GPGMail 1.1.2 (Tiger) X-Mailer: Apple Mail (2.750) This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --Apple-Mail-2-170974851 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=BIG5; delsp=yes; format=flowed =A6b 2006/6/14 =A4W=A4=C8 4:58 =AE=C9=A1ATatsuhiko Miyagawa =BCg=A8=EC=A1G= Show quoted text
> So it looks to me, the SIGNATURE file created with Module::Signature > <=3D 0.53 (by Dave) can't be verfied using Module::Signature (0.54). > Eek.
A thought is to verify it twice; once in old-verbatim (no CRLF =20 translation) mode and once with new-normalized mode. Can you look at a patch to Module::Signature perhaps? Or submit a RT =20= ticket... Audrey= --Apple-Mail-2-170974851 content-type: application/pgp-signature; x-mac-type=70674453; name=PGP.sig content-description: This is a digitally signed message part content-disposition: inline; filename=PGP.sig content-transfer-encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEj9UCtLPdNzw1AaARAop1AKCh18P3ChxxkW8Izb2QnRsAnZitIwCeI/H7 OhUjHLF9LtGLKgRwMaGpQ0M= =MxiY -----END PGP SIGNATURE----- --Apple-Mail-2-170974851--


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.