Fri, 04 Jul 2008 11:28:49 -0400 http://bugs.horde.org/ticket/6363 PGP-Fingerprint is missing, instead ID is marked as fingerprint It is possible to show details of an importet PGP-key via Preferences -> Webmail-> PGP-Preferences -> List of keys ->Details (German: Einstellungen -> Webmail -> PGP-Einstellungen -> Liste von Keys -> Details). The string that is labeled "Fingerprint" is NOT the fingerprint but the ID of the key. The fingerprint is missing which is a problem because this is the crucial point of attack for a man-in-the-middle attack. Mon, 03 Mar 2008 11:06:03 -0500 http://bugs.horde.org/ticket/6363#t43347 We seem to be calling the key id the fingerprint in a bunch of places. I've got some preliminary code to get the actual fingerprint, but it needs some work and testing before I commit it. Wed, 05 Mar 2008 18:42:50 -0500 http://bugs.horde.org/ticket/6363#t43418 Jan or Michael or someone else a bit familiar with PGP, can you take a look at this patch? There's probably a bit more to do, but it's a start. Wed, 05 Mar 2008 23:54:21 -0500 http://bugs.horde.org/ticket/6363#t43460 We should deprecate getSignersFingerprint() and create a new function called getSignersKeyID() that does the same thing. Thu, 06 Mar 2008 02:05:17 -0500 http://bugs.horde.org/ticket/6363#t43465 This is an updated version of Chuck's patch. Note: I changed the getFingerprintFromKey() function to return all fingerprints instead of just the 1st one. However the keys and fingerprints don't match up yet, since I think maybe the keys are sorted, but the fingerprints are not. Unfortunately the fingerprints are not available directly from "gpg --list-packets" so we can't insert them into the $key_info hash directly. Also, we print 16 digit key IDs. I think we only want to print 8 digit keys and have a leading 0x. And imp/lib/Crypt/PGP.php needs to be updated to use the new functions still. This patch is definitely not complete. Thu, 06 Mar 2008 03:55:26 -0500 http://bugs.horde.org/ticket/6363#t43468 Started to look through this, but I didn't write any of this fingerprint code so none of this code is familiar to me. I did clean up the patch a bit more, so I've attached that to this ticket. Sat, 29 Mar 2008 20:15:55 -0400 http://bugs.horde.org/ticket/6363#t44251 Fixed in CVS with these commits: HEAD - http://lists.horde.org/archives/cvs/Week-of-Mon-20080407/077305.html FRAMEWORK_3 - http://lists.horde.org/archives/cvs/Week-of-Mon-20080407/077306.html Fri, 11 Apr 2008 17:05:07 -0400 http://bugs.horde.org/ticket/6363#t44598