[Webfunds-devel] good keys, bad keys...

Mon, 4 Sep 2000 19:15:36 -0400 (AST)

(This bug is on the Critical Path :()

Cryptix / OpenPG / SOX.Crypto.java disagree with GPG as to ... signed keys!!

SimpleIssuer includes this code:

            PublicKey signerKey = Crypto.getPublicKeyFromCert(signer);
            logmsg("Verifying ServerCert is signed by Server CA certificate");
            if (!Crypto.verifyCertificate(serverCert, signerKey)) {

byte[] b = signerKey.getEncoded();
PGPArmoury ok = new PGPArmoury(b, KeyUtil.PUBLIC_KEY_BLOCK);
b = Crypto.getPublicKeyFromCert(serverCert).getEncoded();
PGPArmoury sk = new PGPArmoury(b, KeyUtil.PUBLIC_KEY_BLOCK);
logmsg(
                    "serverCert (first) not signed by operator Cert (2nd)\n\n"+
                    sk + "\n\n\n" + ok + "\n\n");

                throw new SOXIssuerException(SOXException.SERVER_CERT,
                    "serverCert not signed by operator Cert");
            }

This code trips up sometimes - but not always - when getting
the server and operator certs from the new OpenPGP-enabled
Issuer.  Here's the relevant diags:

Utils:   OpenPGP Certificate being returned...
          i Got a serverCert!Systemics OpenPGP SOX [server] (dss1) <server@syste
mics.com>
          i Verifying ServerCert is signed by Server CA certificate
          i serverCert (first) not signed by operator Cert (2nd)

(I think.... as this is a DOS attack on the Teller, it is hard
to see what is happening as I have about 100 threads all doing
the same thing....)

So, then the code above blows and throws out these keys:

which GPG decides are fine.  I.e., the first *is* signed
by the second.  And, what's more, this sequence fails in
many of the threads, but not all, more like less than half.

(Full technicolour diags located at http://www.iang.net/dos.txt)

(What happens next is that the Issuer is declared dead and
Teller spits the dummy...)

!gpg -v < moo
File modified since last write.
gpg: Warning: using insecure memory!
gpg: armor header: Version: Cryptix OpenPGP
gpg: armor header: Version: Cryptix OpenPGP
pub  1024D/9E9AB734 2000-08-21 Systemics OpenPGP SOX [server] (dss1) <server@systemics.com>
sig        9E9AB734 2000-08-21   [selfsig]
sig        282D740A 2000-08-21   Systemics OpenPGP SOX [operator] (dss1) <server@systemics.com>
pub  1024D/282D740A 2000-08-21 Systemics OpenPGP SOX [operator] (dss1) <server@systemics.com>
sig        282D740A 2000-08-21   [selfsig]
Press any key to continue [: to enter more ex commands]: 