keybase / keybase/keybase-issues

Website fails to verify message generated by command line

Open
#3,044 5 comments 3 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I have yet to understand what one can put into the website "verify" box and have it do anything.

Here is test message signed by command line:

```
keybase sign -m test
BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkP1syTF jT3tRJg4Uxp3oT8 kJfrPewpPTFpseI gCj3EZDG0DErOh0 2H7uFRqv8DoXPRY tiPWx1pXQT0x23f RiqF29o1nTgAkK7 oQRPA4N1aAo5inD TKKL2igrfcpKQMo CzuElFovhC5NT0m 3co04Lc4nVyibws v0QTpUJSXTQ. END KEYBASE SALTPACK SIGNED MESSAGE.
```

Command line `verify` works:

```
keybase verify -m "BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkP1syTF jT3tRJg4Uxp3oT8 kJfrPewpPTFpseI gCj3EZDG0DErOh0 2H7uFRqv8DoXPRY tiPWx1pXQT0x23f RiqF29o1nTgAkK7 oQRPA4N1aAo5inD TKKL2igrfcpKQMo CzuElFovhC5NT0m 3co04Lc4nVyibws v0QTpUJSXTQ. END KEYBASE SALTPACK SIGNED MESSAGE."
Signature verified. Signed by latkin (you).
test
```

Website claims it doesn't even understand what the message is:

![image](https://user-images.githubusercontent.com/5943573/30245058-19be3c3a-9583-11e7-9026-b8f9682470ae.png)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the supplied signed message in the website's verify box and compare the result with the command-line verify output shown in the issue. Trace the website verification entry point and determine why this valid message is rejected; done means the website accepts it, identifies the signer, and displays the verified content.

Written by the indexing model from the issue text.

Assessment

Domain
security, web-dev
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.