[bug] Keys with non-ASCII User Ids do not work

[az82]

Update:

This issue affects all keys with non-ASCII characters in the name of the user Id. These keys cannot be used with Mailvelope.

Problem

Mailvelope marks some valid public keys as invalid. The keys cannot be used for encryption

How to Reproduce:

• Import the following public key into Mailvelope: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x0F96D906EF3359CB
• Open the key details: The key is marked as invalid
• Also, you cannot use the key to encrypt emails

[My1]

I had this with some keys from an older plugin version where after some update the key wouldnt work anymore.

[az82]

To clarify: To the best of my knowledge the offending keys were created with gpg and are accepted by every other piece of software I'm using.

[My1]

I just noticed something intresting. both your and my key have a non-US-ASCII character in the name of the user ID (it even says that the user ID is invalid when importing the key) maybe something changed in some encoding stuff and mailvelope goes pretty damn strict about it.

[az82]

The issue still persists. @My1 raised an important point: All my public keys with non-ASCII characters in the name are marked as invalid. I'll update the issue to reflect this.

[az82]

Raised an issue with openpgpjs. It seems that parsing keys with non-ASCII unicode characters in the user Id is broken.

[az82]

Update: The offending key user Id's seem to be encoded with CP-1252 instead of UTF-8 and are indeed invalid. However, GnuPG accepts them.

[az82]

The keys were created with GnuPG using a Windows-1252 encoded settings file. Apparently GnuPG creates invalid keys in this case. I've raised an issue with GnuPG: dev.gnupg.org/T4360.

In my opinion, this is not an issue with OpenPGP.js as the keys are clearly invalid. Of course, it would be nice if the keys worked anyway as they do with GnuPG.

[toberndo]

Thanks for analyzing this further. I have a slight preference for not accepting such keys. In any case this would have to be fixed in OpenPGP.js.

[My1]

but that leaves the question my my super old key generated with mailvelope very long ago hasnt been accepted for quite a while