Hi,
thanks for the report. We were unaware of the Andorid problem. The Web App issue was already reported similary.

18:25:22/11956/ERROR/mapihelp.cpp:mapi_change_message_class: can't save old message class: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: message has 2 attachments
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: attachment info:
18:25:22/11956/ 3435173 mt=0 fname=gpgol_string_7' ct=application/pgp-encrypted' ct_parms=`(null)'
18:25:22/11956/ 3435205 mt=0 fname=gpgol_string_8' ct=application/octet-stream' ct_parms=`(null)'
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435173 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435205 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005

I did in my first comment here ;-)

Please, provide e-mail address, then I´ll send it asap

Yes, please send the mails. Maybe they will show me the problem already. :-)

Very strange, but I tried it by myself, after your mail. The same for me. However, I can offer you to send two mails to you as EML files, one works, the other not. I using GnuPG also for verification from BSI newsletter, it works fine there. The problem is only with newsletters from "Microsoft security update releases", other Microsoft security notifications can be verified as well.

@JW-D thanks. Please send them to aheinecke@gnupg.org

Thanks for the report. Indeed I've overlooked this.

Yes, GpgOL in version 2.3.2 fails to verify the original message, it is labeled as "not-secure". But it happens only to "Microsoft security update releases", not to other Microsoft Security Notifications which I receive on regular base. I contacted Microsoft Security Responce Center (MSRC) and they confirmed the failure of signature verification in this case. They were not aware about it, but checked it by them self after my mail. They had no explanation for that. Labeling the message as "not-secure" would may indicate that it would be altered in transport, but MSRC did not say that. Therefore, I still assume, that we have a bug in GnuPG.

If it contains a gpgolPGP.dat it means that it was already parsed by GpgOL and GpgOL created the MOSS attachment from the clearsigned original message. That it's tnef is part of the export and should not be a problem.

I contacted Microsoft Security Response Center (MSRC) in regard to this matter. They confirmed the failed PGP key verification, but have not yet any explanation for that.

What are MS doing when they get it right, though? I'd look at the differences between those two to identify what they've messed up here.

Thanks. The mail is a standard, non-crypto mail with one attachment. That attachment is a TNEF file which has according to ytnef(1) just one file. That file has the name gpgolPGP.dat and contains a clearsigned message.

Sure, I zipped the eml which failed and I´ll send it by e-mail to you

Is it possible that you upload or send me a copy of such a mail (wk gnupg.org)? ZIP or tar the eml file and send it in an encrypted mail to me to make sure it won't be modified on the transport.

I checked my mails in detail, and I can confirm that the error occurs only with "Microsoft security update releases". Indeed "Microsoft security advisory notification" and "Microsoft security update summary for..." will be verified correctly.

I agree. It also happens to me. But only with mails coming from "Microsoft security update releases". Mails coming form "Microsoft security advisory notification" and Microsoft security update summary for..." are ok and are signed by the same key. It could be some trouble in MS automated email treatment.

Logfile:
18:24:30/11956/enabled debug flags:
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'enableSmime' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'encryptDefault' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'signDefault' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'inlinePGP' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'replyCrypt' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'preferSmime' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autoresolve' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autoretrieve' val 'null'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'automation' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autosecure' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autotrust' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'searchSmimeServers' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'smimeHtmlWarnShown' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'syncEnc' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'syncDec' val '0'
18:24:30/11956/gpgoladdin.cpp:~GpgolAddinFactory: Object deleted
18:24:30/11956/gpgoladdin.cpp:OnConnection: this is GpgOL 2.3.2
18:24:30/11956/gpgoladdin.cpp:OnConnection: using GPGME 1.12.1-beta43
18:24:30/11956/gpgoladdin.cpp:OnConnection: in Outlook 16.0.0.9126
18:24:30/11956/gpgoladdin.cpp:addGpgOLToReg: Found gpgol reg key. Leaving it unchanged.
18:24:30/11956/gpgoladdin.cpp:addGpgOLToReg: Found gpgol reg key. Leaving it unchanged.
18:24:30/11956/oomhelp.cpp:delete_category: Deleted category 'gpgol_string_1'
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-ms.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-cs.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-form-signed.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-form-encrypted.cfg' installed
18:24:30/11956/storing option smimeHtmlWarnShown' value=0'
18:24:30/11956/gpgoladdin.cpp:check_html_preferred: No type or key for ReadAsPlain
18:24:30/11024/keycache.cpp:do_populate: Populating keycache
18:24:30/11024/keycache.cpp:do_populate_protocol: Starting keylisting for proto OpenPGP
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event without mailitem.
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:24:31/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035e0f7df0
18:24:31/8604/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:24:31/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note.GpgOL.PGPMessage'
18:24:31/11956/mapihelp.cpp:mapi_create_attach_table: message has 1 attachments
18:24:31/11956/mapihelp.cpp:mapi_create_attach_table: attachment info:
18:24:31/11956/ 3435237 mt=4 fname=gpgol_string_2' ct=(null)' ct_parms=`(null)'
18:24:31/11956/oomhelp.cpp:get_unique_id: '000002035e0f7df0' has now the uid: '3bb0889d-49b1-4644-8527-cfc0a8a52f69'
18:24:31/11956/mail.cpp:setUUID_o: uuid for 0000020350c563e0 set to 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/mail.cpp:setUUID_o: uuid for 0000020350c563e0 is now 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/mail.cpp:setUUID_o: Resetting uuid for 0000020350c563e0 to 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/oomhelp.cpp:get_unique_id: '000002035e0f7df0' has now the uid: '3bb0889d-49b1-4644-8527-cfc0a8a52f69'
18:24:31/11024/keycache.cpp:do_populate_protocol: Starting keylisting for proto OpenPGP
18:24:31/11956/mimedataprovider.cpp:collect_data: found PGP Message marker,
18:24:31/11956/mimedataprovider.cpp:collect_data: Fixing up a possible broken message.
18:24:31/11956/mail.cpp:updateOOMData_o
18:24:31/11956/oomhelp.cpp:get_sender_SenderEMailAddress: Sender found
18:24:31/11956/oomhelp.cpp:get_sender_SentRepresentingAddress Found sent representing address "gpgol_string_3"
18:24:31/6572/mail.cpp:do_parsing: preparing the parser for: 0000020350c563e0
18:24:31/6572/parsecontroller.cpp:parse:0000020350c55810 decrypt: 1 verify: 0 with protocol: OpenPGP sender: gpgol_string_3 type: 10
18:24:31/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:24:31/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:24:31/11024/keycache.cpp:do_populate: Keycache populated
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810 decrypt / verify done.
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810: decrypt err: 0 verify err: 0
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810 Decrypt / verify done errs: 0 / 0 numsigs: 1.
18:24:32/6572/windowmessages.cpp:do_in_ui_thread: Sending message of type 1102
18:24:32/15496/keycache.cpp:do_update updating: "gpgol_string_4" with protocol OpenPGP
18:24:32/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1102
18:24:32/11956/keycache.cpp:getFromMap using "gpgol_string_4" for "gpgol_string_4"
18:24:32/11956/keycache.cpp:getByFpr Cache hit for gpgol_string_4.
18:24:32/11956/mail.cpp:updateSigstate: No signature with enough trust. Using first
18:24:32/11956/categorymanager.cpp:registerCategory: Register category gpgol_string_1 in new store gpgol_string_5 ref now 1
18:24:32/11956/oomhelp.cpp:get_oom_object: no object
18:24:32/11956/oomhelp.cpp:get_oom_object: no object
18:24:32/11956/mail.cpp:updateBody_o: Did not find body charset. Using internet Codepage 65001.
18:24:32/11956/mail.cpp:installFolderEventHandler_o: Install folder events watcher for gpgol_string_6.
18:24:32/11956/mail.cpp:parsing_done: Delayed invalidate to update sigstate.
18:24:32/15496/keycache.cpp:insertOrUpdateInFprMap Lost secret info on update. Merging.
18:24:32/15496/keycache.cpp:do_update Update job done
18:24:32/11956/gpgoladdin.cpp:GetCustomUI_MIME: GetCustomUI_MIME for id: Microsoft.Outlook.Explorer
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: ribbonLoaded
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 11
18:24:32/15500/windowmessages.cpp:do_in_ui_thread: Sending message of type 1101
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e760970'
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e7e9d30'
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e7e9470'
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1101
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Invalidating UI
18:24:33/11956/gpgoladdin.cpp:invalidateRibbons: Invalidating ribbon: 000002035ddb5750
18:24:33/11956/gpgoladdin.cpp:invalidateRibbons: Invalidation done.
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Invalidation done
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:34/15092/cpphelp.cpp:in_de_vs_mode: Checking for de-vs mode.
18:24:34/15092/gpgoladdin.cpp:init_gpgme_config: init_gpgme_config de_vs_mode 0
18:25:16/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:25:16/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035ea410b0
18:25:16/16324/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:25:16/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note'
18:25:16/11956/mapihelp.cpp:change_message_class_ipm_note: content type is 'multipart/mixed'
18:25:16/11956/mapihelp.cpp:mapi_get_body_as_stream: OpenProperty tag=83ca0102 failed: hr=0x8004010f
18:25:16/11956/mapihelp.cpp:get_msgcls_from_pgp_lines: Detected non whitespace T before a PGP Marker
18:25:16/11956/mailitem-events.cpp:Invoke: Non crypto mail 0000020350cf3560 opened. Updating sigstatus.
18:25:16/11956/mailitem-events.cpp:Invoke: Canceling write event.
18:25:16/11956/mailitem-events.cpp:Invoke: Removing Mail for message: 000002035e0f7df0.
18:25:16/11956/oomhelp.cpp:lookup_oom_dispid: error looking up dispid(Categories)=6828: hr=0x8c540108
18:25:16/11956/categorymanager.cpp:removeCategory Failed to remvoe category.
18:25:16/11956/categorymanager.cpp:unregisterCategory: Unregister category gpgol_string_1 in store gpgol_string_5 ref now 0
18:25:16/11956/categorymanager.cpp:unregisterCategory: Deleting gpgol_string_1 for store gpgol_string_5
18:25:16/11956/oomhelp.cpp:delete_category: Deleted category 'gpgol_string_1'
18:25:16/11956/parsecontroller.cpp:~ParseController
18:25:16/11956/mimedataprovider.cpp:~MimeDataProvider
18:25:16/11956/mimedataprovider.cpp:~MimeDataProvider
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:25:16/1544/windowmessages.cpp:do_in_ui_thread: Sending message of type 1101
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1101
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Invalidating UI
18:25:16/11956/gpgoladdin.cpp:invalidateRibbons: Invalidating ribbon: 000002035ddb5750
18:25:16/11956/gpgoladdin.cpp:invalidateRibbons: Invalidation done.
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Invalidation done
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb670'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb670
18:25:16/11956/ribbon-callbacks.cpp:get_sig_label: No mail.
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb850'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb850
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb850'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb850
18:25:22/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:25:22/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035ef62ca0
18:25:22/6948/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:25:22/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note'
18:25:22/11956/mapihelp.cpp:change_message_class_ipm_note: content type is 'multipart/encrypted'
18:25:22/11956/mapihelp.cpp:change_message_class_ipm_note: protocol is 'application/pgp-encrypted'
18:25:22/11956/mapihelp.cpp:mapi_change_message_class: saving old message class
18:25:22/11956/ERROR/mapihelp.cpp:mapi_change_message_class: can't save old message class: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: message has 2 attachments
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: attachment info:
18:25:22/11956/ 3435173 mt=0 fname=gpgol_string_7' ct=application/pgp-encrypted' ct_parms=`(null)'
18:25:22/11956/ 3435205 mt=0 fname=gpgol_string_8' ct=application/octet-stream' ct_parms=`(null)'
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435173 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435205 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005
18:25:22/11956/oomhelp.cpp:put_pa_variant: failure: invoking SetProperty p=0000000000000000 vt=0 hr=0x80020009 argErr=0x0
18:25:22/11956/oomhelp.cpp:get_unique_id: failed to set uid '73470a24-55fc-4be4-8621-cc7d64ff68a0' for '000002035ef62ca0'
18:25:22/11956/mail.cpp:setUUID_o: uuid for 0000020350cf37c0 set to (null)
18:25:22/11956/mail.cpp:setUUID_o: Failed to get/set uuid for 000002035ef62ca0
18:25:22/11956/mailitem-events.cpp:Invoke: Failed to set uuid.
18:25:22/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:25:22/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:25:22/11956/gpgoladdin.cpp:GetCustomUI_MIME: GetCustomUI_MIME for id: Microsoft.Outlook.Mail.Read
18:25:24/11956/windowmessages.cpp:gpgol_hook: Got WM_CLOSE
18:25:25/11956/windowmessages.cpp:gpgol_hook: Got WM_CLOSE
18:25:25/11956/windowmessages.cpp:gpgol_hook: WM_CLOSE windowmessage for explorer. Shutting down.
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Application Event Sink;
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Explorers Event Sink;
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Explorer Event Sinks;
18:25:25/11956/storing option smimeHtmlWarnShown' value=0'
18:25:27/11956/mailitem-events.cpp:Invoke: Removing Mail for message: 000002035ea410b0.
18:25:27/11956/gpgoladdin.cpp:~GpgolRibbonExtender: cleaning up GpgolRibbonExtender object;

that error means that the message was somehow corrupted during transfer. Are you maybe using ftp in text mode on a binary message for example?
You could ask your communication partner to send you messages in text (ASCII Armor) mode which is more robust.
In Kleopatra you can change that in Settings -> Configure Kleopatra -> Crypto Operations -> Create signed or encrypted files as text files.
On the command line you need to add "--armor" option.

In Wald someone reports that this also appears to happen when decrypting. https://wald.intevation.org/forum/message.php?msg_id=6377 Probably run-threaded will help to flush this out.

The usual reasons for corruptions of binary data are FTP transfers in text mode; or opening a file with a Windows editor.

Got another reliable report in the Wald Forum about this. https://wald.intevation.org/forum/message.php?msg_id=6371&group_id=11

No I do not think so. Because that would already be currently the case. If you had a subverted Root CA of course you can attack. But we are only talking about CRL / OCSP here. A root CA that does not provide a CRL for certificate X is OK. As long as the Root CA that issued X issues a CRL for that. Well the usual CRL / OCSP denial of service is still possible but I don't see any subversion.

Interesting idea but it does not help against attacks because all root CA are considered equal (virtually cross-signed). Thus a single not checked root CA allows to subvert all certificates.

I wonder if the best thing here might be another flag in the trustlist to disable CRL/OCSP checks for a single root certificate chain. I had such a request in the Gpg4win forums. Someone had a single unreacable CRL / OCSP and had to disable globally all checks for all other certs, too.

Fix was released with 2.2.11

Hi, it's OpenPGP and the same Exchange server. Perhaps it has to do with
the "Unterhaltungsmodus" from the error message.

I'm pretty sure I tested this in the past using the Outlook.com web interface. The mails should show with an unknown attachment (the signature). I can't think of any changes recently that would have changed it. I'll check again.

I don't think this works for me in that way.

Use that function as early as possible. The gpg-error tool has also be enahnced on Windows:

Thanks. In the meantime GpgOL takes it's language from the Outlook configured display language setting. I'll add support for override locale to gpgol so that the locale is set accordingly

Regession due to my commit 10 days after the last release. Thus no need to do a release.

Should we close this or do you want to investigate why the segfault happened after the error?

Thanks.

I ran it with GPGME_DEBUG and it errors out at
GPGME 2018-12-07 10:34:32 <0x19c43> gpgme_op_genkey_start:293: error: Invalid argument <GPGME>

Sorry, I am still not able to replicate it:

Just by going through the standard "new key wizard".

Can you give me a reproducer on Linux. I am not able to reproduce it. What versions of gnupg and gpgme are you using (see gpa's about)

It might also be noted there in the installation instructions that it might be better not to run the installer from the download folder. (internal tracker issue45)

This is a new bug, I believe, but perhaps it only appears with "broken"
S/MIME-messages of this type, So I'll first post it here:

fine with me

I'll leave the fallback to "just try to decrypt" in though because it is better then doing nothing like we did before.

Thanks, from that log I can understand the problem:

Ok, with the beta gpgol the mail is successfully decrypted. This is the debug.log:

You are running in a codepath that means "Outlook told us this was S/MIME, but we have not seen the proper message headers and neither does the data look like it is S/MIME."
Sadly your log does not help much in that case because it marked the mail as bad and aborts.
I've changed that "marking a mail as bad" so that future logs will be more helpful and that it will still try to treat this case as "encrypted" maybe that will already work, although I doubt it. The log will at least be a bit more helpful.

additional info: I have their certificate(s) and sending encrypted mails to them is successful.

I forgot the debug log:

Gets reported multiple times and should be fixed for the next Gpg4win release as it is a bad first impression. (Although it can convert users to Kleopatra ;-) )

not yet, I try to get to it this week.

I'll look into it.

I'm closing this issues as "Invalid" because it is not an issue of Gpg4win. You can still comment and discuss here.

Ok. If you can confirm that then it means that my analysis is right. Still unexpected to get an error there. I have to do some more tests with Exchange Online but that would be another issue. If this issue is fixed by turning of debugging then it will also be fixed by my patches.

You are right that Outlook behaves normally if debugging is deactivated.
I had major problems with 3.1.4 and never used it until 3.1.5 came
along, so I guess it might be an existing problem.

While I can't reproduce it myself (because I probably don't have the right mails in my exchange) looking at your log I think that I see the problem there might be an issue with the error handling in openProperty. So for old mails the openProperty probably fails because we have exchange online for that and the property is not yet available in Outlook and then the error is not correctly handled and it crashes.

3.1.5 was released on 13.11.2018

Was released with 3.1.5

Was released with 3.1.5

3.1.5 is released with this change.

This should work with Gpg4win-3.1.5

My problem isn´t linked to forwarding encrypted e-mails and / or attachments. It occurs by ordinary PGP mails WITH attachments which are not ASCII format. Encrypted e-mails without attachmoments or in ASCII format will be delivered.

So for me, sending encrypted attachments by selecting them from disk works fine for attachments. up to ~200k (I haven't tried larger ones).

Thank you very much for the quick response and try-out in detail!

Bug or user error?

Thanks for reporting your problem. We are highly interested in any crash. But please note that our minimum supported Exchange Version is 2010 because 2007 has reached end of life in april 2017. So I cannot test with that Server.

I'm lowering the priority as this does not appear to be a general problem. Otherwise more people would have reported it and I can't reproduce it yet.