Re: Multiple signatures over a document

[Jon Callas <[e-mail]>]

> I cannot resolve, how to correctly calculate multiple signatures over
> the document. I'm hashing entire document body + beginning of
> signature (as described in 2440), and everything is ok.
> But, when I'm producing two old-style signatures :
> 1) GnuPG checks only the first one, and says that it's ok
> 2) PGP 8.1 checks both, but says that first one is invalid, and the
> second is ok
>
> Producing two new-style signatures (with one-pass signature packets),
> getting :
> 1) GnuPG checks both, and says that they're correct.
> 2) PGP 8.1 checks both, and says that first is invalid, and second one
> is valid.
>
> It seems, that PGP calculates the signature over the whole document +
> bodies of other signatures.
>
> But from 2440 it seems, that signed hash must not include other
> signatures.
>
> Please, anybody can clearly describe, what behavior is correct?
>
> And, maybe, such situation must be described in 2440?

Could you provide a sample document to show the issue?

	Jon