--- /dev/null
+Return-Path: <david@tethera.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by olra.theworths.org (Postfix) with ESMTP id 2362B431FBC\r
+ for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 04:43:47 -0800 (PST)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: 2.438\r
+X-Spam-Level: **\r
+X-Spam-Status: No, score=2.438 tagged_above=-999 required=5\r
+ tests=[DNS_FROM_AHBL_RHSBL=2.438] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+ by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id TV3cxzdi2tZK for <notmuch@notmuchmail.org>;\r
+ Thu, 29 Jan 2015 04:43:44 -0800 (PST)\r
+Received: from mx.xen14.node3324.gplhost.com (gitolite.debian.net\r
+ [87.98.215.224])\r
+ (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))\r
+ (No client certificate requested)\r
+ by olra.theworths.org (Postfix) with ESMTPS id D4949431FAF\r
+ for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 04:43:43 -0800 (PST)\r
+Received: from remotemail by mx.xen14.node3324.gplhost.com with local (Exim\r
+ 4.80) (envelope-from <david@tethera.net>)\r
+ id 1YGoQr-0003ZI-8c; Thu, 29 Jan 2015 12:42:49 +0000\r
+Received: (nullmailer pid 9114 invoked by uid 1000); Thu, 29 Jan 2015\r
+ 12:42:36 -0000\r
+From: David Bremner <david@tethera.net>\r
+To: gmime-devel-list@gnome.org\r
+Subject: gmime and S/MIME\r
+User-Agent: Notmuch/0.19+48~gb74ed1c (http://notmuchmail.org) Emacs/24.4.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Thu, 29 Jan 2015 13:42:35 +0100\r
+Message-ID: <87twz9wyf8.fsf@maritornes.cs.unb.ca>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain\r
+Cc: notmuch@notmuchmail.org\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Thu, 29 Jan 2015 12:43:47 -0000\r
+\r
+\r
+With a few others, I've been attempting to get S/MIME supported in\r
+notmuch (which as you might or might not remember is using gmime\r
+underneath). The signature verification part is working OK, but I've\r
+gotten a bit bogged down trying to get decryption working.\r
+\r
+What I have learned is that according RFC5751, smime message (parts)\r
+look like\r
+\r
+ Media type: application/pkcs7-mime\r
+ parameters: any\r
+ file suffix: any\r
+\r
+ Media type: multipart/signed\r
+ parameters: protocol="application/pkcs7-signature"\r
+ file suffix: any\r
+\r
+ Media type: application/octet-stream\r
+ parameters: any\r
+ file suffix: p7m, p7s, p7c, p7z\r
+\r
+Unless I miss something, out of the box there is only support for\r
+decrypting multipart/encrypted. In particular the gmime tests for\r
+S/MIME use this "container format" [1].\r
+\r
+So I'm wondering if I'm confused about the RFC(s), or about GMIME, or is\r
+one suppose to write analogs of g_mime_multipart_encrypted_decrypt for\r
+other top level parts?\r
+\r
+Cheers,\r
+\r
+David\r
+\r
+[1]: https://github.com/GNOME/gmime/blob/master/tests/test-smime.c\r