Re: SMIME signature verification patches, v4
authorDaniel Kahn Gillmor <dkg@fifthhorseman.net>
Thu, 28 Jan 2016 06:56:05 +0000 (01:56 +1900)
committerW. Trevor King <wking@tremily.us>
Sat, 20 Aug 2016 23:20:56 +0000 (16:20 -0700)
a7/d8fde2aea5e34295306ac1cd5944caf89a6276 [new file with mode: 0644]

diff --git a/a7/d8fde2aea5e34295306ac1cd5944caf89a6276 b/a7/d8fde2aea5e34295306ac1cd5944caf89a6276
new file mode 100644 (file)
index 0000000..7bd4924
--- /dev/null
@@ -0,0 +1,172 @@
+Return-Path: <dkg@fifthhorseman.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by arlo.cworth.org (Postfix) with ESMTP id 8B16F6DE014A\r
+ for <notmuch@notmuchmail.org>; Wed, 27 Jan 2016 22:56:34 -0800 (PST)\r
+X-Virus-Scanned: Debian amavisd-new at cworth.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -0.053\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-0.053 tagged_above=-999 required=5\r
+ tests=[AWL=-0.053] autolearn=disabled\r
+Received: from arlo.cworth.org ([127.0.0.1])\r
+ by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id oamW-fIcmEpH for <notmuch@notmuchmail.org>;\r
+ Wed, 27 Jan 2016 22:56:31 -0800 (PST)\r
+Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
+ by arlo.cworth.org (Postfix) with ESMTP id B68646DE0173\r
+ for <notmuch@notmuchmail.org>; Wed, 27 Jan 2016 22:56:31 -0800 (PST)\r
+Received: from fifthhorseman.net (ool-6c3a0662.static.optonline.net\r
+ [108.58.6.98])\r
+ by che.mayfirst.org (Postfix) with ESMTPSA id 0191FF991;\r
+ Thu, 28 Jan 2016 01:56:11 -0500 (EST)\r
+Received: by fifthhorseman.net (Postfix, from userid 1000)\r
+ id CCDB71FF94; Thu, 28 Jan 2016 01:56:12 -0500 (EST)\r
+From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
+To: David Bremner <david@tethera.net>, notmuch@notmuchmail.org\r
+Subject: Re: SMIME signature verification patches, v4\r
+In-Reply-To: <1453652479-15968-1-git-send-email-david@tethera.net>\r
+References: <1453652479-15968-1-git-send-email-david@tethera.net>\r
+User-Agent: Notmuch/0.21+72~gd8c4f1c (http://notmuchmail.org) Emacs/24.5.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Thu, 28 Jan 2016 01:56:05 -0500\r
+Message-ID: <87lh7ab3ay.fsf@alice.fifthhorseman.net>\r
+MIME-Version: 1.0\r
+Content-Type: multipart/signed; boundary="=-=-=";\r
+ micalg=sha256; protocol="application/pkcs7-signature"\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.20\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <https://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch/>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <https://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Thu, 28 Jan 2016 06:56:34 -0000\r
+\r
+--=-=-=\r
+Content-Type: text/plain\r
+\r
+On Sun 2016-01-24 11:21:14 -0500, David Bremner wrote:\r
+> This is a simple rebase of\r
+>\r
+>      id:1450100337-31655-1-git-send-email-david@tethera.net\r
+>\r
+> The first 3 patches of that series are now in master.\r
+\r
+FWIW, i'm now running with this patch series, and i can verify S/MIME\r
+signatures with it.\r
+\r
+When verifying a correct signature, though, the only thing i seem to get\r
+in notmuch-emacs (or in the notmuch show --verify output) is the view of\r
+some kind of fingerprint of the key, with no human-readable name or\r
+e-mail address associated with it.\r
+\r
+for example:\r
+\r
+                  "sigstatus" : [\r
+                     {\r
+                        "created" : 1453962340,\r
+                        "status" : "good",\r
+                        "fingerprint" : "3E65C58C306C1C42CA5056903B4E6C3C7DF15AD8",\r
+                        "expires" : 1485215999\r
+                     }\r
+                  ],\r
+\r
+whereas the OpenPGP PGP/MIME cleartext signature show:\r
+\r
+                 "sigstatus" : [\r
+                     {\r
+                        "status" : "good",\r
+                        "userid" : " Daniel Kahn Gillmor <dkg@fifthhorseman.net>",\r
+                        "fingerprint" : "EDB2E74F56FCF2B67297B73524ECFF5AFF68370A",\r
+                        "created" : 1453925746\r
+                     }\r
+\r
+This lack of userid be a function of my own S/MIME setup (i'm not sure\r
+whether i've got the keys and certs set up exactly right), or of a\r
+failure in gmime's pkcs7 signature handling code.  But this is an\r
+improvement over the unpatched notmuch anyway.\r
+\r
+Note that none of this deals with S/MIME-enveloped (encrypted) e-mails\r
+yet either.\r
+\r
+My e-mail certificates and things are now set up within emacs (i'm using\r
+EPG instead of openssl) -- i should be able to sign this mail,\r
+and anyone else running this series should be able to verify it.\r
+\r
+I've rebased my own crypto series (indexing cleartext) on top of this\r
+series, and it also works fine (though there were a few commits that\r
+were tricky to rebase).  I'd like it if this S/MIME patch series would\r
+get upstreamed!\r
+\r
+    --dkg\r
+\r
+--=-=-=\r
+Content-Type: application/pkcs7-signature; name=smime.p7s\r
+Content-Transfer-Encoding: base64\r
+Content-Disposition: attachment; filename=smime.p7s\r
+\r
+MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCfgw\r
+ggSvMIIDl6ADAgECAhEA4CPLFRKDU4mtYW56VGdrITANBgkqhkiG9w0BAQsFADBvMQswCQYDVQQG\r
+EwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRU\r
+UCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTE0MTIyMjAw\r
+MDAwMFoXDTIwMDUzMDEwNDgzOFowgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1h\r
+bmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEw\r
+PwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBF\r
+bWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAImxDdp6UxlOcFIdvFamBia3\r
+uEngludRq/HwWhNJFaO0jBtgvHpRQqd5jKQi3xdhTpHVdiMKFNNKAn+2HQmAbqUEPdm6uxb+oYep\r
+LkNSQxZ8rzJQyKZPWukI2M+TJZx7iOgwZOak+FaA/SokFDMXmaxE5WmLo0YGS8Iz1OlAnwawsayT\r
+QLm1CJM6nCpToxDbPSBhPFUDjtlOdiUCISn6o3xxdk/u4V+B6ftUgNvDezVSt4TeIj0sMC0xf1m9\r
+UjewM2ktQ+v61qXxl3dnUYzZ7ifrvKUHOHaMpKk4/9+M9QOsSb7K93OZOg8yq5yVOhM9DkY6V3Rh\r
+UL7GQD/L5OKfoiECAwEAAaOCARcwggETMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1Qa\r
+MB0GA1UdDgQWBBSSYWuC4aKgqk/sZ/HCo/e0gADB7DAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/\r
+BAgwBgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRV\r
+HSAAMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4\r
+dGVybmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3Nw\r
+LnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQELBQADggEBABsqbqxVwTqriMXY7c1V86prYSvACRAj\r
+mQ/FZmpvsfW0tXdeDwJhAN99Bf4Ss6SAgAD8+x1banICCkG8BbrBWNUmwurVTYT7/oKYz1gb4yJj\r
+nFL4uwU2q31Ypd6rO2Pl2tVz7+zg+3vio//wQiOcyraNTT7kSxgDsqgt1Ni7QkuQaYUQ26Y3NOh7\r
+4AEQpZzKOsefT4g0bopl0BqKu6ncyso20fT8wmQpNa/WsadxEdIDQ7GPPprsnjJT9HaSyoY0B7ks\r
+yuYcStiZDcGG4pCS+1pCaiMhEOllx/XVu37qjIUgAmLq0ToHLFnFmTPyOInltukWeh95FPZKEBom\r
++nyK+5swggVBMIIEKaADAgECAhB9gwtCT/pRNF/1IXxNcw7PMA0GCSqGSIb3DQEBCwUAMIGbMQsw\r
+CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3Jk\r
+MRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0yNTYgQ2xp\r
+ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTYwMTI0MDAwMDAwWhcN\r
+MTcwMTIzMjM1OTU5WjAmMSQwIgYJKoZIhvcNAQkBFhVka2dAZmlmdGhob3JzZW1hbi5uZXQwggEi\r
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPWBtSuDu5vFkO6vURZx+YIa5XUenadS58lOR\r
+58M17BwpKYFzKDXrSAUt7Ynw04u09c5mbTSBS5NPMlNmOcEI5b2QbDJda7NaOkGaiwOFDgks7EAr\r
+v3ib/ZXLn+R/t7fImi/VStYTEGIYMcUqg4+ssSxh1/3/8n4uFj9LLIR1KwfDVwv0NiYAol6dZ2zt\r
+deFvICVB19VfthUsWlIWP7cxUwrfplsOCsJ8+bwAzZVgb+tBcvCvXVtNaU+11BEoK/fOIZoI3CDw\r
+PMOgKNf9suUx2U2k4+plIz0dBWNwAWWAH6pfilyXzlGRP6za4pGC0XWGGMltKIUkfGev7q+DfxGD\r
+AgMBAAGjggHzMIIB7zAfBgNVHSMEGDAWgBSSYWuC4aKgqk/sZ/HCo/e0gADB7DAdBgNVHQ4EFgQU\r
+D/GO20jlXABuew/mfu4UsxsFfkswDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0l\r
+BBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9\r
+MDsGDCsGAQQBsjEBAgEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0\r
+L0NQUzBdBgNVHR8EVjBUMFKgUKBOhkxodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9TSEEy\r
+NTZDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGQBggrBgEFBQcBAQSB\r
+gzCBgDBYBggrBgEFBQcwAoZMaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPU0hBMjU2Q2xp\r
+ZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDov\r
+L29jc3AuY29tb2RvY2EuY29tMCAGA1UdEQQZMBeBFWRrZ0BmaWZ0aGhvcnNlbWFuLm5ldDANBgkq\r
+hkiG9w0BAQsFAAOCAQEAUQsoIz1JUYDR3CLTRWucX2+I8JwVkwGR4iwrpgiqi+HLcAinFaUPB3jH\r
+WJBU9761W1BZh+vZOHXHIKReADgplLylRx3wiDDyA2Uv+CREJyNZm3V0S5M5n4chQhcTjd127RHJ\r
+KusuSVMmCiV2w6K+JKanJRKOYw4LSB+45K+20exR9GnnrAbBYPqutiHmK5q60At+sXhTceLt3c9B\r
+ebFybFAU9vTTn4SvUu87TZ6gWyPJ2VSBQWDdsIV8h7PT+FdmYR16kIFI6eu4Z5FpoVbB9neNE9b8\r
+ir4WbS+neCkaCRUTkhOHXwHnfAno+cEcNRRFeBc30Hl357HPh0dscGRQvTGCAnIwggJuAgEBMIGw\r
+MIGbMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT\r
+YWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0y\r
+NTYgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEH2DC0JP+lE0X/Uh\r
+fE1zDs8wDQYJYIZIAWUDBAIBBQCggZMwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG\r
+9w0BCQUxDxcNMTYwMTI4MDY1NjA2WjAoBgkqhkiG9w0BCQ8xGzAZMAsGCWCGSAFlAwQBAjAKBggq\r
+hkiG9w0DBzAvBgkqhkiG9w0BCQQxIgQg5B+hCFR0TPkdaOz8MuOFE5QtrAxin21sulqcc9b7/vYw\r
+DQYJKoZIhvcNAQEBBQAEggEAhLxXYrVVGfUtFRpiz5ht4Ln+b9ZKtvLXbTDsvNNHTk1thXEJiD61\r
+ro71fjgy9pnVNfudKMY/JGvs4lHDOoo5KzCKHDOiF4mCuEfNe9RIN9qrXM4gMiWX9QneHaQXkyOC\r
+yYMo2Fuf48V0ciiR4WDnWJCK+Kx046KltML7c8nh9y3JRXoI4XSr12gfbCGFBw1qooQfxizQM6rL\r
+nHFntFKTgbW9gaVlpAkAeqvB+Qj6vMaWgBuZP/jE10BE8YOfTecmsMrOrLIDEiPJ3HbOqb7nBh8i\r
+a0JypUUFs9Md4eGfIVKW3lADk/I3h7z7ADQYbmGcnCw4+GTUdvUWcYZNB+hVmgAAAAAAAA==\r
+--=-=-=--\r