a7/d8fde2aea5e34295306ac1cd5944caf89a6276

   1 Return-Path: <dkg@fifthhorseman.net>\r
   2 X-Original-To: notmuch@notmuchmail.org\r
   3 Delivered-To: notmuch@notmuchmail.org\r
   4 Received: from localhost (localhost [127.0.0.1])\r
   5  by arlo.cworth.org (Postfix) with ESMTP id 8B16F6DE014A\r
   6  for <notmuch@notmuchmail.org>; Wed, 27 Jan 2016 22:56:34 -0800 (PST)\r
   7 X-Virus-Scanned: Debian amavisd-new at cworth.org\r
   8 X-Spam-Flag: NO\r
   9 X-Spam-Score: -0.053\r
  10 X-Spam-Level: \r
  11 X-Spam-Status: No, score=-0.053 tagged_above=-999 required=5\r
  12  tests=[AWL=-0.053] autolearn=disabled\r
  13 Received: from arlo.cworth.org ([127.0.0.1])\r
  14  by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)\r
  15  with ESMTP id oamW-fIcmEpH for <notmuch@notmuchmail.org>;\r
  16  Wed, 27 Jan 2016 22:56:31 -0800 (PST)\r
  17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
  18  by arlo.cworth.org (Postfix) with ESMTP id B68646DE0173\r
  19  for <notmuch@notmuchmail.org>; Wed, 27 Jan 2016 22:56:31 -0800 (PST)\r
  20 Received: from fifthhorseman.net (ool-6c3a0662.static.optonline.net\r
  21  [108.58.6.98])\r
  22  by che.mayfirst.org (Postfix) with ESMTPSA id 0191FF991;\r
  23  Thu, 28 Jan 2016 01:56:11 -0500 (EST)\r
  24 Received: by fifthhorseman.net (Postfix, from userid 1000)\r
  25  id CCDB71FF94; Thu, 28 Jan 2016 01:56:12 -0500 (EST)\r
  26 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
  27 To: David Bremner <david@tethera.net>, notmuch@notmuchmail.org\r
  28 Subject: Re: SMIME signature verification patches, v4\r
  29 In-Reply-To: <1453652479-15968-1-git-send-email-david@tethera.net>\r
  30 References: <1453652479-15968-1-git-send-email-david@tethera.net>\r
  31 User-Agent: Notmuch/0.21+72~gd8c4f1c (http://notmuchmail.org) Emacs/24.5.1\r
  32  (x86_64-pc-linux-gnu)\r
  33 Date: Thu, 28 Jan 2016 01:56:05 -0500\r
  34 Message-ID: <87lh7ab3ay.fsf@alice.fifthhorseman.net>\r
  35 MIME-Version: 1.0\r
  36 Content-Type: multipart/signed; boundary="=-=-=";\r
  37  micalg=sha256; protocol="application/pkcs7-signature"\r
  38 X-BeenThere: notmuch@notmuchmail.org\r
  39 X-Mailman-Version: 2.1.20\r
  40 Precedence: list\r
  41 List-Id: "Use and development of the notmuch mail system."\r
  42  <notmuch.notmuchmail.org>\r
  43 List-Unsubscribe: <https://notmuchmail.org/mailman/options/notmuch>,\r
  44  <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
  45 List-Archive: <http://notmuchmail.org/pipermail/notmuch/>\r
  46 List-Post: <mailto:notmuch@notmuchmail.org>\r
  47 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
  48 List-Subscribe: <https://notmuchmail.org/mailman/listinfo/notmuch>,\r
  49  <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
  50 X-List-Received-Date: Thu, 28 Jan 2016 06:56:34 -0000\r
  51 \r
  52 --=-=-=\r
  53 Content-Type: text/plain\r
  54 \r
  55 On Sun 2016-01-24 11:21:14 -0500, David Bremner wrote:\r
  56 > This is a simple rebase of\r
  57 >\r
  58 >      id:1450100337-31655-1-git-send-email-david@tethera.net\r
  59 >\r
  60 > The first 3 patches of that series are now in master.\r
  61 \r
  62 FWIW, i'm now running with this patch series, and i can verify S/MIME\r
  63 signatures with it.\r
  64 \r
  65 When verifying a correct signature, though, the only thing i seem to get\r
  66 in notmuch-emacs (or in the notmuch show --verify output) is the view of\r
  67 some kind of fingerprint of the key, with no human-readable name or\r
  68 e-mail address associated with it.\r
  69 \r
  70 for example:\r
  71 \r
  72                   "sigstatus" : [\r
  73                      {\r
  74                         "created" : 1453962340,\r
  75                         "status" : "good",\r
  76                         "fingerprint" : "3E65C58C306C1C42CA5056903B4E6C3C7DF15AD8",\r
  77                         "expires" : 1485215999\r
  78                      }\r
  79                   ],\r
  80 \r
  81 whereas the OpenPGP PGP/MIME cleartext signature show:\r
  82 \r
  83                  "sigstatus" : [\r
  84                      {\r
  85                         "status" : "good",\r
  86                         "userid" : " Daniel Kahn Gillmor <dkg@fifthhorseman.net>",\r
  87                         "fingerprint" : "EDB2E74F56FCF2B67297B73524ECFF5AFF68370A",\r
  88                         "created" : 1453925746\r
  89                      }\r
  90 \r
  91 This lack of userid be a function of my own S/MIME setup (i'm not sure\r
  92 whether i've got the keys and certs set up exactly right), or of a\r
  93 failure in gmime's pkcs7 signature handling code.  But this is an\r
  94 improvement over the unpatched notmuch anyway.\r
  95 \r
  96 Note that none of this deals with S/MIME-enveloped (encrypted) e-mails\r
  97 yet either.\r
  98 \r
  99 My e-mail certificates and things are now set up within emacs (i'm using\r
 100 EPG instead of openssl) -- i should be able to sign this mail,\r
 101 and anyone else running this series should be able to verify it.\r
 102 \r
 103 I've rebased my own crypto series (indexing cleartext) on top of this\r
 104 series, and it also works fine (though there were a few commits that\r
 105 were tricky to rebase).  I'd like it if this S/MIME patch series would\r
 106 get upstreamed!\r
 107 \r
 108     --dkg\r
 109 \r
 110 --=-=-=\r
 111 Content-Type: application/pkcs7-signature; name=smime.p7s\r
 112 Content-Transfer-Encoding: base64\r
 113 Content-Disposition: attachment; filename=smime.p7s\r
 114 \r
 115 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCfgw\r
 116 ggSvMIIDl6ADAgECAhEA4CPLFRKDU4mtYW56VGdrITANBgkqhkiG9w0BAQsFADBvMQswCQYDVQQG\r
 117 EwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRU\r
 118 UCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTE0MTIyMjAw\r
 119 MDAwMFoXDTIwMDUzMDEwNDgzOFowgZsxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1h\r
 120 bmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMUEw\r
 121 PwYDVQQDEzhDT01PRE8gU0hBLTI1NiBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBF\r
 122 bWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAImxDdp6UxlOcFIdvFamBia3\r
 123 uEngludRq/HwWhNJFaO0jBtgvHpRQqd5jKQi3xdhTpHVdiMKFNNKAn+2HQmAbqUEPdm6uxb+oYep\r
 124 LkNSQxZ8rzJQyKZPWukI2M+TJZx7iOgwZOak+FaA/SokFDMXmaxE5WmLo0YGS8Iz1OlAnwawsayT\r
 125 QLm1CJM6nCpToxDbPSBhPFUDjtlOdiUCISn6o3xxdk/u4V+B6ftUgNvDezVSt4TeIj0sMC0xf1m9\r
 126 UjewM2ktQ+v61qXxl3dnUYzZ7ifrvKUHOHaMpKk4/9+M9QOsSb7K93OZOg8yq5yVOhM9DkY6V3Rh\r
 127 UL7GQD/L5OKfoiECAwEAAaOCARcwggETMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1Qa\r
 128 MB0GA1UdDgQWBBSSYWuC4aKgqk/sZ/HCo/e0gADB7DAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/\r
 129 BAgwBgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRV\r
 130 HSAAMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4\r
 131 dGVybmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3Nw\r
 132 LnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQELBQADggEBABsqbqxVwTqriMXY7c1V86prYSvACRAj\r
 133 mQ/FZmpvsfW0tXdeDwJhAN99Bf4Ss6SAgAD8+x1banICCkG8BbrBWNUmwurVTYT7/oKYz1gb4yJj\r
 134 nFL4uwU2q31Ypd6rO2Pl2tVz7+zg+3vio//wQiOcyraNTT7kSxgDsqgt1Ni7QkuQaYUQ26Y3NOh7\r
 135 4AEQpZzKOsefT4g0bopl0BqKu6ncyso20fT8wmQpNa/WsadxEdIDQ7GPPprsnjJT9HaSyoY0B7ks\r
 136 yuYcStiZDcGG4pCS+1pCaiMhEOllx/XVu37qjIUgAmLq0ToHLFnFmTPyOInltukWeh95FPZKEBom\r
 137 +nyK+5swggVBMIIEKaADAgECAhB9gwtCT/pRNF/1IXxNcw7PMA0GCSqGSIb3DQEBCwUAMIGbMQsw\r
 138 CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3Jk\r
 139 MRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0yNTYgQ2xp\r
 140 ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTYwMTI0MDAwMDAwWhcN\r
 141 MTcwMTIzMjM1OTU5WjAmMSQwIgYJKoZIhvcNAQkBFhVka2dAZmlmdGhob3JzZW1hbi5uZXQwggEi\r
 142 MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPWBtSuDu5vFkO6vURZx+YIa5XUenadS58lOR\r
 143 58M17BwpKYFzKDXrSAUt7Ynw04u09c5mbTSBS5NPMlNmOcEI5b2QbDJda7NaOkGaiwOFDgks7EAr\r
 144 v3ib/ZXLn+R/t7fImi/VStYTEGIYMcUqg4+ssSxh1/3/8n4uFj9LLIR1KwfDVwv0NiYAol6dZ2zt\r
 145 deFvICVB19VfthUsWlIWP7cxUwrfplsOCsJ8+bwAzZVgb+tBcvCvXVtNaU+11BEoK/fOIZoI3CDw\r
 146 PMOgKNf9suUx2U2k4+plIz0dBWNwAWWAH6pfilyXzlGRP6za4pGC0XWGGMltKIUkfGev7q+DfxGD\r
 147 AgMBAAGjggHzMIIB7zAfBgNVHSMEGDAWgBSSYWuC4aKgqk/sZ/HCo/e0gADB7DAdBgNVHQ4EFgQU\r
 148 D/GO20jlXABuew/mfu4UsxsFfkswDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0l\r
 149 BBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUCMBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9\r
 150 MDsGDCsGAQQBsjEBAgEBATArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0\r
 151 L0NQUzBdBgNVHR8EVjBUMFKgUKBOhkxodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9TSEEy\r
 152 NTZDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGQBggrBgEFBQcBAQSB\r
 153 gzCBgDBYBggrBgEFBQcwAoZMaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPU0hBMjU2Q2xp\r
 154 ZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDov\r
 155 L29jc3AuY29tb2RvY2EuY29tMCAGA1UdEQQZMBeBFWRrZ0BmaWZ0aGhvcnNlbWFuLm5ldDANBgkq\r
 156 hkiG9w0BAQsFAAOCAQEAUQsoIz1JUYDR3CLTRWucX2+I8JwVkwGR4iwrpgiqi+HLcAinFaUPB3jH\r
 157 WJBU9761W1BZh+vZOHXHIKReADgplLylRx3wiDDyA2Uv+CREJyNZm3V0S5M5n4chQhcTjd127RHJ\r
 158 KusuSVMmCiV2w6K+JKanJRKOYw4LSB+45K+20exR9GnnrAbBYPqutiHmK5q60At+sXhTceLt3c9B\r
 159 ebFybFAU9vTTn4SvUu87TZ6gWyPJ2VSBQWDdsIV8h7PT+FdmYR16kIFI6eu4Z5FpoVbB9neNE9b8\r
 160 ir4WbS+neCkaCRUTkhOHXwHnfAno+cEcNRRFeBc30Hl357HPh0dscGRQvTGCAnIwggJuAgEBMIGw\r
 161 MIGbMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT\r
 162 YWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDFBMD8GA1UEAxM4Q09NT0RPIFNIQS0y\r
 163 NTYgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEH2DC0JP+lE0X/Uh\r
 164 fE1zDs8wDQYJYIZIAWUDBAIBBQCggZMwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG\r
 165 9w0BCQUxDxcNMTYwMTI4MDY1NjA2WjAoBgkqhkiG9w0BCQ8xGzAZMAsGCWCGSAFlAwQBAjAKBggq\r
 166 hkiG9w0DBzAvBgkqhkiG9w0BCQQxIgQg5B+hCFR0TPkdaOz8MuOFE5QtrAxin21sulqcc9b7/vYw\r
 167 DQYJKoZIhvcNAQEBBQAEggEAhLxXYrVVGfUtFRpiz5ht4Ln+b9ZKtvLXbTDsvNNHTk1thXEJiD61\r
 168 ro71fjgy9pnVNfudKMY/JGvs4lHDOoo5KzCKHDOiF4mCuEfNe9RIN9qrXM4gMiWX9QneHaQXkyOC\r
 169 yYMo2Fuf48V0ciiR4WDnWJCK+Kx046KltML7c8nh9y3JRXoI4XSr12gfbCGFBw1qooQfxizQM6rL\r
 170 nHFntFKTgbW9gaVlpAkAeqvB+Qj6vMaWgBuZP/jE10BE8YOfTecmsMrOrLIDEiPJ3HbOqb7nBh8i\r
 171 a0JypUUFs9Md4eGfIVKW3lADk/I3h7z7ADQYbmGcnCw4+GTUdvUWcYZNB+hVmgAAAAAAAA==\r
 172 --=-=-=--\r