1 Return-Path: <fejj@gnome.org>
\r
2 X-Original-To: notmuch@notmuchmail.org
\r
3 Delivered-To: notmuch@notmuchmail.org
\r
4 Received: from localhost (localhost [127.0.0.1])
\r
5 by olra.theworths.org (Postfix) with ESMTP id 3B21D431FC4
\r
6 for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 06:40:58 -0800 (PST)
\r
7 X-Virus-Scanned: Debian amavisd-new at olra.theworths.org
\r
11 X-Spam-Status: No, score=2.438 tagged_above=-999 required=5
\r
12 tests=[DNS_FROM_AHBL_RHSBL=2.438, RCVD_IN_DNSWL_NONE=-0.0001]
\r
14 Received: from olra.theworths.org ([127.0.0.1])
\r
15 by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)
\r
16 with ESMTP id H+pjH8h+CXKV for <notmuch@notmuchmail.org>;
\r
17 Thu, 29 Jan 2015 06:40:54 -0800 (PST)
\r
18 Received: from resqmta-po-10v.sys.comcast.net (resqmta-po-10v.sys.comcast.net
\r
20 (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
\r
21 (No client certificate requested)
\r
22 by olra.theworths.org (Postfix) with ESMTPS id 94619431FBC
\r
23 for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 06:40:54 -0800 (PST)
\r
24 Received: from resomta-po-12v.sys.comcast.net ([96.114.154.236])
\r
25 by resqmta-po-10v.sys.comcast.net with comcast
\r
26 id lqg51p00C56HXL001qgtqe; Thu, 29 Jan 2015 14:40:53 +0000
\r
27 Received: from [192.168.1.102] ([24.91.170.86])
\r
28 by resomta-po-12v.sys.comcast.net with comcast
\r
29 id lqgr1p00a1sBWGw01qgsuU; Thu, 29 Jan 2015 14:40:53 +0000
\r
30 Message-ID: <54CA467B.30408@gnome.org>
\r
31 Date: Thu, 29 Jan 2015 09:40:59 -0500
\r
32 From: Jeffrey Stedfast <fejj@gnome.org>
\r
33 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64;
\r
34 rv:31.0) Gecko/20100101 Thunderbird/31.4.0
\r
36 To: David Bremner <david@tethera.net>, gmime-devel-list@gnome.org
\r
37 Subject: Re: [gmime-devel] gmime and S/MIME
\r
38 References: <87twz9wyf8.fsf@maritornes.cs.unb.ca>
\r
39 In-Reply-To: <87twz9wyf8.fsf@maritornes.cs.unb.ca>
\r
40 Content-Type: text/plain; charset=windows-1252; format=flowed
\r
41 Content-Transfer-Encoding: quoted-printable
\r
42 Cc: notmuch@notmuchmail.org
\r
43 X-BeenThere: notmuch@notmuchmail.org
\r
44 X-Mailman-Version: 2.1.13
\r
46 List-Id: "Use and development of the notmuch mail system."
\r
47 <notmuch.notmuchmail.org>
\r
48 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,
\r
49 <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>
\r
50 List-Archive: <http://notmuchmail.org/pipermail/notmuch>
\r
51 List-Post: <mailto:notmuch@notmuchmail.org>
\r
52 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>
\r
53 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,
\r
54 <mailto:notmuch-request@notmuchmail.org?subject=subscribe>
\r
55 X-List-Received-Date: Thu, 29 Jan 2015 14:40:59 -0000
\r
59 On 1/29/2015 7:42 AM, David Bremner wrote:
\r
60 > With a few others, I've been attempting to get S/MIME supported in
\r
61 > notmuch (which as you might or might not remember is using gmime
\r
62 > underneath). The signature verification part is working OK, but I've
\r
63 > gotten a bit bogged down trying to get decryption working.
\r
65 > What I have learned is that according RFC5751, smime message (parts)
\r
68 > Media type: application/pkcs7-mime
\r
72 > Media type: multipart/signed
\r
73 > parameters: protocol=3D"application/pkcs7-signature"
\r
76 > Media type: application/octet-stream
\r
78 > file suffix: p7m, p7s, p7c, p7z
\r
80 > Unless I miss something, out of the box there is only support for
\r
81 > decrypting multipart/encrypted. In particular the gmime tests for
\r
82 > S/MIME use this "container format" [1].
\r
84 Correct, I don't think I ever got around to implementing the=20
\r
85 GMimeApplicationPkcs7Mime class.
\r
88 > So I'm wondering if I'm confused about the RFC(s), or about GMIME, or i=
\r
90 > one suppose to write analogs of g_mime_multipart_encrypted_decrypt for
\r
91 > other top level parts?
\r
93 You are not confused. I would probably hesitate to say that it was my=20
\r
94 *intention* for everyone to implement their own S/MIME class for=20
\r
95 pkcs7-mime, but in any case, that is what needs to be done right now :(
\r
97 FWIW, I've written another library called MimeKit in C# which shares a=20
\r
98 similar design to GMime that is hosted on GitHub that implements the=20
\r
101 https://github.com/jstedfast/MimeKit/blob/master/MimeKit/Cryptography/App=
\r
102 licationPkcs7Mime.cs
\r
104 Hopefully that helps provide you with ideas on how to implement the same =
\r
106 sort of thing using GMime for notmuch.
\r
108 (btw, if you end up implementing this, I'd love to accept your patches=20
\r