[PATCH 5/6] cli: new crypto verify flag to handle verification

diff --git a/8a/897a92fbd667d9a38131e0212ae228e7715002 b/8a/897a92fbd667d9a38131e0212ae228e7715002
new file mode 100644 (file)
index 0000000..332bb65
--- /dev/null
+++ b/8a/897a92fbd667d9a38131e0212ae228e7715002
@@ -0,0 +1,177 @@
+Return-Path: <jrollins@finestructure.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+       by olra.theworths.org (Postfix) with ESMTP id 4F498431FBD\r
+       for <notmuch@notmuchmail.org>; Wed, 16 May 2012 14:56:36 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -2.3\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5\r
+       tests=[RCVD_IN_DNSWL_MED=-2.3] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+       by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+       with ESMTP id nMV+XNfsLRLw for <notmuch@notmuchmail.org>;\r
+       Wed, 16 May 2012 14:56:34 -0700 (PDT)\r
+Received: from outgoing-mail.its.caltech.edu (outgoing-mail.its.caltech.edu\r
+       [131.215.239.19])\r
+       by olra.theworths.org (Postfix) with ESMTP id 6C15D431FD9\r
+       for <notmuch@notmuchmail.org>; Wed, 16 May 2012 14:56:18 -0700 (PDT)\r
+Received: from earth-doxen.imss.caltech.edu (localhost [127.0.0.1])\r
+       by earth-doxen-postvirus (Postfix) with ESMTP id 35B8466E01A5\r
+       for <notmuch@notmuchmail.org>; Wed, 16 May 2012 14:56:18 -0700 (PDT)\r
+X-Spam-Scanned: at Caltech-IMSS on earth-doxen by amavisd-new\r
+Received: from finestructure.net (rrcs-184-74-199-219.nyc.biz.rr.com\r
+       [184.74.199.219]) (Authenticated sender: jrollins)\r
+       by earth-doxen-submit (Postfix) with ESMTP id 760F766E0189\r
+       for <notmuch@notmuchmail.org>; Wed, 16 May 2012 14:56:12 -0700 (PDT)\r
+Received: by finestructure.net (Postfix, from userid 1000)\r
+       id 20B99615; Wed, 16 May 2012 14:56:02 -0700 (PDT)\r
+From: Jameson Graef Rollins <jrollins@finestructure.net>\r
+To: Notmuch Mail <notmuch@notmuchmail.org>\r
+Subject: [PATCH 5/6] cli: new crypto verify flag to handle verification\r
+Date: Wed, 16 May 2012 14:55:58 -0700\r
+Message-Id: <1337205359-2444-6-git-send-email-jrollins@finestructure.net>\r
+X-Mailer: git-send-email 1.7.10\r
+In-Reply-To: <1337205359-2444-5-git-send-email-jrollins@finestructure.net>\r
+References: <1337205359-2444-1-git-send-email-jrollins@finestructure.net>\r
+       <1337205359-2444-2-git-send-email-jrollins@finestructure.net>\r
+       <1337205359-2444-3-git-send-email-jrollins@finestructure.net>\r
+       <1337205359-2444-4-git-send-email-jrollins@finestructure.net>\r
+       <1337205359-2444-5-git-send-email-jrollins@finestructure.net>\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+       <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Wed, 16 May 2012 21:56:36 -0000\r
+\r
+Use this flag rather than depend on the existence of an initialized\r
+gpgctx, to determine whether we should verify a multipart/signed.  We\r
+will be moving to create the ctx lazily, so we don't want to depend on\r
+it being previously initialized if it's not needed.\r
+---\r
+ mime-node.c      |    5 ++---\r
+ notmuch-client.h |    1 +\r
+ notmuch-reply.c  |    1 +\r
+ notmuch-show.c   |   14 +++++++++++---\r
+ 4 files changed, 15 insertions(+), 6 deletions(-)\r
+\r
+diff --git a/mime-node.c b/mime-node.c\r
+index 4faeffc..8cdabc8 100644\r
+--- a/mime-node.c\r
++++ b/mime-node.c\r
+@@ -183,8 +183,7 @@ _mime_node_create (mime_node_t *parent, GMimeObject *part)\r
+     }\r
+ \r
+     /* Handle PGP/MIME parts */\r
+-    if (GMIME_IS_MULTIPART_ENCRYPTED (part)\r
+-      && node->ctx->crypto.gpgctx && node->ctx->crypto.decrypt) {\r
++    if (GMIME_IS_MULTIPART_ENCRYPTED (part) && node->ctx->crypto.decrypt) {\r
+       if (node->nchildren != 2) {\r
+           /* this violates RFC 3156 section 4, so we won't bother with it. */\r
+           fprintf (stderr, "Error: %d part(s) for a multipart/encrypted "\r
+@@ -218,7 +217,7 @@ _mime_node_create (mime_node_t *parent, GMimeObject *part)\r
+                        (err ? err->message : "no error explanation given"));\r
+           }\r
+       }\r
+-    } else if (GMIME_IS_MULTIPART_SIGNED (part) && node->ctx->crypto.gpgctx) {\r
++    } else if (GMIME_IS_MULTIPART_SIGNED (part) && node->ctx->crypto.verify) {\r
+       if (node->nchildren != 2) {\r
+           /* this violates RFC 3156 section 5, so we won't bother with it. */\r
+           fprintf (stderr, "Error: %d part(s) for a multipart/signed message "\r
+diff --git a/notmuch-client.h b/notmuch-client.h\r
+index d86fab3..1ca111f 100644\r
+--- a/notmuch-client.h\r
++++ b/notmuch-client.h\r
+@@ -80,6 +80,7 @@ typedef struct notmuch_crypto {\r
+ #else\r
+     GMimeCipherContext* gpgctx;\r
+ #endif\r
++    notmuch_bool_t verify;\r
+     notmuch_bool_t decrypt;\r
+ } notmuch_crypto_t;\r
+ \r
+diff --git a/notmuch-reply.c b/notmuch-reply.c\r
+index 3c967a0..997fdd1 100644\r
+--- a/notmuch-reply.c\r
++++ b/notmuch-reply.c\r
+@@ -675,6 +675,7 @@ notmuch_reply_command (void *ctx, int argc, char *argv[])\r
+     int (*reply_format_func)(void *ctx, notmuch_config_t *config, notmuch_query_t *query, notmuch_crypto_t *crypto, notmuch_bool_t reply_all);\r
+     notmuch_crypto_t crypto = {\r
+       .decrypt = FALSE,\r
++      .verify = FALSE,\r
+       .gpgctx = NULL,\r
+     };\r
+     int format = FORMAT_DEFAULT;\r
+diff --git a/notmuch-show.c b/notmuch-show.c\r
+index c606333..99a10bd 100644\r
+--- a/notmuch-show.c\r
++++ b/notmuch-show.c\r
+@@ -985,6 +985,7 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+     const notmuch_show_format_t *format = &format_text;\r
+     notmuch_crypto_t crypto = {\r
+       .decrypt = FALSE,\r
++      .verify = FALSE,\r
+       .gpgctx = NULL,\r
+     };\r
+     notmuch_show_params_t params = {\r
+@@ -993,7 +994,6 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+       .crypto = crypto,\r
+     };\r
+     int format_sel = NOTMUCH_FORMAT_NOT_SPECIFIED;\r
+-    notmuch_bool_t verify = FALSE;\r
+     int exclude = EXCLUDE_TRUE;\r
+ \r
+     notmuch_opt_desc_t options[] = {\r
+@@ -1010,7 +1010,7 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+       { NOTMUCH_OPT_INT, &params.part, "part", 'p', 0 },\r
+       { NOTMUCH_OPT_BOOLEAN, &params.entire_thread, "entire-thread", 't', 0 },\r
+       { NOTMUCH_OPT_BOOLEAN, &params.crypto.decrypt, "decrypt", 'd', 0 },\r
+-      { NOTMUCH_OPT_BOOLEAN, &verify, "verify", 'v', 0 },\r
++      { NOTMUCH_OPT_BOOLEAN, &params.crypto.verify, "verify", 'v', 0 },\r
+       { 0, 0, 0, 0, 0 }\r
+     };\r
+ \r
+@@ -1020,6 +1020,10 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+       return 1;\r
+     }\r
+ \r
++    /* decryption implies verification */\r
++    if (params.crypto.decrypt)\r
++      params.crypto.verify = TRUE;\r
++\r
+     if (format_sel == NOTMUCH_FORMAT_NOT_SPECIFIED) {\r
+       /* if part was requested and format was not specified, use format=raw */\r
+       if (params.part >= 0)\r
+@@ -1054,7 +1058,7 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+       break;\r
+     }\r
+ \r
+-    if (params.crypto.decrypt || verify) {\r
++    if (params.crypto.decrypt || params.crypto.verify) {\r
+ #ifdef GMIME_ATLEAST_26\r
+       /* TODO: GMimePasswordRequestFunc */\r
+       params.crypto.gpgctx = g_mime_gpg_context_new (NULL, "gpg");\r
+@@ -1065,6 +1069,10 @@ notmuch_show_command (void *ctx, unused (int argc), unused (char *argv[]))\r
+       if (params.crypto.gpgctx) {\r
+           g_mime_gpg_context_set_always_trust ((GMimeGpgContext*) params.crypto.gpgctx, FALSE);\r
+       } else {\r
++          /* If we fail to create the gpgctx set the verify and\r
++           * decrypt flags to FALSE so we don't try to do any\r
++           * further verification or decryption */\r
++          params.crypto.verify = FALSE;\r
+           params.crypto.decrypt = FALSE;\r
+           fprintf (stderr, "Failed to construct gpg context.\n");\r
+       }\r
+-- \r
+1.7.10\r
+\r