Control: tags 679640 + help

I just wanted to forward a discussion between Patrick and myself around
the failure of enigmail 1.4.1 and icedove 10 in verifying PGP/MIME
clearsigned messages that are embedded within another (non-signed) MIME
part.  the prognosis doesn't look good at getting this resolved,
unfortunately.

attached is part of the exchange between patrick and myself, and an
attempted patch to enigmail which did not solve the problem.

I'm a bit stuck about how to resolve this issue for debian users,
unfortunately.

        --dkg
--- a/extensions/enigmail/ui/content/enigmailMessengerOverlay.js
+++ b/extensions/enigmail/ui/content/enigmailMessengerOverlay.js
@@ -1626,8 +1626,9 @@
 
   verifyEmbeddedMsg: function (window, msgUrl, msgWindow, msgUriSpec, contentEncoding, event)
   {
-    EnigmailCommon.DEBUG_LOG("enigmailMessengerOverlay.js: verifyEmbeddedMsg: msgUrl"+msgUrl+"\n");
+    EnigmailCommon.DEBUG_LOG("enigmailMessengerOverlay.js: verifyEmbeddedMsg: msgUrl="+msgUrl.spec+"\n");
 
+    msgUrl.spec = msgUrl.spec.replace(/\&part=[0-9\.]+$/, "");
     var ipcBuffer = Components.classes[EnigmailCommon.IPCBUFFER_CONTRACTID].createInstance(Components.interfaces.nsIIPCBuffer);
     ipcBuffer.open(-1, false);
 
--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 21.05.13 23:28, Daniel Kahn Gillmor wrote:
> On 05/05/2013 11:55 AM, Patrick Brunschwig wrote:
> 
>> I looked again into this. The Enigmail code has changed quite a
>> lot since v1.4 and there is no patch from the Enigmail source
>> code that would fix this for Thunderbird 10. In other words, the
>> Thunderbird code evolved and so did Enigmail.
>> 
>> However, attached is a patch (to be precise: a hack) that will
>> fix PGP/MIME verification for the standard case, PGP/MIME signed
>> mails embedded the way mailman does it.
> 
> Sorry i'm only now getting around to reviewing and testing this.
> the patch you attached does succeed in making the behavior for
> verification of nested PGP/MIME messages match in IMAP as in Local
> Folders, but it does so in the wrong way: it appears to break
> message verification in the local folder (where it used to work)
> and doesn't affect verification in IMAP (where it still does not
> work).
> 
> Would it be OK to move this discussion back to the mailing list?
> I'd be happy to have a record of it i could refer other people to
> who might be interested in the problem.

Feel free to do so.

> any other suggestions on how i might be able to resolve this for
> the versions in wheezy?

The only way to make this work is to fix Enigmail. However, given that
 Thunderbird 10 has reached end of life back in February [1], I really
don't see why I should invest more time into this.

- -Patrick

[1] http://www.mozilla.org/en-US/thunderbird/organizations/faq/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)

iQEVAwUBUZxl3ck25cDiHiw+AQhlywf9FiHLGLQ78bh+enRqoPgcBFymTRwKGmW5
FnUadd1kSA4JjG0n/OSDPMshowziplPutAySK8xV/Rko7+Mqs7+QpvyTH+zAAMLx
c63kLYsodSPq+s7zyxaS+IIyJrC4O9DtEjsnq4SvPk83+yJn8tRFhUrS+9uT6CGV
pwW2fQM5NXU7urYY5ONHFGFGDmHM3cTrxV9jwt9MJlLgHN0+4sbxLt0iT3SYUL/w
j4w17jxgPw2IYbscocqgYd5P0a0koUxk6MmxufHw+xzMD6VVC0kLiG/wnuBpqCtS
6Ls+Txctry3EMs9a3kMNWY8mgK0nrx3vF9VzkXvjDsFwH7mzK+fuhw==
=FV6n
-----END PGP SIGNATURE-----

--- End Message ---

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
enigmail-users mailing list
enigmail-users@enigmail.net
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to