After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 236499 - verifying pgp / gpg signed e-mail problem
verifying pgp / gpg signed e-mail problem
Status: RESOLVED NOTABUG
Product: evolution
Classification: Applications
Component: Mailer
pre-1.5 (obsolete)
Other All
: Normal major
: ---
Assigned To: evolution-mail-maintainers
Evolution QA team
evolution[interop] evolution[MIME]
Depends on:
Blocks:
 
 
Reported: 2003-01-09 07:03 UTC by Yazz D. Altas
Modified: 2005-11-15 02:22 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Example of e-mail from mailing list (16.11 KB, text/plain)
2003-01-09 07:18 UTC, Yazz D. Altas
Details

Description Yazz D. Altas 2003-01-09 07:03:41 UTC
Description of Problem:
-----------------------
Trouble verfying signed pgp/gpg security alerts from mailing lists.

Steps to reproduce the problem:
-------------------------------
1. subscribe to Debian Security Announcements 
   <debian-security@lists.debian.org>
2. Get a security alert in you your INBOX
3. Evolution sees it as a PGP attachment but not inline I need to save
   it to disk... or change my view
4. With mesg selected change view to "Show E-mail Source"
5. View the message in all it raw glory
6. Change view to "Normal Display"
7. Nice headers again and now you can see the message but it is not checked
   by gnupg. It is show  -----BEGIN PGP SIGNED MESSAGE----- in the message
   and now and the rest of the message but doesn't actually check it.
8. Spend 30 min and submit bug report... :)

Actual Results:
---------------
Just shows just a "Save to disk" option when viewed with "Normal Display"
After changing view to "Show E-mail Source" then back to "Normal Display"
you can read the message inline but it is not checking the signature of
the signed e-mail. You need to view the message while your view is set to
"Show E-mail Source" other wise when you switch back to "Normal Display"
Evolution won't care and just give you the save to disk choice. It has to
be the way pgp/gnupg are being handled since there are different methods
and each mail client seems to do it differently. (thinking about mutt and
pine for example)

Expected Results:
-----------------
Should show the pgp or gnupg inline and check if the signature is valid or
not. 

How often does this happen? 
---------------------------
Every time the following information is in the header...

Content-Type: application/pgp; FORMAT=text; X-ACTION=sign

Now if I sign my own e-mail using Evolution it is handled differently...

Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";

Additional Information:
-----------------------
I see others have mentioned problems with pgp/gpg but following the
duplicate bug reports didn't help me much.

Package: evolution
Version: 1.2.1-1
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux bofh 2.4.20-yazz #1 Mon Dec 23 22:23:12 PST 2002 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages evolution depends on:
ii  bonobo                      1.0.22-2.1   The GNOME Bonobo System.
ii  bonobo-conf                 0.16-1       The Bonobo Configuration System
ii  e2fsprogs [libcomerr2]      1.32-1       The EXT2 file system utilities and
ii  gdk-imlib1                  1.9.14-11    imaging library for use with gtk (
ii  gtkhtml1.1                  1.1.7-1      HTML rendering/editing library - b
ii  libart2                     1.4.2-8      The GNOME canvas widget - runtime
ii  libaudiofile0               0.2.3-4      The Audiofile Library
ii  libbonobo-conf0             0.16-1       The Bonobo Configuration System --
ii  libbonobo2                  1.0.22-2.1   The GNOME Bonobo library.
ii  libc6                       2.3.1-8      GNU C Library: Shared libraries an
ii  libcamel0                   1.2.1-1      A generic Messaging Library
ii  libdb3                      3.2.9-17     Berkeley v3 Database Libraries [ru
ii  libesd0                     0.2.28-2     Enlightened Sound Daemon - Shared
ii  libfreetype6                2.1.3-4      FreeType 2 font engine, shared lib
ii  libgal21                    0.22-1       G App Libs (run time library)
ii  libgconf11                  1.0.9-3      GNOME configuration database syste
ii  libgdk-pixbuf-gnome2        0.21.0-1     The GNOME Canvas pixbuf library
ii  libgdk-pixbuf2              0.21.0-1     The GdkPixBuf library.
ii  libglade-gnome0             1:0.17-2.7   Library to load .glade files at ru
ii  libglade0                   1:0.17-2.7   Library to load .glade files at ru
ii  libglib1.2                  1.2.10-6     The GLib library of C routines
ii  libgnome-pilot1             0.1.71-1     Support libraries for gnome-pilot
ii  libgnome-vfs0               1.0.5-3      The GNOME virtual file-system libr
ii  libgnome32                  1.4.2-8      The GNOME libraries
ii  libgnomeprint15             0.37-2       The GNOME Print architecture - run
ii  libgnomesupport0            1.4.2-8      The GNOME libraries (Support libra
ii  libgnomeui32                1.4.2-8      The GNOME libraries (User Interfac
ii  libgtk1.2                   1.2.10-14    The GIMP Toolkit set of widgets fo
ii  libgtkhtml1.1-3             1.1.7-1      HTML rendering/editing library - r
ii  libkrb53                    1.2.6-2      MIT Kerberos runtime libraries
ii  libldap2                    2.0.27-3     OpenLDAP libraries (without TLS su
ii  liboaf0                     0.6.10-3     The GNOME Object Activation Framew
ii  liborbit0                   0.5.17-5     Libraries for ORBit - a CORBA ORB
ii  libpam0g                    0.76-9       Pluggable Authentication Modules l
ii  libpopt0                    1.6.4-2      lib for parsing cmdline parameters
ii  libsasl7                    1.5.27-3.3   Authentication abstraction library
ii  libsoup3                    0.7.10-1     SOAP client library in C
ii  libssl0.9.6                 0.9.6g-10    SSL shared libraries
ii  libwrap0                    7.6-ipv6.1-3 Wietse Venema's TCP wrappers libra
ii  libxml1                     1:1.8.17-2   GNOME XML library
ii  oaf                         0.6.10-3     The GNOME Object Activation Framew
ii  xlibs                       4.2.1-4      X Window System client libraries
ii  zlib1g                      1:1.1.4-8    compression library - runtime
Comment 1 Yazz D. Altas 2003-01-09 07:07:06 UTC
Forgive my poor grammar/spelling mistakes... I can never catch them
all when I submit tickets...
Comment 2 Yazz D. Altas 2003-01-09 07:18:28 UTC
Created attachment 41894 [details]
Example of e-mail from mailing list
Comment 3 Jeffrey Stedfast 2003-01-09 16:56:33 UTC
we don't support application/pgp - that isn't even a standard. it was
a draft standard a long time ago but got regected by the standards
committee

no current mail clients use it or support it.