GNOME Bugzilla – Bug 236499
verifying pgp / gpg signed e-mail problem
Last modified: 2005-11-15 02:22:21 UTC
Description of Problem: ----------------------- Trouble verfying signed pgp/gpg security alerts from mailing lists. Steps to reproduce the problem: ------------------------------- 1. subscribe to Debian Security Announcements <debian-security@lists.debian.org> 2. Get a security alert in you your INBOX 3. Evolution sees it as a PGP attachment but not inline I need to save it to disk... or change my view 4. With mesg selected change view to "Show E-mail Source" 5. View the message in all it raw glory 6. Change view to "Normal Display" 7. Nice headers again and now you can see the message but it is not checked by gnupg. It is show -----BEGIN PGP SIGNED MESSAGE----- in the message and now and the rest of the message but doesn't actually check it. 8. Spend 30 min and submit bug report... :) Actual Results: --------------- Just shows just a "Save to disk" option when viewed with "Normal Display" After changing view to "Show E-mail Source" then back to "Normal Display" you can read the message inline but it is not checking the signature of the signed e-mail. You need to view the message while your view is set to "Show E-mail Source" other wise when you switch back to "Normal Display" Evolution won't care and just give you the save to disk choice. It has to be the way pgp/gnupg are being handled since there are different methods and each mail client seems to do it differently. (thinking about mutt and pine for example) Expected Results: ----------------- Should show the pgp or gnupg inline and check if the signature is valid or not. How often does this happen? --------------------------- Every time the following information is in the header... Content-Type: application/pgp; FORMAT=text; X-ACTION=sign Now if I sign my own e-mail using Evolution it is handled differently... Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; Additional Information: ----------------------- I see others have mentioned problems with pgp/gpg but following the duplicate bug reports didn't help me much. Package: evolution Version: 1.2.1-1 Debian Release: testing/unstable Architecture: i386 Kernel: Linux bofh 2.4.20-yazz #1 Mon Dec 23 22:23:12 PST 2002 i686 Locale: LANG=C, LC_CTYPE=C Versions of packages evolution depends on: ii bonobo 1.0.22-2.1 The GNOME Bonobo System. ii bonobo-conf 0.16-1 The Bonobo Configuration System ii e2fsprogs [libcomerr2] 1.32-1 The EXT2 file system utilities and ii gdk-imlib1 1.9.14-11 imaging library for use with gtk ( ii gtkhtml1.1 1.1.7-1 HTML rendering/editing library - b ii libart2 1.4.2-8 The GNOME canvas widget - runtime ii libaudiofile0 0.2.3-4 The Audiofile Library ii libbonobo-conf0 0.16-1 The Bonobo Configuration System -- ii libbonobo2 1.0.22-2.1 The GNOME Bonobo library. ii libc6 2.3.1-8 GNU C Library: Shared libraries an ii libcamel0 1.2.1-1 A generic Messaging Library ii libdb3 3.2.9-17 Berkeley v3 Database Libraries [ru ii libesd0 0.2.28-2 Enlightened Sound Daemon - Shared ii libfreetype6 2.1.3-4 FreeType 2 font engine, shared lib ii libgal21 0.22-1 G App Libs (run time library) ii libgconf11 1.0.9-3 GNOME configuration database syste ii libgdk-pixbuf-gnome2 0.21.0-1 The GNOME Canvas pixbuf library ii libgdk-pixbuf2 0.21.0-1 The GdkPixBuf library. ii libglade-gnome0 1:0.17-2.7 Library to load .glade files at ru ii libglade0 1:0.17-2.7 Library to load .glade files at ru ii libglib1.2 1.2.10-6 The GLib library of C routines ii libgnome-pilot1 0.1.71-1 Support libraries for gnome-pilot ii libgnome-vfs0 1.0.5-3 The GNOME virtual file-system libr ii libgnome32 1.4.2-8 The GNOME libraries ii libgnomeprint15 0.37-2 The GNOME Print architecture - run ii libgnomesupport0 1.4.2-8 The GNOME libraries (Support libra ii libgnomeui32 1.4.2-8 The GNOME libraries (User Interfac ii libgtk1.2 1.2.10-14 The GIMP Toolkit set of widgets fo ii libgtkhtml1.1-3 1.1.7-1 HTML rendering/editing library - r ii libkrb53 1.2.6-2 MIT Kerberos runtime libraries ii libldap2 2.0.27-3 OpenLDAP libraries (without TLS su ii liboaf0 0.6.10-3 The GNOME Object Activation Framew ii liborbit0 0.5.17-5 Libraries for ORBit - a CORBA ORB ii libpam0g 0.76-9 Pluggable Authentication Modules l ii libpopt0 1.6.4-2 lib for parsing cmdline parameters ii libsasl7 1.5.27-3.3 Authentication abstraction library ii libsoup3 0.7.10-1 SOAP client library in C ii libssl0.9.6 0.9.6g-10 SSL shared libraries ii libwrap0 7.6-ipv6.1-3 Wietse Venema's TCP wrappers libra ii libxml1 1:1.8.17-2 GNOME XML library ii oaf 0.6.10-3 The GNOME Object Activation Framew ii xlibs 4.2.1-4 X Window System client libraries ii zlib1g 1:1.1.4-8 compression library - runtime
Forgive my poor grammar/spelling mistakes... I can never catch them all when I submit tickets...
Created attachment 41894 [details] Example of e-mail from mailing list
we don't support application/pgp - that isn't even a standard. it was a draft standard a long time ago but got regected by the standards committee no current mail clients use it or support it.