[PATCH] Re: SMIME: intermediate certificates are not sent

[Christoph Groth <christoph@grothesque.org>]

Just in case someone is motivated to fix the S/MIME with openssl bug
(which is still the default S/MIME method in Gnus):
I've found the following workaround:
http://www.normalesup.org/~martinez/emacs/#sign_additional_certificates

The following code is equivalent, only cleaned up a bit and merged with
the current Gnus codebase.  Adding it to ~/.gnus solves the issue, but
perhaps the function changes could be commited to Gnus?

--8<---------------cut here---------------start------------->8---
;; Patch to smime-sign-buffer and mml-smime-openssl-sign-query to put
;; the email address in the keyfile argument of <#secure> tag instead
;; of the key filename to take additional certificates into account when
;; signing a message.

(require 'smime) ; smime-sign-buffer comes from here

(defun smime-sign-buffer (&optional keyfile buffer)
  "S/MIME sign BUFFER with key in KEYFILE.
KEYFILE should contain a PEM encoded key and certificate."
  (interactive)
  (with-current-buffer (or buffer (current-buffer))
    (unless (smime-sign-region
             (point-min) (point-max)
             (if keyfile
                 (smime-get-key-with-certs-by-email keyfile)
               (smime-get-key-with-certs-by-email
                (gnus-completing-read
                 "Sign using key"
                 smime-keys nil (car-safe (car-safe smime-keys))))))
      (error "Signing failed"))))


(require 'mml-smime) ; mml-smime-openssl-sign-query comes from here

(defun mml-smime-openssl-sign-query ()
  ;; query information (what certificate) from user when MML tag is
  ;; added, for use later by the signing process
  (when (null smime-keys)
    (customize-variable 'smime-keys)
    (error "No S/MIME keys configured, use customize to add your key"))
  (list 'keyfile
        (if (= (length smime-keys) 1)
            (caar smime-keys)
          (or (cadr (funcall (if (boundp
                                  'gnus-extract-address-components)
                                 gnus-extract-address-components
                               'mail-extract-address-components)
                             (or (save-excursion
                                   (save-restriction
                                     (message-narrow-to-headers)
                                     (message-fetch-field "from")))
                                 "")))
              (gnus-completing-read "Sign this part with what signature"
                                    (mapcar 'car smime-keys) nil nil nil
                                    (and (listp (car-safe smime-keys))
                                         (caar smime-keys)))))))
--8<---------------cut here---------------end--------------->8---