Re: S/MIME + additional certificate files

[Simon Josefsson <jas@extundo.com>]

beaker@iavmb.pl (Krzysztof Jędruczyk) writes:

> Hello,
>
> I've recently tried to send some S/MIME signed messages and
> encountered a problem, which I believe lies in gnus' smime.el. The
> problem is that even if I specify additional certificate files in
> smime-keys variable - they don't get attached to signature. This
> might cause with verification - depending on what certs recipient
> has already installed (the certification path will be incomplete).
>
> I've searched google for reports on this particular problem, and found
> nothing. So - I looked at it myself. 
>
> I identified the problem to be in smime-sign-buffer, which in turn
> passes keyfile retrieved with smime-get-key-by-email to
> smime-sign-region. The problem is that smime-get-key-by-email returns
> only the key without accompanying additional certs.

The sign command only need the key to sign something.  By reading the
OpenSSL S/MIME man page it seems that -certfile should be specified to
solve this problem.  What does the following do?  (Untested, it might
mail your private key...)

Index: smime.el
===================================================================
RCS file: /usr/local/cvsroot/gnus/lisp/smime.el,v
retrieving revision 6.26
diff -u -p -u -w -r6.26 smime.el
--- smime.el	2002/04/11 19:49:45	6.26
+++ smime.el	2002/09/23 16:35:08
@@ -254,6 +254,7 @@ key and certificate itself."
 	(when (prog1
 		  (apply 'smime-call-openssl-region b e (list buffer tmpfile)
 			 "smime" "-sign" "-signer" (expand-file-name keyfile)
+			 "-certfile" (expand-file-name keyfile)
 			 (append
 			  (smime-make-certfiles certfiles)
 			  (if passphrase