Docs on S/MIME and GPG with Oort ?

Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

Hello !

Is there some docs on GPG and S/MIME with Oort only (and not
mailcrypt) ? Some kinds of tutorial since the manual is very short on
this subject.

I have these lines in my .gnus :

(setq 
      gpg-passphrase-timeout 120
      mml2015-use 'gpg
      gpg-temp-directory (expand-file-name '"~/.gnupg/tmp")
      gpg-command-default-alist (quote ((gpg . "gpg") (gpg-2comp . "gpg"))))

I am using the very latest CVS of Oort. I can encrypt and decrypt
without problems, however, I cannot verify GPG and S/MIME sig. For
S/MIME, I don't know what I need. For GPG, it seems that I don't get
the answer : there is an access to the disk, then nothing.

In fact, I don't have any feedback about the presence of a signature
in the message : no bracketed status about the presence of a
signature, no bracketed status about the result of the check of a
signature. I can "detect" that a message have a signature because it
is a multipart message.

I don't load mailcrypt at all. But gpg.el is in the lisp path.

Any idea ?
-- 
I WILL NOT SEND LARD THROUGH THE MAIL
I WILL NOT SEND LARD THROUGH THE MAIL
I WILL NOT SEND LARD THROUGH THE MAIL
-+- Bart Simpson on chalkboard in episode 2F04

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@scientist.com> writes:

> Hello !
>
> Is there some docs on GPG and S/MIME with Oort only (and not
> mailcrypt) ? Some kinds of tutorial since the manual is very short on
> this subject.

Did you see the Security node in the Message documentation?

> I am using the very latest CVS of Oort. I can encrypt and decrypt
> without problems, however, I cannot verify GPG and S/MIME sig. For
> S/MIME, I don't know what I need.

You need to configure `smime-CA-directory', and populate the directory
with CA's you trust.  See the OpenSSL smime(1) manpage for details on
the latter (maybe this step should be documented better, or made
easier).

> In fact, I don't have any feedback about the presence of a signature
> in the message : no bracketed status about the presence of a
> signature, no bracketed status about the result of the check of a
> signature. I can "detect" that a message have a signature because it
> is a multipart message.

You don't see any brackets indicating it is a PGP signed mail?  Could
you forward a sample?

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO En cette soirée bien amorcée du samedi 01 semptembre 2001, vers
22:35, Simon Josefsson disait:

>> In fact, I don't have any feedback about the presence of a signature
>> in the message : no bracketed status about the presence of a
>> signature, no bracketed status about the result of the check of a
>> signature. I can "detect" that a message have a signature because it
>> is a multipart message.

> You don't see any brackets indicating it is a PGP signed mail?

Yes, I don't.

> Could you forward a sample?

A screenshot ? In fact, for every signed message I receive, I have the
same behaviour (you may want to send me a test message to check). If I
use :

(setq mm-verify-option
      'ask)

Gnus asks me to check the signature, but I don't see the result (even
in the status bar, even as a "button" in the message, there is just a
disk access). Maybe I have to set something about mime handler ?

Re: Docs on S/MIME and GPG with Oort ?

[Josh Huber]

Vincent Bernat <bernat@scientist.com> writes:

>> You don't see any brackets indicating it is a PGP signed mail?
>
> Yes, I don't.

I don't either.

>> Could you forward a sample?

[snip]

This used to work fine, until cvs updating oort a couple weeks ago.
All GPG signed messages don't display /any/ status information
anymore.

I looked through the ChangeLog, but I didn't see anything
incriminating.

I wonder what's going on?

BTW, I'm using gnupg 1.0.6, and the latest oort with gpg.el, and the
following configuration:

;;*======================
;;* PGP/MIME setup

(require 'gpg)
(global-set-key [(alt f)] 'gpg-passphrase-forget)
(setq mml2015-use 'gpg)
(setq gpg-passphrase-timeout 1200)
(setq gpg-default-key-id "6B21489A")
(setq mm-decrypt-option 'always)
(setq mm-verify-option 'always)
(setq gpg-command-default-alist
      '((gpg . "gpg")
	(gpg-2comp . "gpg")))

(require 'bbdb-pgp)
(setq bbdb/pgp-default-action 'none)

Thanks for any help you can give,

-- 
Josh Huber

Re: Docs on S/MIME and GPG with Oort ?

[Raja R Harinath]

Hi,

Josh Huber <huber@alum.wpi.edu> writes:

> Vincent Bernat <bernat@scientist.com> writes:
>
>>> You don't see any brackets indicating it is a PGP signed mail?
>>
>> Yes, I don't.
>
> I don't either.
>
>>> Could you forward a sample?
>
> [snip]
>
> This used to work fine, until cvs updating oort a couple weeks ago.
> All GPG signed messages don't display /any/ status information
> anymore.
>
> I looked through the ChangeLog, but I didn't see anything
> incriminating.

This is probably it.

  2001-08-17 10:41:14  Lars Magne Ingebrigtsen  <larsi@gnus.org>

        [snip]
        * gnus-art.el (gnus-insert-mime-button): Tiny clean-up.
        (gnus-mime-display-security): Make it respect
        gnus-unbuttonized-mime-type-p. 

- Hari
-- 
Raja R Harinath ------------------------------ harinath@cs.umn.edu
"When all else fails, read the instructions."      -- Cahn's Axiom
"Our policy is, when in doubt, do the right thing."   -- Roy L Ash

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO La nuit ayant déjà recouvert d'encre ce jour du mercredi 05
semptembre 2001, vers 23:06, Raja Harinath disait:

>   2001-08-17 10:41:14  Lars Magne Ingebrigtsen  <larsi@gnus.org>

>         [snip]
>         * gnus-art.el (gnus-insert-mime-button): Tiny clean-up.
>         (gnus-mime-display-security): Make it respect
>         gnus-unbuttonized-mime-type-p. 

And what does this mean ? What need to be added to the .gnus to view
GPG status ?

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@scientist.com> writes:

>>   2001-08-17 10:41:14  Lars Magne Ingebrigtsen  <larsi@gnus.org>
>
>>         [snip]
>>         * gnus-art.el (gnus-insert-mime-button): Tiny clean-up.
>>         (gnus-mime-display-security): Make it respect
>>         gnus-unbuttonized-mime-type-p. 
>
> And what does this mean ? What need to be added to the .gnus to view
> GPG status ?

Bind `gnus-buttonized-mime-types' to `("multipart/signed")' with
customize or something.  You need a recent CVS checkout.

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO Pendant le journal télévisé du samedi 08 semptembre 2001, vers
20:35, Simon Josefsson disait:

>>> * gnus-art.el (gnus-insert-mime-button): Tiny clean-up.
>>> (gnus-mime-display-security): Make it respect
>>> gnus-unbuttonized-mime-type-p. 
>> 
>> And what does this mean ? What need to be added to the .gnus to view
>> GPG status ?

> Bind `gnus-buttonized-mime-types' to `("multipart/signed")' with
> customize or something.  You need a recent CVS checkout.

That doesn't change anything. I have tried :

(setq gnus-buttonized-mime-types
      '(".*/.*"))

And 

(setq gnus-buttonized-mime-types
      '("multipart/signed"))

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@scientist.com> writes:

>>> And what does this mean ? What need to be added to the .gnus to view
>>> GPG status ?
>
>> Bind `gnus-buttonized-mime-types' to `("multipart/signed")' with
>> customize or something.  You need a recent CVS checkout.
>
> That doesn't change anything. I have tried :
...
> (setq gnus-buttonized-mime-types
>       '("multipart/signed"))

It seems to work for me.  What does

(gnus-unbuttonized-mime-type-p "multipart/signed")

evaluate to?  It should be nil.

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO Peu avant le début de l'après-midi du dimanche 09 semptembre 2001,
vers 13:13, Simon Josefsson disait:

>> (setq gnus-buttonized-mime-types
>> '("multipart/signed"))

> It seems to work for me.  What does

> (gnus-unbuttonized-mime-type-p "multipart/signed")

> evaluate to?  It should be nil.

It evaluates to t.
Finally, I have used :

(setq gnus-unbuttonized-mime-types
  '("text/plain"))
-- 
UNDERWEAR SHOULD BE WORN ON THE INSIDE
UNDERWEAR SHOULD BE WORN ON THE INSIDE
UNDERWEAR SHOULD BE WORN ON THE INSIDE
-+- Bart Simpson on chalkboard in episode 8F08

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@free.fr> writes:

>>> (setq gnus-buttonized-mime-types
>>> '("multipart/signed"))
>
>> It seems to work for me.  What does
>
>> (gnus-unbuttonized-mime-type-p "multipart/signed")
>
>> evaluate to?  It should be nil.
>
> It evaluates to t.
> Finally, I have used :
>
> (setq gnus-unbuttonized-mime-types
>   '("text/plain"))

I don't understand,

(let ((gnus-buttonized-mime-types '("multipart/signed"))
      (gnus-unbuttonized-mime-types '("text/plain")))
  (gnus-unbuttonized-mime-type-p "multipart/signed"))

evaluates to nil here.  Are you sure you re-compiled and re-installed
the Oort Gnus updated from CVS properly?  Could you edebug through the
function to see what is happening?

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO En cette fin de matinée radieuse du lundi 10 semptembre 2001, vers
11:42, Simon Josefsson disait:

>> (setq gnus-unbuttonized-mime-types
>> '("text/plain"))

> I don't understand,

> (let ((gnus-buttonized-mime-types '("multipart/signed"))
>       (gnus-unbuttonized-mime-types '("text/plain")))
>   (gnus-unbuttonized-mime-type-p "multipart/signed"))

> evaluates to nil here.

Here too. However

(let ((gnus-buttonized-mime-types '("multipart/signed"))
      (gnus-unbuttonized-mime-types '(".*/.*")))
  (gnus-unbuttonized-mime-type-p "multipart/signed"))

evaluates to t.

> Are you sure you re-compiled and re-installed the Oort Gnus updated
> from CVS properly?

I have used

./configure \
      --infodir=$HOME/.xemacs/xemacs-packages/info \
      --with-lispdir=$HOME/.xemacs/xemacs-packages/lisp/gnus \
      --with-etcdir=$HOME/.xemacs/xemacs-packages/etc
make
make install

And I get Oort Gnus (otherwise, I would get pGnus, since it is the one
which comes with XEmacs).

> Could you edebug through the function to see what is happening?

I am not familiar with edebug, could you give me the appropriate steps
to send an exploitable result ?

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@free.fr> writes:

>> I don't understand,
>
>> (let ((gnus-buttonized-mime-types '("multipart/signed"))
>>       (gnus-unbuttonized-mime-types '("text/plain")))
>>   (gnus-unbuttonized-mime-type-p "multipart/signed"))
>
>> evaluates to nil here.
>
> Here too. However
>
> (let ((gnus-buttonized-mime-types '("multipart/signed"))
>       (gnus-unbuttonized-mime-types '(".*/.*")))
>   (gnus-unbuttonized-mime-type-p "multipart/signed"))
>
> evaluates to t.

Then I think your installation is b0rked.

>> Are you sure you re-compiled and re-installed the Oort Gnus updated
>> from CVS properly?
>
> I have used
>
> ./configure \
>       --infodir=$HOME/.xemacs/xemacs-packages/info \
>       --with-lispdir=$HOME/.xemacs/xemacs-packages/lisp/gnus \
>       --with-etcdir=$HOME/.xemacs/xemacs-packages/etc
> make
> make install
>
> And I get Oort Gnus (otherwise, I would get pGnus, since it is the one
> which comes with XEmacs).

Do you have any lisp-shadows for gnus-art.el (M-x
list-load-path-shadows)?

If you M-x locate-library RET gnus-art.el RET and locate the function
definition, does it look like:

(defun gnus-unbuttonized-mime-type-p (type)
  "Say whether TYPE is to be unbuttonized."
  (unless gnus-inhibit-mime-unbuttonizing
    (when (catch 'found
	    (let ((types gnus-unbuttonized-mime-types))
	      (while types
		(when (string-match (pop types) type)
		  (throw 'found t)))))
      (not (catch 'found
	     (let ((types gnus-buttonized-mime-types))
	       (while types
		 (when (string-match (pop types) type)
		   (throw 'found t)))))))))

It should.

Re: Docs on S/MIME and GPG with Oort ?

[Vincent Bernat]

OoO En ce début d'après-midi nuageux du lundi 10 semptembre 2001, vers
14:00, Simon Josefsson disait:

>> And I get Oort Gnus (otherwise, I would get pGnus, since it is the one
>> which comes with XEmacs).

> Do you have any lisp-shadows for gnus-art.el (M-x
> list-load-path-shadows)?

/home/bernat/.xemacs/xemacs-packages/lisp/gnus/gnus-art hides
/usr/local/lib/xemacs/xemacs-packages/lisp/gnus/gnus-art

I suppose this is OK.

> If you M-x locate-library RET gnus-art.el RET and locate the function
> definition, does it look like:

This is the one in my home directory.

> (defun gnus-unbuttonized-mime-type-p (type)
>   "Say whether TYPE is to be unbuttonized."
>   (unless gnus-inhibit-mime-unbuttonizing
>     (when (catch 'found
> 	    (let ((types gnus-unbuttonized-mime-types))
> 	      (while types
> 		(when (string-match (pop types) type)
> 		  (throw 'found t)))))
>       (not (catch 'found
> 	     (let ((types gnus-buttonized-mime-types))
> 	       (while types
> 		 (when (string-match (pop types) type)
> 		   (throw 'found t)))))))))

I have the same. However, if I evaluate it (in the original file),
then reevaluate

(let ((gnus-buttonized-mime-types '("multipart/signed"))
      (gnus-unbuttonized-mime-types '(".*/.*")))
  (gnus-unbuttonized-mime-type-p "multipart/signed"))

I get nil. So, I just quitted XEmacs and restarted it and the problem
was solved. I thought that when upgrading Gnus, I just need to quit
Gnus, not the whole XEmacs.
-- 
I NO LONGER WANT MY MTV
I NO LONGER WANT MY MTV
I NO LONGER WANT MY MTV
-+- Bart Simpson on chalkboard in episode 3G02

Re: Docs on S/MIME and GPG with Oort ?

[Simon Josefsson]

Vincent Bernat <bernat@free.fr> writes:

> I have the same. However, if I evaluate it (in the original file),
> then reevaluate
>
> (let ((gnus-buttonized-mime-types '("multipart/signed"))
>       (gnus-unbuttonized-mime-types '(".*/.*")))
>   (gnus-unbuttonized-mime-type-p "multipart/signed"))
>
> I get nil. So, I just quitted XEmacs and restarted it and the problem
> was solved. I thought that when upgrading Gnus, I just need to quit
> Gnus, not the whole XEmacs.

No, Gnus uses `require' which only loads the files once.

Perhaps `load' could be used instead, but it wouldn't cover everything
(e.g. variable defaults via defvar or defcustom wouldn't be updated).

There is M-x gnus-unload RET, but it probably causes as many problems
as it would solve.