The following patch against Emacs CVS makes Gnus verify pkcs7-mime signatures: