Control: found 679640 2:1.4-1
Control: found 679640 2:1.4.1-2

I can confirm that certain multipart/signed PGP/MIME message parts are
not being validated correctly with enigmail versons 1.4-1 or 1.4.1-2,
when using icedove 10.0.5-1 or 10.0.6-1 or 11.0-1.

In particular, the problematic messages appear to be those who have an
internal part that is signed, but whose top-level parts are not
themselves multipart/signed.

For example, a message that looks like this:

└┬╴multipart/mixed 7443 bytes
 ├┬╴multipart/signed 2313 bytes
 │├─╴text/plain 820 bytes
 │└─╴application/pgp-signature attachment [signature.asc] 900 bytes
 └─╴text/plain inline 176 bytes

will not show up as signed.

Turning on enigmail debugging (via the advanced settings dialog box's
debug tab), i get the following in the logs for such a message in
enigdbug.txt:

2012-08-10 16:58:43.444 [DEBUG] enigmailMessengerOverlay.js: messageFrameUnload
2012-08-10 16:58:43.445 [DEBUG] enigmailMessengerOverlay.js: messageCleanup
2012-08-10 16:58:43.445 [DEBUG] enigmailMessengerOverlay.js: setAttachmentReveal
2012-08-10 16:58:43.447 [DEBUG] enigmailMsgHdrViewOverlay.js: this.messageUnload
2012-08-10 16:58:43.458 [DEBUG] enigmailMsgHdrViewOverlay.js: 
_listener_onStartHeaders
2012-08-10 16:58:43.459 [DEBUG] enigmailCommon.jsm: getFrame: name=messagepane
2012-08-10 16:58:43.466 [DEBUG] enigmailMsgHdrViewOverlay.js: msgFrame=[object 
Window]
2012-08-10 16:58:43.468 [DEBUG] enigmailMsgHdrViewOverlay.js: 
enigmailPrepSecurityInfo
2012-08-10 16:58:43.570 [DEBUG] enigmailMsgHdrViewOverlay.js: 
_listener_onEndHeaders
2012-08-10 16:58:43.644 [DEBUG] enigmailMessengerOverlay.js: messageDecrypt: 
[object Event]
2012-08-10 16:58:43.681 [DEBUG] enigmailCommon.jsm: dispatchEvent f=
2012-08-10 16:58:43.689 [DEBUG] enigmailCommon.jsm: dispatchEvent running 
mainEvent
2012-08-10 16:58:43.690 [DEBUG] enigmailMessengerOverlay.js: messageDecryptCb:
2012-08-10 16:58:43.690 [DEBUG] enigmailMessengerOverlay.js: header 
content-type: multipart/mixed; boundary="===============1124314551987869889=="
2012-08-10 16:58:43.691 [DEBUG] enigmailMessengerOverlay.js: header 
content-transfer-encoding: 
2012-08-10 16:58:43.691 [DEBUG] enigmailMessengerOverlay.js: header 
x-enigmail-version: 1.4.3
2012-08-10 16:58:43.692 [DEBUG] enigmailMessengerOverlay.js: header 
x-pgp-encoding-format: 
2012-08-10 16:58:43.692 [DEBUG] enumerateMimeParts:  - multipart/mixed; 
boundary="===============1124314551987869889=="
2012-08-10 16:58:43.693 [DEBUG] enumerateMimeParts: 1 - multipart/mixed; 
boundary="===============1124314551987869889=="
2012-08-10 16:58:43.694 [DEBUG] enumerateMimeParts: 1.1 - multipart/signed; 
micalg=pgp-sha1; protocol="application/pgp-signature"; 
boundary="------------enig72362FAC2517B9CBE677AAA6"
2012-08-10 16:58:43.694 [DEBUG] enumerateMimeParts: 1.1.1 - text/plain; 
charset=ISO-8859-1
2012-08-10 16:58:43.695 [DEBUG] enumerateMimeParts: 1.1.2 - 
application/pgp-signature; name="signature.asc"
2012-08-10 16:58:43.695 [DEBUG] enumerateMimeParts: 1.2 - text/plain; 
charset="us-ascii"
2012-08-10 16:58:43.696 [DEBUG] enigmailMessengerOverlay.js: embedded objects:  
/ 1.1
2012-08-10 16:58:43.698 [DEBUG] enigmailMessengerOverlay.js: messageDecryptCb: 
multipart/signed
2012-08-10 16:58:43.699 [DEBUG] enigmailMessengerOverlay.js: messageDecryptCb: 
mailNewsUrl:[xpconnect wrapped (nsISupports, nsIURI, nsIMsgMailNewsUrl)]
2012-08-10 16:58:43.705 [DEBUG] enigmailMessengerOverlay.js: messageDecryptCb: 
msgUriSpec:imap-message://x...@yyy.zzz.net/INBOX#234413
2012-08-10 16:58:43.706 [DEBUG] enigmailMessengerOverlay.js: verifyEmbeddedMsg: 
msgUrl[xpconnect wrapped (nsISupports, nsIURI, nsIMsgMailNewsUrl)]
2012-08-10 16:58:43.713 [DEBUG] enigmailCommon.jsm: 
requestObserver.onStartRequest
2012-08-10 16:58:43.719 [DEBUG] enigmailCommon.jsm: 
requestObserver.onStopRequest: [xpconnect wrapped nsISupports]
2012-08-10 16:58:43.720 [DEBUG] enigmailCommon.jsm: dispatchEvent f=
2012-08-10 16:58:43.721 [DEBUG] enigmailCommon.jsm: dispatchEvent running 
mainEvent
2012-08-10 16:58:43.721 [DEBUG] enigmailMessengerOverlay.js: 
verifyEmbeddedCallback: 
2012-08-10 16:58:43.727 [DEBUG] enigmailMessengerOverlay.js: 
verifyEmbeddedCallback: try inline PGP
2012-08-10 16:58:43.728 [DEBUG] enigmailMessengerOverlay.js: messageParse: false
2012-08-10 16:58:43.728 [DEBUG] enigmailCommon.jsm: getFrame: name=messagepane
2012-08-10 16:58:43.730 [DEBUG] enigmailMessengerOverlay.js: msgFrame=[object 
Window]
2012-08-10 16:58:43.732 [DEBUG] enigmailMessengerOverlay.js: 
bodyElement=[object HTMLBodyElement]

this is while running the versions of both packages from unstable.

0 dkg@pip:~$ dpkg -l enigmail icedove
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name           Version        Description
+++-==============-==============-============================================
ii  enigmail       2:1.4.1-2      GPG support for Thunderbird and Debian Icedo
ii  icedove        10.0.6-1       mail/news client with RSS and integrated spa
0 dkg@pip:~$ 

I do note that upstream seems to think that enigmail 1.4 (*not* 1.4.1)
is the appropriate version for icedove/thunderbird 10:

  http://enigmail.net/download/source.php

But i seem to have the same problem with version 1.4-1 pulled from
snapshot.debian.net:

  http://snapshot.debian.org/package/enigmail/2%3A1.4-1/

So i'm a little bit at a loss as to what the right thing to do is here,
or what the appropriate next steps are.

   --dkg

Attachment: pgpRyKlnzbPFk.pgp
Description: PGP signature

Reply via email to