[kmail2] [Bug 332973] Kmail fails to recognize the digital signature of DHL, reason kmail fais on nested multipart html messages

[Michał Goliński]

https://bugs.kde.org/show_bug.cgi?id=332973

Michał Goliński <ecthelion at o2.pl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ecthelion at o2.pl

--- Comment #3 from Michał Goliński <ecthelion at o2.pl> ---
I believe I may have stumbled on the same issue, I've decided to open an
account in a new bank, and their emails display with red border, indicating bad
signatures. Enigmail shows them as properly signed.

My old bank sends me two types of mail -- short, plain notifications and longer
monthly operations sheet. Both of these messages are displayed as properly
signed (green). The first is plain text, so no multipart, the second is plain
text + attachment (multipart/mixed).

Their structure is as follows:

└┬╴multipart/signed 8623 bytes
 ├─╴text/plain 165 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 6322 bytes

└┬╴multipart/signed 12013 bytes
 ├┬╴multipart/mixed 3757 bytes
 │├─╴text/plain 576 bytes
 │└─╴text/html attachment [wyciag_140310_0064.html] 2700 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 6322 bytes

The mail that doesn't verify properly comes from my new bank from my mobile
phone company. Their structure is:

└┬╴multipart/signed 16824 bytes
 ├┬╴multipart/mixed 9015 bytes
 │├┬╴multipart/alternative 2316 bytes
 ││├─╴text/plain 11 bytes
 ││└─╴text/html 1922 bytes
 │└─╴image/gif attachment [logo.gif] 6350 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 5738 bytes

└┬╴multipart/signed 416624 bytes                                                
 ├┬╴multipart/mixed 408790 bytes                                                
 │├─╴text/html 3631 bytes
 │├─╴image/png attachment [obrazek.png] 14070 bytes
 │└─╴application/octet-stream attachment
[Konto_osobiste_potwierdzenie_zlozenia_wniosku.pdf] 390385 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 5738 bytes

└┬╴multipart/signed 2035149 bytes
 ├┬╴multipart/mixed 2027351 bytes
 │├┬╴multipart/alternative 19378 bytes
 ││├─╴text/plain 9492 bytes
 ││└─╴text/html 9491 bytes
 │├─╴application/pdf attachment [TOiP konta osobiste.pdf] 493338 bytes
 │├─╴application/pdf attachment [Oswiadczenie o odstapieniu.pdf] 118304 bytes
 │├─╴application/pdf attachment [Regulamin obslugi produktow Alior Sync.pdf]
990750 bytes
 │├─╴application/pdf attachment [iKonto_umowa_zintegrowana.pdf] 383735 bytes
 │├─╴application/pdf attachment [obrazek.png] 14070 bytes
 │└─╴image/gif attachment [Sync.gif] 6350 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 5738 bytes

└┬╴multipart/signed 186026 bytes
 ├┬╴multipart/mixed 181229 bytes
 │├┬╴multipart/related 101720 bytes
 ││├─╴text/html 4567 bytes
 ││├─╴image/jpeg [playLogo.jpg] 2962 bytes
 ││├─╴image/jpeg [awizo3.jpg] 3124 bytes
 ││└─╴image/jpeg [awizo1.jpg] 90470 bytes
 │└─╴application/pdf attachment [6303039_K_00000879_03_14_K.pdf] 79151 bytes
 └─╴application/pkcs7-signature attachment [smime.p7s] 2926 bytes

All of the above verify as proper in Thunderbird/Enigmail.

I was able to extract the signature and message from my old bank's messages and
verify them on the command line with gpgsm, the same procedure seems not to
work with the other messages -- the hash seems to be corrupt.

-- 
You are receiving this mail because:
You are the assignee for the bug.