[kmail2] [Bug 393675] New: KMail might not show that an invalid signature exists

[Andre Heinecke]

https://bugs.kde.org/show_bug.cgi?id=393675

            Bug ID: 393675
           Summary: KMail might not show that an invalid signature exists
           Product: kmail2
           Version: 5.2.3
          Platform: Debian stable
                OS: Linux
            Status: UNCONFIRMED
          Severity: minor
          Priority: NOR
         Component: crypto
          Assignee: kdepim-bugs at kde.org
          Reporter: aheinecke at intevation.de
  Target Milestone: ---

Created attachment 112320
  --> https://bugs.kde.org/attachment.cgi?id=112320&action=edit
The root ca of this test

Moved out from Bug 385687

> CERT_PATH_COMMON_05|ERROR|INVALID|n/a|

> Checks the behaviour of the application when a certificate has a wrong DER 
> encoding. This path is not valid, because the certificate is not a properly
> encoded structure.

I have only tested this with 5.2.3 and not with a more recent version.

Import (gpgsm --import) the attached root ca and afterwards open the message
I'll attach in the next message.

KMail does not show that a signature exists. I don't think that the invalid
signature should be shown prominently as I don't think that any signed mail
should be displayed worse then an unsigned mail (
https://phabricator.kde.org/T3128 ). But some indication should probably be
given and missing it might point to a deeper problem in the parser.

-- 
You are receiving this mail because:
You are the assignee for the bug.