On Wed, 21 Dec 2011 06:51:01 -0500, Darren McGuicken <mailing-notmuch@fernseed.info> wrote:
> On Wed, 07 Dec 2011 21:58:03 -0500, Dan Bryant <dan.bryant@jhuapl.edu> wrote:
> > I'd like to report some success on getting S/MIME signature
> > verification working using notmuch and the recently-released GMime
> > 2.6. I specifically tested with notmuch-0.10.2 and gmime-2.6.1.
> 
> [...]
> 
> > I don't have submittable patches for #2/#3 yet, but I wanted to share
> > what I found about the scope of what actually needs to be done, which
> > is fairly small. (The biggest blocker is probably that Debian & other
> > distros haven't packaged gmime-2.6.)
> 
> Hi Dan, nice find!  As another Fedora user I'd be happy to test out any
> patches you come up with.
> 
> When you make those changes to the gpg_context are you breaking gpg
> signature validation?  Or is the one a superset of the other?

The current assumption in notmuch is that all encrypted/signed messages
in a mailbox will be using the same crypto algorithm. This is the first
thing I want to fix: which crypto algorithm (and therefore, context
object) to use should probably be detected by the MIME type of the
message part.


Dan