Re: [PATCH] crypto: signature verification reports valid User IDs

Subject: Re: [PATCH] crypto: signature verification reports valid User IDs

Date: Fri, 08 Dec 2017 01:38:57 -0500

To: Notmuch Mail


From: Daniel Kahn Gillmor

On Wed 2017-11-29 23:20:35 -0500, Daniel Kahn Gillmor wrote:
> When i'm trying to understand a message signature, i care that i know
> who it came from (the "validity" of the identity associated with the
> key), *not* whether i'm willing to accept the keyholder's other
> identity assertions (the "trust" associated with the certificate).
> We've been reporting User ID information based on the "trust"
> associated with the certificate, because GMime didn't clearly expose
> the validity of the User IDs.
> This change relies on fixes made in GMime 3.0.3 and later which
> include

Without this patch, the notmuch test suite currently fails when built
against gmime 3 on debian testing, because gmime 3 on debian testing
now correctly returns key IDs for _get_key_id().

This patch corrects the misbehavior of previous versions of notmuch, and
restores the ability to display correct validity of the keys in

I welcome review for it!

signature.asc (application/pgp-signature)
notmuch mailing list