Decrypt loop with S/MIME signed mails

OpenPGP addon for Mozilla Thunderbird

Brought to you by: pbrunschwig

#592 Decrypt loop with S/MIME signed mails

Status: fixed

Owner: nobody

Labels: S/MIME (4)

Found in Version: 1.9.1

Severity: Major

Thunderbird version: 38.6.0

GnuPG version: 2.0.29

Operating System: Windows

Fixed in version: 1.9.2

Cc: nobody

Updated: 2016-04-12

Created: 2016-04-01

Creator: Jonny007-MKD

Private: No

Hi,

I encrypt mails on my mailserver using gpgit. When I receive messages which are S/MIME signed (smime.p7s) Enigmail enters an endless decrypting loop (I see the encrypted message "flashing"). A month ago or so I could decrypt those mails without any problems so this seems to be some kind of regression.

greetz
Jonny007

1 Attachments

mail.txt

Discussion

Jonny007-MKD - 2016-04-01

This is the decrypted part

decrypted.txt

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Olav Seyfarth - 2016-04-01

This should be fixed already in the current nightly, could you please install the latest nightly, retest, and post here?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jonny007-MKD - 2016-04-01

No, it's still the same.

enigmail.log

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Patrick Brunschwig - 2016-04-02

Can you please attach a sample message (or send it directly to me)?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Patrick Brunschwig - 2016-04-09

gpgit contains a known bug: https://rt.cpan.org/Public/Bug/Display.html?id=113203

The bug breaks the signed message that is encrypted by gpgit - it removes the protocol parameter which is needed to distinguish PGP/MIME from S/MIME (and potentially other protocols).

The latest nightly build no longer loops forever - but it cannot yet display the message content.

Last edit: Patrick Brunschwig 2016-04-09

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Patrick Brunschwig - 2016-04-09

I created a fix that should ensure that such a message is displayed without ending up in a loop. However, given that the protocol is removed by gpgit, the signature is not detected/verified.

Please try the latest nightly and let me know if this works for you.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jonny007-MKD - 2016-04-11

Yes, now it is working :) Thank you, also for your research!

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Patrick Brunschwig - 2016-04-12

status: open --> fixed

Fixed in version: --- --> 1.9.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.