Dependency Graph
View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0004201 | SOGo | Web Mail | public | 2017-06-17 23:50 | 2017-10-09 07:56 |
Reporter | gturner | Assigned To | ludovic | ||
Priority | normal | Severity | minor | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Platform | Linux | OS | Debian | OS Version | 9 (Stretch) |
Product Version | 3.2.6 | ||||
Target Version | 3.2.10 | Fixed in Version | 3.2.10 | ||
Summary | 0004201: Mail with Content-Type multipart/signed (RFC 1847) is not displayed | ||||
Description | Email with MIME Content-Type multipart/signed is not displayed within SOGo at all, they're rendered as a blank message. These emails used to be displayed with SOGo 2.2.17. | ||||
Steps To Reproduce | Open a PGP/MIME signed email (RFC 1847) | ||||
Additional Information | Today I upgraded my SOGo server's OS from Debian 8 (Jessie) to Debian 9 (Stretch) which coincidentally upgraded SOGo from 2.2.17 to 3.2.6. Every message in my Sent folder renders blank. A large amount of mail received from Debian Mailing Lists (see attachment) are rendered blank. Other users of my SOGo installation see blank mail for every mail sent by me. | ||||
Tags | No tags attached. | ||||
multipart-signed-email (7,230 bytes)
Return-Path: <bounce-debian-devel-announce=gturner=unzane.com@lists.debian.org> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on azathoth.unzane.com X-Spam-Level: X-Spam-ASN: AS8365 82.195.64.0/19 X-Spam-Status: No, score=-1.7 required=3.0 tests=AWL,BAYES_00, LOCAL_NEGATE_DNSWL_HI,RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, T_RP_MATCHES_RCVD shortcircuit=no autolearn=no autolearn_force=no version=3.4.1 X-Original-To: gturner@unzane.com Delivered-To: gturner@unzane.com X-Envelope-From: <bounce-debian-devel-announce=gturner=unzane.com@lists.debian.org> Received: from bendel.debian.org (bendel.debian.org [82.195.75.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by azathoth.unzane.com (Postfix) with ESMTPS id 0F122600096 for <gturner@unzane.com>; Tue, 13 Jun 2017 23:24:20 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by bendel.debian.org (Postfix) with QMQP id A34DCA2; Wed, 14 Jun 2017 06:24:06 +0000 (UTC) X-Mailbox-Line: From debian-devel-announce-request@lists.debian.org Wed Jun 14 06:24:06 2017 Old-Return-Path: <jmw@debian.org> X-Original-To: lists-debian-devel-announce@bendel.debian.org Delivered-To: lists-debian-devel-announce@bendel.debian.org Received: from localhost (localhost [127.0.0.1]) by bendel.debian.org (Postfix) with ESMTP id 0C4EF90 for <lists-debian-devel-announce@bendel.debian.org>; Wed, 14 Jun 2017 06:23:58 +0000 (UTC) X-Virus-Scanned: at lists.debian.org with policy bank moderated X-Amavis-Spam-Status: No, score=-9.334 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_NONE=-0.0001, SARE_BOUNDARY_LC=1.666] autolearn=ham autolearn_force=no Received: from bendel.debian.org ([127.0.0.1]) by localhost (lists.debian.org [127.0.0.1]) (amavisd-new, port 2525) with ESMTP id C9p9Lm3BRZzz for <lists-debian-devel-announce@bendel.debian.org>; Wed, 14 Jun 2017 06:23:53 +0000 (UTC) X-policyd-weight: using cached result; rate: -2.75 Received: from hermione.home.powdarrmonkey.net (hogwarts.powdarrmonkey.net [IPv6:2001:8b0:caea:eda7:3ed9:2bff:fe02:9128]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by bendel.debian.org (Postfix) with ESMTPS id 15FF354 for <debian-devel-announce@lists.debian.org>; Wed, 14 Jun 2017 06:23:52 +0000 (UTC) Received: from [2001:8b0:caea:eda7:35c7:78d:c809:23f2] (helo=lupin) by hermione.home.powdarrmonkey.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <jmw@debian.org>) id 1dL1iY-0007x0-1B for debian-devel-announce@lists.debian.org; Wed, 14 Jun 2017 07:23:50 +0100 Received: from jona by lupin with local (Exim 4.89) (envelope-from <jmw@debian.org>) id 1dL1iW-0004Lg-SL for debian-devel-announce@lists.debian.org; Wed, 14 Jun 2017 07:23:48 +0100 Date: Wed, 14 Jun 2017 07:23:48 +0100 From: Jonathan Wiltshire <jmw@debian.org> To: debian-devel-announce@lists.debian.org Subject: Call for Signatures: stretch dedication Message-ID: <20170614062348.ysbwh53bwngstj4z@powdarrmonkey.net> Reply-To: jmw@debian.org Mail-Followup-To: jmw@debian.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="aafywhfzjlyomyhv" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Debian-Message: Signature check passed for Debian member X-Rc-Virus: 2007-09-13_01 X-Rc-Spam: 2008-11-04_01 Resent-Message-ID: <dCew6HCfNgH.A.6tC.GaNQZB@bendel> Resent-From: debian-devel-announce@lists.debian.org X-Mailing-List: <debian-devel-announce@lists.debian.org> archive/latest/2035 X-Loop: debian-devel-announce@lists.debian.org List-Id: <debian-devel-announce.lists.debian.org> List-URL: <https://lists.debian.org/debian-devel-announce/> List-Post: <mailto:debian-devel-announce@lists.debian.org> List-Help: <mailto:debian-devel-announce-request@lists.debian.org?subject=help> List-Subscribe: <mailto:debian-devel-announce-request@lists.debian.org?subject=subscribe> List-Unsubscribe: <mailto:debian-devel-announce-request@lists.debian.org?subject=unsubscribe> Precedence: list Resent-Sender: debian-devel-announce-request@lists.debian.org List-Archive: https://lists.debian.org/msgid-search/20170614062348.ysbwh53bwngstj4z@powdarrmonkey.net Resent-Date: Wed, 14 Jun 2017 06:24:06 +0000 (UTC) --aafywhfzjlyomyhv Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, My apologies that this is rather short notice. We deferred discussion of the subject in 2015 to "nearer the release", and then promptly failed to add it to any checklists. Debian 9 "stretch" will be dedicated to Ian Murdock. Whilst dedications in more specific areas of Debian development are generally preferred, the founder of the project is a common sense exception. As is traditional, the dedication will be expressed by a file on the mirrors and CD images. We welcome every Debian developer, maintainer, translator, or contributor in any other field to join us in signing this dedication. If you wish to do so, please: * Download the dedication file: https://people.debian.org/~jmw/dedication-9.0.txt * Verify the sha1sum: fb37a995eebad8ced194709a9a2eb7a68ad8979c * Create a detached, ascii-armoured signature in a file with your name, underscore-separate. Use of proper capitalisation is appreciated. For example, mine is called Jonathan_Wiltshire: gpg -bao Your_Name dedication-9.0.txt * Mail the file as an attachment directly to me, jmw@debian.org with the subject line "Dedication signature". I will collate them. Owing to the proximity of the release, the deadline for signatures is 2016-06-16 18:00 UTC (Friday). I am aware that this does not leave very much time and I'm sorry about that; I will make one further update to the signatures archive around the time of the first point release for anyone who cannot meet this schedule. Thanks, For the release team: --=20 Jonathan Wiltshire jmw@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 --aafywhfzjlyomyhv Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEADLdyLGMneGYn8dtRNMqtfom+MkFAllA1m4ACgkQRNMqtfom +MlnNhAAt8hkkg8BZ0FTDTz5qahAYAWCfdmxkF0DDHFY5dcBbZ2uVYaf2Se79F+L t5w0JW1SototRjOhdcvz/9VZnrx4sk/6sHROKATn5jJA3edHM7YjUp+HAlEQ6W2b c7sWQ2m+oBX7iMnSjOPZDFWs/8ejWx+Knf1XpF9ZutkoB1KoA1pNIuqrkp3nLIz+ O9sUr8bPgnh8/EH9AyYPTwjPYautDPLDBzjeWiObzqNi3QNeF0Uq71r7uviw7fQu VNwGMgIYZ26Vxs6aMdcAiKSrnU8tYiIB/08IkhCyNubHAq5PUrNr82W1vPR+iCQ8 YIr76p4U4/tMCmJc8tzN9W1W6Upm5uMMGcmBU8YEhrGXCjMI3mgVAjeX70lAXzfP wgMUDbD/fqBoO62ElAe4XFUSCJ40OFkT0LcOOlB7x8AP+9N4rNYNQayM8TfG/YAu kyWjLA4GMA7IfH+klnrHMjQzHsAuyXizhO6FiZixIDrQe/vqdX7R5pkaerwSPrtv dM9vlfnWZa4cS74Xv1ybhDPWOUI4TS4VGEDOc1f+/+6nnkHmK4CzHBqDdttbKhz+ ZkxVOHxyDmsy79x25Gtf29bqlqnwaGQeyPqKjWQ/SjCstbF80XFGXOJ/YmNrdnUa VhQMlGavqvZbTI71L37dEiAhs6ntQPTKs2AIB2jzqIOTsEWUvEg= =L16v -----END PGP SIGNATURE----- --aafywhfzjlyomyhv-- |
|
Are there smime.p7m attachments? |
|
Hi Christian, to answer your question, there are no smime.p7m attachments. The first MIME part is: Content-Type: text/plain; charset=us-ascii The second MIME part is: Content-Type: application/pgp-signature; name="signature.asc" I'm used to SOGo (older 2.x) and many other mail clients displaying that second part as a download. Clients like Evolution or Thunderbird with Enigmail instead verify the PGP signature. I'm not expecting SOGo to do any PGP operations. There's regression in SOGo 3 that it doesn't render the first MIME part at all (text/plain, not shown). |
|
Hello, The Debian version of SOGo is compiled against GnuTLS instead of OpenSSL due to licensing reasons. Unfortunately, there is a codepath that is not ported to GnuTLS and apparently causes this regression. Ludovic, see the HAVE_OPENSSL ifdefs in UI/MailPartViewers/UIxMailPartSignedViewer.m. I've been wanting to contribute a fix from our end, but have not been able. |
|
That's interesting jordi, I attempted to verify by rebuilding Debian's package with libssl-dev (OpenSSL 1.1), however at runtime it broke SOGo's ability to connect to IMAPS. So I made another attempt at rebuilding with libssl-1.0-dev (OpenSSL 1.0), but this is impractical since another dependency, liblasso3-dev, depends on OpenSSL 1.1. Damn this OpenSSL API break! |
|
That is correct - 3 methods from UI/MailPartViewers/UIxMailPartSignedViewer.m need to be ported to Gnu TLS. |
|
sogo: master 22c078ee 2017-07-04 11:00 Details Diff |
(fix) enable S/MIME even when using GNU TLS (fixes 0004201) |
Affected Issues 0004201 |
|
mod - UI/MailPartViewers/GNUmakefile.preamble | Diff File | ||
mod - UI/MailPartViewers/UIxMailPartSignedViewer.m | Diff File | ||
sogo: v2 8d1b02d5 2017-07-04 11:00 Details Diff |
(fix) enable S/MIME even when using GNU TLS (fixes 0004201) Conflicts: UI/MailPartViewers/UIxMailPartSignedViewer.m |
Affected Issues 0004201 |
|
mod - UI/MailPartViewers/GNUmakefile.preamble | Diff File | ||
mod - UI/MailPartViewers/UIxMailPartSignedViewer.m | Diff File |
Date Modified | Username | Field | Change |
---|---|---|---|
2017-06-17 23:50 | gturner | New Issue | |
2017-06-17 23:50 | gturner | File Added: multipart-signed-email | |
2017-06-19 08:13 | Christian Mack | Note Added: 0011985 | |
2017-06-19 16:44 | gturner | Note Added: 0011991 | |
2017-06-27 11:48 | ludovic | Severity | major => minor |
2017-06-27 11:49 | ludovic | Assigned To | => ludovic |
2017-06-27 11:49 | ludovic | Status | new => assigned |
2017-06-27 11:49 | ludovic | Target Version | => 3.2.10 |
2017-06-27 12:12 | jordi | Note Added: 0012007 | |
2017-06-27 16:21 | gturner | Note Added: 0012009 | |
2017-07-04 14:29 | ludovic | Note Added: 0012029 | |
2017-07-04 15:01 | ludovic | Changeset attached | => sogo master 22c078ee |
2017-07-04 15:01 | ludovic | Resolution | open => fixed |
2017-07-04 15:02 | ludovic | Changeset attached | => sogo v2 8d1b02d5 |
2017-07-04 15:03 | ludovic | Status | assigned => resolved |
2017-07-04 15:03 | ludovic | Fixed in Version | => 3.2.10 |
2017-10-09 07:56 | Christian Mack | Relationship added | has duplicate 0004307 |