lisp/gnus/mml2015.el

   1 ;;; mml2015.el --- MIME Security with Pretty Good Privacy (PGP)
   2
   3 ;; Copyright (C) 2000, 2001, 2002, 2003, 2004,
   4 ;;   2005 Free Software Foundation, Inc.
   5
   6 ;; Author: Shenghuo Zhu <zsh@cs.rochester.edu>
   7 ;; Keywords: PGP MIME MML
   8
   9 ;; This file is part of GNU Emacs.
  10
  11 ;; GNU Emacs is free software; you can redistribute it and/or modify
  12 ;; it under the terms of the GNU General Public License as published
  13 ;; by the Free Software Foundation; either version 2, or (at your
  14 ;; option) any later version.
  15
  16 ;; GNU Emacs is distributed in the hope that it will be useful, but
  17 ;; WITHOUT ANY WARRANTY; without even the implied warranty of
  18 ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  19 ;; General Public License for more details.
  20
  21 ;; You should have received a copy of the GNU General Public License
  22 ;; along with GNU Emacs; see the file COPYING.  If not, write to the
  23 ;; Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
  24 ;; Boston, MA 02110-1301, USA.
  25
  26 ;;; Commentary:
  27
  28 ;; RFC 2015 is updated by RFC 3156, this file should be compatible
  29 ;; with both.
  30
  31 ;;; Code:
  32
  33 (eval-when-compile (require 'cl))
  34 (require 'mm-decode)
  35 (require 'mm-util)
  36 (require 'mml)
  37
  38 (defvar mml2015-use (or
  39                      (progn
  40                        (ignore-errors
  41                          (require 'pgg))
  42                        (and (fboundp 'pgg-sign-region)
  43                             'pgg))
  44                      (progn
  45                        (ignore-errors
  46                          (require 'gpg))
  47                        (and (fboundp 'gpg-sign-detached)
  48                             'gpg))
  49                      (progn (ignore-errors
  50                               (load "mc-toplev"))
  51                             (and (fboundp 'mc-encrypt-generic)
  52                                  (fboundp 'mc-sign-generic)
  53                                  (fboundp 'mc-cleanup-recipient-headers)
  54                                  'mailcrypt)))
  55   "The package used for PGP/MIME.")
  56
  57 ;; Something is not RFC2015.
  58 (defvar mml2015-function-alist
  59   '((mailcrypt mml2015-mailcrypt-sign
  60                mml2015-mailcrypt-encrypt
  61                mml2015-mailcrypt-verify
  62                mml2015-mailcrypt-decrypt
  63                mml2015-mailcrypt-clear-verify
  64                mml2015-mailcrypt-clear-decrypt)
  65     (gpg mml2015-gpg-sign
  66          mml2015-gpg-encrypt
  67          mml2015-gpg-verify
  68          mml2015-gpg-decrypt
  69          mml2015-gpg-clear-verify
  70          mml2015-gpg-clear-decrypt)
  71   (pgg mml2015-pgg-sign
  72        mml2015-pgg-encrypt
  73        mml2015-pgg-verify
  74        mml2015-pgg-decrypt
  75        mml2015-pgg-clear-verify
  76        mml2015-pgg-clear-decrypt))
  77   "Alist of PGP/MIME functions.")
  78
  79 (defvar mml2015-result-buffer nil)
  80
  81 (defcustom mml2015-unabbrev-trust-alist
  82   '(("TRUST_UNDEFINED" . nil)
  83     ("TRUST_NEVER"     . nil)
  84     ("TRUST_MARGINAL"  . t)
  85     ("TRUST_FULLY"     . t)
  86     ("TRUST_ULTIMATE"  . t))
  87   "Map GnuPG trust output values to a boolean saying if you trust the key."
  88   :version "22.1"
  89   :group 'mime-security
  90   :type '(repeat (cons (regexp :tag "GnuPG output regexp")
  91                        (boolean :tag "Trust key"))))
  92
  93 ;;; mailcrypt wrapper
  94
  95 (eval-and-compile
  96   (autoload 'mailcrypt-decrypt "mailcrypt")
  97   (autoload 'mailcrypt-verify "mailcrypt")
  98   (autoload 'mc-pgp-always-sign "mailcrypt")
  99   (autoload 'mc-encrypt-generic "mc-toplev")
 100   (autoload 'mc-cleanup-recipient-headers "mc-toplev")
 101   (autoload 'mc-sign-generic "mc-toplev"))
 102
 103 (eval-when-compile
 104   (defvar mc-default-scheme)
 105   (defvar mc-schemes))
 106
 107 (defvar mml2015-decrypt-function 'mailcrypt-decrypt)
 108 (defvar mml2015-verify-function 'mailcrypt-verify)
 109
 110 (defun mml2015-format-error (err)
 111   (if (stringp (cadr err))
 112       (cadr err)
 113     (format "%S" (cdr err))))
 114
 115 (defun mml2015-mailcrypt-decrypt (handle ctl)
 116   (catch 'error
 117     (let (child handles result)
 118       (unless (setq child (mm-find-part-by-type
 119                            (cdr handle)
 120                            "application/octet-stream" nil t))
 121         (mm-set-handle-multipart-parameter
 122          mm-security-handle 'gnus-info "Corrupted")
 123         (throw 'error handle))
 124       (with-temp-buffer
 125         (mm-insert-part child)
 126         (setq result
 127               (condition-case err
 128                   (funcall mml2015-decrypt-function)
 129                 (error
 130                  (mm-set-handle-multipart-parameter
 131                   mm-security-handle 'gnus-details (mml2015-format-error err))
 132                  nil)
 133                 (quit
 134                  (mm-set-handle-multipart-parameter
 135                   mm-security-handle 'gnus-details "Quit.")
 136                  nil)))
 137         (unless (car result)
 138           (mm-set-handle-multipart-parameter
 139            mm-security-handle 'gnus-info "Failed")
 140           (throw 'error handle))
 141         (setq handles (mm-dissect-buffer t)))
 142       (mm-destroy-parts handle)
 143       (mm-set-handle-multipart-parameter
 144        mm-security-handle 'gnus-info
 145        (concat "OK"
 146                (let ((sig (with-current-buffer mml2015-result-buffer
 147                             (mml2015-gpg-extract-signature-details))))
 148                  (concat ", Signer: " sig))))
 149       (if (listp (car handles))
 150           handles
 151         (list handles)))))
 152
 153 (defun mml2015-mailcrypt-clear-decrypt ()
 154   (let (result)
 155     (setq result
 156           (condition-case err
 157               (funcall mml2015-decrypt-function)
 158             (error
 159              (mm-set-handle-multipart-parameter
 160               mm-security-handle 'gnus-details (mml2015-format-error err))
 161              nil)
 162             (quit
 163              (mm-set-handle-multipart-parameter
 164               mm-security-handle 'gnus-details "Quit.")
 165              nil)))
 166     (if (car result)
 167         (mm-set-handle-multipart-parameter
 168          mm-security-handle 'gnus-info "OK")
 169       (mm-set-handle-multipart-parameter
 170        mm-security-handle 'gnus-info "Failed"))))
 171
 172 (defun mml2015-fix-micalg (alg)
 173   (and alg
 174        ;; Mutt/1.2.5i has seen sending micalg=php-sha1
 175        (upcase (if (string-match "^p[gh]p-" alg)
 176                    (substring alg (match-end 0))
 177                  alg))))
 178
 179 (defun mml2015-mailcrypt-verify (handle ctl)
 180   (catch 'error
 181     (let (part)
 182       (unless (setq part (mm-find-raw-part-by-type
 183                           ctl (or (mm-handle-multipart-ctl-parameter
 184                                    ctl 'protocol)
 185                                   "application/pgp-signature")
 186                           t))
 187         (mm-set-handle-multipart-parameter
 188          mm-security-handle 'gnus-info "Corrupted")
 189         (throw 'error handle))
 190       (with-temp-buffer
 191         (insert "-----BEGIN PGP SIGNED MESSAGE-----\n")
 192         (insert (format "Hash: %s\n\n"
 193                         (or (mml2015-fix-micalg
 194                              (mm-handle-multipart-ctl-parameter
 195                               ctl 'micalg))
 196                             "SHA1")))
 197         (save-restriction
 198           (narrow-to-region (point) (point))
 199           (insert part "\n")
 200           (goto-char (point-min))
 201           (while (not (eobp))
 202             (if (looking-at "^-")
 203                 (insert "- "))
 204             (forward-line)))
 205         (unless (setq part (mm-find-part-by-type
 206                             (cdr handle) "application/pgp-signature" nil t))
 207           (mm-set-handle-multipart-parameter
 208            mm-security-handle 'gnus-info "Corrupted")
 209           (throw 'error handle))
 210         (save-restriction
 211           (narrow-to-region (point) (point))
 212           (mm-insert-part part)
 213           (goto-char (point-min))
 214           (if (re-search-forward "^-----BEGIN PGP [^-]+-----\r?$" nil t)
 215               (replace-match "-----BEGIN PGP SIGNATURE-----" t t))
 216           (if (re-search-forward "^-----END PGP [^-]+-----\r?$" nil t)
 217               (replace-match "-----END PGP SIGNATURE-----" t t)))
 218         (let ((mc-gpg-debug-buffer (get-buffer-create " *gnus gpg debug*")))
 219           (unless (condition-case err
 220                       (prog1
 221                           (funcall mml2015-verify-function)
 222                         (if (get-buffer " *mailcrypt stderr temp")
 223                             (mm-set-handle-multipart-parameter
 224                              mm-security-handle 'gnus-details
 225                              (with-current-buffer " *mailcrypt stderr temp"
 226                                (buffer-string))))
 227                         (if (get-buffer " *mailcrypt stdout temp")
 228                             (kill-buffer " *mailcrypt stdout temp"))
 229                         (if (get-buffer " *mailcrypt stderr temp")
 230                             (kill-buffer " *mailcrypt stderr temp"))
 231                         (if (get-buffer " *mailcrypt status temp")
 232                             (kill-buffer " *mailcrypt status temp"))
 233                         (if (get-buffer mc-gpg-debug-buffer)
 234                             (kill-buffer mc-gpg-debug-buffer)))
 235                     (error
 236                      (mm-set-handle-multipart-parameter
 237                       mm-security-handle 'gnus-details (mml2015-format-error err))
 238                      nil)
 239                     (quit
 240                      (mm-set-handle-multipart-parameter
 241                       mm-security-handle 'gnus-details "Quit.")
 242                      nil))
 243             (mm-set-handle-multipart-parameter
 244              mm-security-handle 'gnus-info "Failed")
 245             (throw 'error handle))))
 246       (mm-set-handle-multipart-parameter
 247        mm-security-handle 'gnus-info "OK")
 248       handle)))
 249
 250 (defun mml2015-mailcrypt-clear-verify ()
 251   (let ((mc-gpg-debug-buffer (get-buffer-create " *gnus gpg debug*")))
 252     (if (condition-case err
 253             (prog1
 254                 (funcall mml2015-verify-function)
 255               (if (get-buffer " *mailcrypt stderr temp")
 256                   (mm-set-handle-multipart-parameter
 257                    mm-security-handle 'gnus-details
 258                    (with-current-buffer " *mailcrypt stderr temp"
 259                      (buffer-string))))
 260               (if (get-buffer " *mailcrypt stdout temp")
 261                   (kill-buffer " *mailcrypt stdout temp"))
 262               (if (get-buffer " *mailcrypt stderr temp")
 263                   (kill-buffer " *mailcrypt stderr temp"))
 264               (if (get-buffer " *mailcrypt status temp")
 265                   (kill-buffer " *mailcrypt status temp"))
 266               (if (get-buffer mc-gpg-debug-buffer)
 267                   (kill-buffer mc-gpg-debug-buffer)))
 268           (error
 269            (mm-set-handle-multipart-parameter
 270             mm-security-handle 'gnus-details (mml2015-format-error err))
 271            nil)
 272           (quit
 273            (mm-set-handle-multipart-parameter
 274             mm-security-handle 'gnus-details "Quit.")
 275            nil))
 276         (mm-set-handle-multipart-parameter
 277          mm-security-handle 'gnus-info "OK")
 278       (mm-set-handle-multipart-parameter
 279        mm-security-handle 'gnus-info "Failed"))))
 280
 281 (defun mml2015-mailcrypt-sign (cont)
 282   (mc-sign-generic (message-options-get 'message-sender)
 283                    nil nil nil nil)
 284   (let ((boundary (mml-compute-boundary cont))
 285         hash point)
 286     (goto-char (point-min))
 287     (unless (re-search-forward "^-----BEGIN PGP SIGNED MESSAGE-----\r?$" nil t)
 288       (error "Cannot find signed begin line"))
 289     (goto-char (match-beginning 0))
 290     (forward-line 1)
 291     (unless (looking-at "Hash:[ \t]*\\([a-zA-Z0-9]+\\)")
 292       (error "Cannot not find PGP hash"))
 293     (setq hash (match-string 1))
 294     (unless (re-search-forward "^$" nil t)
 295       (error "Cannot not find PGP message"))
 296     (forward-line 1)
 297     (delete-region (point-min) (point))
 298     (insert (format "Content-Type: multipart/signed; boundary=\"%s\";\n"
 299                     boundary))
 300     (insert (format "\tmicalg=pgp-%s; protocol=\"application/pgp-signature\"\n"
 301                     (downcase hash)))
 302     (insert (format "\n--%s\n" boundary))
 303     (setq point (point))
 304     (goto-char (point-max))
 305     (unless (re-search-backward "^-----END PGP SIGNATURE-----\r?$" nil t)
 306       (error "Cannot find signature part"))
 307     (replace-match "-----END PGP MESSAGE-----" t t)
 308     (goto-char (match-beginning 0))
 309     (unless (re-search-backward "^-----BEGIN PGP SIGNATURE-----\r?$"
 310                                 nil t)
 311       (error "Cannot find signature part"))
 312     (replace-match "-----BEGIN PGP MESSAGE-----" t t)
 313     (goto-char (match-beginning 0))
 314     (save-restriction
 315       (narrow-to-region point (point))
 316       (goto-char point)
 317       (while (re-search-forward "^- -" nil t)
 318         (replace-match "-" t t))
 319       (goto-char (point-max)))
 320     (insert (format "--%s\n" boundary))
 321     (insert "Content-Type: application/pgp-signature\n\n")
 322     (goto-char (point-max))
 323     (insert (format "--%s--\n" boundary))
 324     (goto-char (point-max))))
 325
 326 (defun mml2015-mailcrypt-encrypt (cont &optional sign)
 327   (let ((mc-pgp-always-sign
 328          (or mc-pgp-always-sign
 329              sign
 330              (eq t (or (message-options-get 'message-sign-encrypt)
 331                        (message-options-set
 332                         'message-sign-encrypt
 333                         (or (y-or-n-p "Sign the message? ")
 334                             'not))))
 335              'never)))
 336     (mm-with-unibyte-current-buffer
 337       (mc-encrypt-generic
 338        (or (message-options-get 'message-recipients)
 339            (message-options-set 'message-recipients
 340                               (mc-cleanup-recipient-headers
 341                                (read-string "Recipients: "))))
 342        nil nil nil
 343        (message-options-get 'message-sender))))
 344   (goto-char (point-min))
 345   (unless (looking-at "-----BEGIN PGP MESSAGE-----")
 346     (error "Fail to encrypt the message"))
 347   (let ((boundary (mml-compute-boundary cont)))
 348     (insert (format "Content-Type: multipart/encrypted; boundary=\"%s\";\n"
 349                     boundary))
 350     (insert "\tprotocol=\"application/pgp-encrypted\"\n\n")
 351     (insert (format "--%s\n" boundary))
 352     (insert "Content-Type: application/pgp-encrypted\n\n")
 353     (insert "Version: 1\n\n")
 354     (insert (format "--%s\n" boundary))
 355     (insert "Content-Type: application/octet-stream\n\n")
 356     (goto-char (point-max))
 357     (insert (format "--%s--\n" boundary))
 358     (goto-char (point-max))))
 359
 360 ;;; gpg wrapper
 361
 362 (eval-and-compile
 363   (autoload 'gpg-decrypt "gpg")
 364   (autoload 'gpg-verify "gpg")
 365   (autoload 'gpg-verify-cleartext "gpg")
 366   (autoload 'gpg-sign-detached "gpg")
 367   (autoload 'gpg-sign-encrypt "gpg")
 368   (autoload 'gpg-encrypt "gpg")
 369   (autoload 'gpg-passphrase-read "gpg"))
 370
 371 (defun mml2015-gpg-passphrase ()
 372   (or (message-options-get 'gpg-passphrase)
 373       (message-options-set 'gpg-passphrase (gpg-passphrase-read))))
 374
 375 (defun mml2015-gpg-decrypt-1 ()
 376   (let ((cipher (current-buffer)) plain result)
 377     (if (with-temp-buffer
 378           (prog1
 379               (gpg-decrypt cipher (setq plain (current-buffer))
 380                            mml2015-result-buffer nil)
 381             (mm-set-handle-multipart-parameter
 382              mm-security-handle 'gnus-details
 383              (with-current-buffer mml2015-result-buffer
 384                (buffer-string)))
 385             (set-buffer cipher)
 386             (erase-buffer)
 387             (insert-buffer-substring plain)
 388             (goto-char (point-min))
 389             (while (search-forward "\r\n" nil t)
 390               (replace-match "\n" t t))))
 391         '(t)
 392       ;; Some wrong with the return value, check plain text buffer.
 393       (if (> (point-max) (point-min))
 394           '(t)
 395         nil))))
 396
 397 (defun mml2015-gpg-decrypt (handle ctl)
 398   (let ((mml2015-decrypt-function 'mml2015-gpg-decrypt-1))
 399     (mml2015-mailcrypt-decrypt handle ctl)))
 400
 401 (defun mml2015-gpg-clear-decrypt ()
 402   (let (result)
 403     (setq result (mml2015-gpg-decrypt-1))
 404     (if (car result)
 405         (mm-set-handle-multipart-parameter
 406          mm-security-handle 'gnus-info "OK")
 407       (mm-set-handle-multipart-parameter
 408        mm-security-handle 'gnus-info "Failed"))))
 409
 410 (defun mml2015-gpg-pretty-print-fpr (fingerprint)
 411   (let* ((result "")
 412          (fpr-length (string-width fingerprint))
 413          (n-slice 0)
 414          slice)
 415     (setq fingerprint (string-to-list fingerprint))
 416     (while fingerprint
 417       (setq fpr-length (- fpr-length 4))
 418       (setq slice (butlast fingerprint fpr-length))
 419       (setq fingerprint (nthcdr 4 fingerprint))
 420       (setq n-slice (1+ n-slice))
 421       (setq result
 422             (concat
 423              result
 424              (case n-slice
 425                (1  slice)
 426                (otherwise (concat " " slice))))))
 427     result))
 428
 429 (defun mml2015-gpg-extract-signature-details ()
 430   (goto-char (point-min))
 431   (let* ((expired (re-search-forward
 432                    "^\\[GNUPG:\\] SIGEXPIRED$"
 433                    nil t))
 434          (signer (and (re-search-forward
 435                        "^\\[GNUPG:\\] GOODSIG \\([0-9A-Za-z]*\\) \\(.*\\)$"
 436                        nil t)
 437                       (cons (match-string 1) (match-string 2))))
 438          (fprint (and (re-search-forward
 439                        "^\\[GNUPG:\\] VALIDSIG \\([0-9a-zA-Z]*\\) "
 440                        nil t)
 441                       (match-string 1)))
 442          (trust  (and (re-search-forward
 443                        "^\\[GNUPG:\\] \\(TRUST_.*\\)$"
 444                        nil t)
 445                       (match-string 1)))
 446          (trust-good-enough-p
 447           (cdr (assoc trust mml2015-unabbrev-trust-alist))))
 448     (cond ((and signer fprint)
 449            (concat (cdr signer)
 450                    (unless trust-good-enough-p
 451                      (concat "\nUntrusted, Fingerprint: "
 452                              (mml2015-gpg-pretty-print-fpr fprint)))
 453                    (when expired
 454                      (format "\nWARNING: Signature from expired key (%s)"
 455                              (car signer)))))
 456           ((re-search-forward
 457             "^\\(gpg: \\)?Good signature from \"\\(.*\\)\"$" nil t)
 458            (match-string 2))
 459           (t
 460            "From unknown user"))))
 461
 462 (defun mml2015-gpg-verify (handle ctl)
 463   (catch 'error
 464     (let (part message signature info-is-set-p)
 465       (unless (setq part (mm-find-raw-part-by-type
 466                           ctl (or (mm-handle-multipart-ctl-parameter
 467                                    ctl 'protocol)
 468                                   "application/pgp-signature")
 469                           t))
 470         (mm-set-handle-multipart-parameter
 471          mm-security-handle 'gnus-info "Corrupted")
 472         (throw 'error handle))
 473       (with-temp-buffer
 474         (setq message (current-buffer))
 475         (insert part)
 476         ;; Convert <LF> to <CR><LF> in verify mode.  Sign and
 477         ;; clearsign use --textmode. The conversion is not necessary.
 478         ;; In clearverify, the conversion is not necessary either.
 479         (goto-char (point-min))
 480         (end-of-line)
 481         (while (not (eobp))
 482           (unless (eq (char-before) ?\r)
 483             (insert "\r"))
 484           (forward-line)
 485           (end-of-line))
 486         (with-temp-buffer
 487           (setq signature (current-buffer))
 488           (unless (setq part (mm-find-part-by-type
 489                               (cdr handle) "application/pgp-signature" nil t))
 490             (mm-set-handle-multipart-parameter
 491              mm-security-handle 'gnus-info "Corrupted")
 492             (throw 'error handle))
 493           (mm-insert-part part)
 494           (unless (condition-case err
 495                       (prog1
 496                           (gpg-verify message signature mml2015-result-buffer)
 497                         (mm-set-handle-multipart-parameter
 498                          mm-security-handle 'gnus-details
 499                          (with-current-buffer mml2015-result-buffer
 500                            (buffer-string))))
 501                     (error
 502                      (mm-set-handle-multipart-parameter
 503                       mm-security-handle 'gnus-details (mml2015-format-error err))
 504                      (mm-set-handle-multipart-parameter
 505                       mm-security-handle 'gnus-info "Error.")
 506                      (setq info-is-set-p t)
 507                      nil)
 508                     (quit
 509                      (mm-set-handle-multipart-parameter
 510                       mm-security-handle 'gnus-details "Quit.")
 511                      (mm-set-handle-multipart-parameter
 512                       mm-security-handle 'gnus-info "Quit.")
 513                      (setq info-is-set-p t)
 514                      nil))
 515             (unless info-is-set-p
 516               (mm-set-handle-multipart-parameter
 517                mm-security-handle 'gnus-info "Failed"))
 518             (throw 'error handle)))
 519         (mm-set-handle-multipart-parameter
 520          mm-security-handle 'gnus-info
 521          (with-current-buffer mml2015-result-buffer
 522            (mml2015-gpg-extract-signature-details))))
 523       handle)))
 524
 525 (defun mml2015-gpg-clear-verify ()
 526   (if (condition-case err
 527           (prog1
 528               (gpg-verify-cleartext (current-buffer) mml2015-result-buffer)
 529             (mm-set-handle-multipart-parameter
 530              mm-security-handle 'gnus-details
 531              (with-current-buffer mml2015-result-buffer
 532                (buffer-string))))
 533         (error
 534          (mm-set-handle-multipart-parameter
 535           mm-security-handle 'gnus-details (mml2015-format-error err))
 536          nil)
 537         (quit
 538          (mm-set-handle-multipart-parameter
 539           mm-security-handle 'gnus-details "Quit.")
 540          nil))
 541       (mm-set-handle-multipart-parameter
 542        mm-security-handle 'gnus-info
 543        (with-current-buffer mml2015-result-buffer
 544          (mml2015-gpg-extract-signature-details)))
 545     (mm-set-handle-multipart-parameter
 546      mm-security-handle 'gnus-info "Failed")))
 547
 548 (defun mml2015-gpg-sign (cont)
 549   (let ((boundary (mml-compute-boundary cont))
 550         (text (current-buffer)) signature)
 551     (goto-char (point-max))
 552     (unless (bolp)
 553       (insert "\n"))
 554     (with-temp-buffer
 555       (unless (gpg-sign-detached text (setq signature (current-buffer))
 556                                  mml2015-result-buffer
 557                                  nil
 558                                  (message-options-get 'message-sender)
 559                                  t t) ; armor & textmode
 560         (unless (> (point-max) (point-min))
 561           (pop-to-buffer mml2015-result-buffer)
 562           (error "Sign error")))
 563       (goto-char (point-min))
 564       (while (re-search-forward "\r+$" nil t)
 565         (replace-match "" t t))
 566       (set-buffer text)
 567       (goto-char (point-min))
 568       (insert (format "Content-Type: multipart/signed; boundary=\"%s\";\n"
 569                       boundary))
 570       ;;; FIXME: what is the micalg?
 571       (insert "\tmicalg=pgp-sha1; protocol=\"application/pgp-signature\"\n")
 572       (insert (format "\n--%s\n" boundary))
 573       (goto-char (point-max))
 574       (insert (format "\n--%s\n" boundary))
 575       (insert "Content-Type: application/pgp-signature\n\n")
 576       (insert-buffer-substring signature)
 577       (goto-char (point-max))
 578       (insert (format "--%s--\n" boundary))
 579       (goto-char (point-max)))))
 580
 581 (defun mml2015-gpg-encrypt (cont &optional sign)
 582   (let ((boundary (mml-compute-boundary cont))
 583         (text (current-buffer))
 584         cipher)
 585     (mm-with-unibyte-current-buffer
 586       (with-temp-buffer
 587         ;; set up a function to call the correct gpg encrypt routine
 588         ;; with the right arguments. (FIXME: this should be done
 589         ;; differently.)
 590         (flet ((gpg-encrypt-func
 591                  (sign plaintext ciphertext result recipients &optional
 592                        passphrase sign-with-key armor textmode)
 593                  (if sign
 594                      (gpg-sign-encrypt
 595                       plaintext ciphertext result recipients passphrase
 596                       sign-with-key armor textmode)
 597                    (gpg-encrypt
 598                     plaintext ciphertext result recipients passphrase
 599                     armor textmode))))
 600           (unless (gpg-encrypt-func
 601                     sign ; passed in when using signencrypt
 602                     text (setq cipher (current-buffer))
 603                     mml2015-result-buffer
 604                     (split-string
 605                      (or
 606                       (message-options-get 'message-recipients)
 607                       (message-options-set 'message-recipients
 608                                            (read-string "Recipients: ")))
 609                      "[ \f\t\n\r\v,]+")
 610                     nil
 611                     (message-options-get 'message-sender)
 612                     t t) ; armor & textmode
 613             (unless (> (point-max) (point-min))
 614               (pop-to-buffer mml2015-result-buffer)
 615               (error "Encrypt error"))))
 616         (goto-char (point-min))
 617         (while (re-search-forward "\r+$" nil t)
 618           (replace-match "" t t))
 619         (set-buffer text)
 620         (delete-region (point-min) (point-max))
 621         (insert (format "Content-Type: multipart/encrypted; boundary=\"%s\";\n"
 622                         boundary))
 623         (insert "\tprotocol=\"application/pgp-encrypted\"\n\n")
 624         (insert (format "--%s\n" boundary))
 625         (insert "Content-Type: application/pgp-encrypted\n\n")
 626         (insert "Version: 1\n\n")
 627         (insert (format "--%s\n" boundary))
 628         (insert "Content-Type: application/octet-stream\n\n")
 629         (insert-buffer-substring cipher)
 630         (goto-char (point-max))
 631         (insert (format "--%s--\n" boundary))
 632         (goto-char (point-max))))))
 633
 634 ;;; pgg wrapper
 635
 636 (eval-when-compile
 637   (defvar pgg-default-user-id)
 638   (defvar pgg-errors-buffer)
 639   (defvar pgg-output-buffer))
 640
 641 (eval-and-compile
 642   (autoload 'pgg-decrypt-region "pgg")
 643   (autoload 'pgg-verify-region "pgg")
 644   (autoload 'pgg-sign-region "pgg")
 645   (autoload 'pgg-encrypt-region "pgg"))
 646
 647 (defun mml2015-pgg-decrypt (handle ctl)
 648   (catch 'error
 649     (let ((pgg-errors-buffer mml2015-result-buffer)
 650           child handles result decrypt-status)
 651       (unless (setq child (mm-find-part-by-type
 652                            (cdr handle)
 653                            "application/octet-stream" nil t))
 654         (mm-set-handle-multipart-parameter
 655          mm-security-handle 'gnus-info "Corrupted")
 656         (throw 'error handle))
 657       (with-temp-buffer
 658         (mm-insert-part child)
 659         (if (condition-case err
 660                 (prog1
 661                     (pgg-decrypt-region (point-min) (point-max))
 662                   (setq decrypt-status
 663                         (with-current-buffer mml2015-result-buffer
 664                           (buffer-string)))
 665                   (mm-set-handle-multipart-parameter
 666                    mm-security-handle 'gnus-details
 667                    decrypt-status))
 668               (error
 669                (mm-set-handle-multipart-parameter
 670                 mm-security-handle 'gnus-details (mml2015-format-error err))
 671                nil)
 672               (quit
 673                (mm-set-handle-multipart-parameter
 674                 mm-security-handle 'gnus-details "Quit.")
 675                nil))
 676             (with-current-buffer pgg-output-buffer
 677               (goto-char (point-min))
 678               (while (search-forward "\r\n" nil t)
 679                 (replace-match "\n" t t))
 680               (setq handles (mm-dissect-buffer t))
 681               (mm-destroy-parts handle)
 682               (mm-set-handle-multipart-parameter
 683                mm-security-handle 'gnus-info "OK")
 684               (mm-set-handle-multipart-parameter
 685                mm-security-handle 'gnus-details
 686                (concat decrypt-status
 687                        (when (stringp (car handles))
 688                          "\n" (mm-handle-multipart-ctl-parameter
 689                                handles 'gnus-details))))
 690               (if (listp (car handles))
 691                   handles
 692                 (list handles)))
 693           (mm-set-handle-multipart-parameter
 694            mm-security-handle 'gnus-info "Failed")
 695           (throw 'error handle))))))
 696
 697 (defun mml2015-pgg-clear-decrypt ()
 698   (let ((pgg-errors-buffer mml2015-result-buffer))
 699     (if (prog1
 700             (pgg-decrypt-region (point-min) (point-max))
 701           (mm-set-handle-multipart-parameter
 702            mm-security-handle 'gnus-details
 703            (with-current-buffer mml2015-result-buffer
 704              (buffer-string))))
 705         (progn
 706           (erase-buffer)
 707           (insert-buffer-substring pgg-output-buffer)
 708           (goto-char (point-min))
 709           (while (search-forward "\r\n" nil t)
 710             (replace-match "\n" t t))
 711           (mm-set-handle-multipart-parameter
 712            mm-security-handle 'gnus-info "OK"))
 713       (mm-set-handle-multipart-parameter
 714        mm-security-handle 'gnus-info "Failed"))))
 715
 716 (defun mml2015-pgg-verify (handle ctl)
 717   (let ((pgg-errors-buffer mml2015-result-buffer)
 718         signature-file part signature)
 719     (if (or (null (setq part (mm-find-raw-part-by-type
 720                               ctl (or (mm-handle-multipart-ctl-parameter
 721                                        ctl 'protocol)
 722                                       "application/pgp-signature")
 723                               t)))
 724             (null (setq signature (mm-find-part-by-type
 725                                    (cdr handle) "application/pgp-signature" nil t))))
 726         (progn
 727           (mm-set-handle-multipart-parameter
 728            mm-security-handle 'gnus-info "Corrupted")
 729           handle)
 730       (with-temp-buffer
 731         (insert part)
 732         ;; Convert <LF> to <CR><LF> in verify mode.  Sign and
 733         ;; clearsign use --textmode. The conversion is not necessary.
 734         ;; In clearverify, the conversion is not necessary either.
 735         (goto-char (point-min))
 736         (end-of-line)
 737         (while (not (eobp))
 738           (unless (eq (char-before) ?\r)
 739             (insert "\r"))
 740           (forward-line)
 741           (end-of-line))
 742         (with-temp-file (setq signature-file (mm-make-temp-file "pgg"))
 743           (mm-insert-part signature))
 744         (if (condition-case err
 745                 (prog1
 746                     (pgg-verify-region (point-min) (point-max)
 747                                        signature-file t)
 748                   (goto-char (point-min))
 749                   (while (search-forward "\r\n" nil t)
 750                     (replace-match "\n" t t))
 751                   (mm-set-handle-multipart-parameter
 752                    mm-security-handle 'gnus-details
 753                    (concat (with-current-buffer pgg-output-buffer
 754                              (buffer-string))
 755                            (with-current-buffer pgg-errors-buffer
 756                              (buffer-string)))))
 757               (error
 758                (mm-set-handle-multipart-parameter
 759                 mm-security-handle 'gnus-details (mml2015-format-error err))
 760                nil)
 761               (quit
 762                (mm-set-handle-multipart-parameter
 763                 mm-security-handle 'gnus-details "Quit.")
 764                nil))
 765             (progn
 766               (delete-file signature-file)
 767               (mm-set-handle-multipart-parameter
 768                mm-security-handle 'gnus-info
 769                (with-current-buffer pgg-errors-buffer
 770                  (mml2015-gpg-extract-signature-details))))
 771           (delete-file signature-file)
 772           (mm-set-handle-multipart-parameter
 773            mm-security-handle 'gnus-info "Failed")))))
 774   handle)
 775
 776 (defun mml2015-pgg-clear-verify ()
 777   (let ((pgg-errors-buffer mml2015-result-buffer)
 778         (text (buffer-string))
 779         (coding-system buffer-file-coding-system))
 780     (if (condition-case err
 781             (prog1
 782                 (mm-with-unibyte-buffer
 783                   (insert (encode-coding-string text coding-system))
 784                   (pgg-verify-region (point-min) (point-max) nil t))
 785               (goto-char (point-min))
 786               (while (search-forward "\r\n" nil t)
 787                 (replace-match "\n" t t))
 788               (mm-set-handle-multipart-parameter
 789                mm-security-handle 'gnus-details
 790                (concat (with-current-buffer pgg-output-buffer
 791                          (buffer-string))
 792                        (with-current-buffer pgg-errors-buffer
 793                          (buffer-string)))))
 794           (error
 795            (mm-set-handle-multipart-parameter
 796             mm-security-handle 'gnus-details (mml2015-format-error err))
 797            nil)
 798           (quit
 799            (mm-set-handle-multipart-parameter
 800             mm-security-handle 'gnus-details "Quit.")
 801            nil))
 802         (mm-set-handle-multipart-parameter
 803          mm-security-handle 'gnus-info
 804          (with-current-buffer pgg-errors-buffer
 805            (mml2015-gpg-extract-signature-details)))
 806       (mm-set-handle-multipart-parameter
 807        mm-security-handle 'gnus-info "Failed"))))
 808
 809 (defun mml2015-pgg-sign (cont)
 810   (let ((pgg-errors-buffer mml2015-result-buffer)
 811         (boundary (mml-compute-boundary cont))
 812         (pgg-default-user-id (or (message-options-get 'mml-sender)
 813                                  pgg-default-user-id)))
 814     (unless (pgg-sign-region (point-min) (point-max))
 815       (pop-to-buffer mml2015-result-buffer)
 816       (error "Sign error"))
 817     (goto-char (point-min))
 818     (insert (format "Content-Type: multipart/signed; boundary=\"%s\";\n"
 819                     boundary))
 820       ;;; FIXME: what is the micalg?
 821     (insert "\tmicalg=pgp-sha1; protocol=\"application/pgp-signature\"\n")
 822     (insert (format "\n--%s\n" boundary))
 823     (goto-char (point-max))
 824     (insert (format "\n--%s\n" boundary))
 825     (insert "Content-Type: application/pgp-signature\n\n")
 826     (insert-buffer-substring pgg-output-buffer)
 827     (goto-char (point-max))
 828     (insert (format "--%s--\n" boundary))
 829     (goto-char (point-max))))
 830
 831 (defun mml2015-pgg-encrypt (cont &optional sign)
 832   (let ((pgg-errors-buffer mml2015-result-buffer)
 833         (boundary (mml-compute-boundary cont)))
 834     (unless (pgg-encrypt-region (point-min) (point-max)
 835                                 (split-string
 836                                  (or
 837                                   (message-options-get 'message-recipients)
 838                                   (message-options-set 'message-recipients
 839                                                        (read-string "Recipients: ")))
 840                                  "[ \f\t\n\r\v,]+")
 841                                 sign)
 842       (pop-to-buffer mml2015-result-buffer)
 843       (error "Encrypt error"))
 844     (delete-region (point-min) (point-max))
 845     (goto-char (point-min))
 846     (insert (format "Content-Type: multipart/encrypted; boundary=\"%s\";\n"
 847                     boundary))
 848     (insert "\tprotocol=\"application/pgp-encrypted\"\n\n")
 849     (insert (format "--%s\n" boundary))
 850     (insert "Content-Type: application/pgp-encrypted\n\n")
 851     (insert "Version: 1\n\n")
 852     (insert (format "--%s\n" boundary))
 853     (insert "Content-Type: application/octet-stream\n\n")
 854     (insert-buffer-substring pgg-output-buffer)
 855     (goto-char (point-max))
 856     (insert (format "--%s--\n" boundary))
 857     (goto-char (point-max))))
 858
 859 ;;; General wrapper
 860
 861 (defun mml2015-clean-buffer ()
 862   (if (gnus-buffer-live-p mml2015-result-buffer)
 863       (with-current-buffer mml2015-result-buffer
 864         (erase-buffer)
 865         t)
 866     (setq mml2015-result-buffer
 867           (gnus-get-buffer-create "*MML2015 Result*"))
 868     nil))
 869
 870 (defsubst mml2015-clear-decrypt-function ()
 871   (nth 6 (assq mml2015-use mml2015-function-alist)))
 872
 873 (defsubst mml2015-clear-verify-function ()
 874   (nth 5 (assq mml2015-use mml2015-function-alist)))
 875
 876 ;;;###autoload
 877 (defun mml2015-decrypt (handle ctl)
 878   (mml2015-clean-buffer)
 879   (let ((func (nth 4 (assq mml2015-use mml2015-function-alist))))
 880     (if func
 881         (funcall func handle ctl)
 882       handle)))
 883
 884 ;;;###autoload
 885 (defun mml2015-decrypt-test (handle ctl)
 886   mml2015-use)
 887
 888 ;;;###autoload
 889 (defun mml2015-verify (handle ctl)
 890   (mml2015-clean-buffer)
 891   (let ((func (nth 3 (assq mml2015-use mml2015-function-alist))))
 892     (if func
 893         (funcall func handle ctl)
 894       handle)))
 895
 896 ;;;###autoload
 897 (defun mml2015-verify-test (handle ctl)
 898   mml2015-use)
 899
 900 ;;;###autoload
 901 (defun mml2015-encrypt (cont &optional sign)
 902   (mml2015-clean-buffer)
 903   (let ((func (nth 2 (assq mml2015-use mml2015-function-alist))))
 904     (if func
 905         (funcall func cont sign)
 906       (error "Cannot find encrypt function"))))
 907
 908 ;;;###autoload
 909 (defun mml2015-sign (cont)
 910   (mml2015-clean-buffer)
 911   (let ((func (nth 1 (assq mml2015-use mml2015-function-alist))))
 912     (if func
 913         (funcall func cont)
 914       (error "Cannot find sign function"))))
 915
 916 ;;;###autoload
 917 (defun mml2015-self-encrypt ()
 918   (mml2015-encrypt nil))
 919
 920 (provide 'mml2015)
 921
 922 ;;; arch-tag: b04701d5-0b09-44d8-bed8-de901bf435f2
 923 ;;; mml2015.el ends here