Add decryption of PGP/MIME-encrypted parts with --decrypt.

[notmuch] / show-message.c

diff --git a/show-message.c b/show-message.c
index 2ec9eca91d5095b8dd6409a98b743bc314c02a6b..37252b22b2d05f8d4f01dc47fb9b9f2dabd8cf8d 100644 (file)
--- a/show-message.c
+++ b/show-message.c
@@ -46,12 +46,80 @@ show_message_part (GMimeObject *part,
     selected = (params->part <= 0 || state->part_count == params->part);
 
     if (selected || state->in_zone) {
-       if (!first && (params->part <= 0 || state->in_zone) && format->part_sep)
+       if (!first && (params->part <= 0 || state->in_zone))
            fputs (format->part_sep, stdout);
 
-       format->part (part, &(state->part_count));
+       if (format->part_start)
+           format->part_start (part, &(state->part_count));
     }
 
+    /* handle PGP/MIME parts */
+    if (GMIME_IS_MULTIPART (part) && params->cryptoctx) {
+       GMimeMultipart *multipart = GMIME_MULTIPART (part);
+       GError* err = NULL;
+
+       if (GMIME_IS_MULTIPART_ENCRYPTED (part) && params->decrypt)
+       {
+           if ( g_mime_multipart_get_count (multipart) != 2 ) {
+               /* this violates RFC 3156 section 4, so we won't bother with it. */
+               fprintf (stderr,
+                        "Error: %d part(s) for a multipart/encrypted message (should be exactly 2)\n",
+                        g_mime_multipart_get_count (multipart));
+           } else {
+               GMimeMultipartEncrypted *encrypteddata = GMIME_MULTIPART_ENCRYPTED (part);
+               GMimeObject *decryptedpart = g_mime_multipart_encrypted_decrypt (encrypteddata, params->cryptoctx, &err);
+               if (decryptedpart) {
+                   if ((selected || state->in_zone) && format->part_encstatus)
+                       format->part_encstatus (1);
+                   const GMimeSignatureValidity *sigvalidity = g_mime_multipart_encrypted_get_signature_validity (encrypteddata);
+                   if (!sigvalidity)
+                       fprintf (stderr, "Failed to verify signed part: %s\n", (err ? err->message : "no error explanation given"));
+                   if ((selected || state->in_zone) && format->part_sigstatus)
+                       format->part_sigstatus (sigvalidity);
+                   /* swap the part with the decrypted part */
+                   part = decryptedpart;
+               } else {
+                   fprintf (stderr, "Failed to decrypt part: %s\n", (err ? err->message : "no error explanation given"));
+                   if ((selected || state->in_zone) && format->part_encstatus)
+                       format->part_encstatus (0);
+               }
+           }
+       }
+       else if (GMIME_IS_MULTIPART_SIGNED (part))
+       {
+           if ( g_mime_multipart_get_count (multipart) != 2 ) {
+               /* this violates RFC 3156 section 5, so we won't bother with it. */
+               fprintf (stderr,
+                        "Error: %d part(s) for a multipart/signed message (should be exactly 2)\n",
+                        g_mime_multipart_get_count (multipart));
+           } else {
+               /* For some reason the GMimeSignatureValidity returned
+                * here is not a const (inconsistent with that
+                * returned by
+                * g_mime_multipart_encrypted_get_signature_validity,
+                * and therefore needs to be properly disposed of.
+                * Hopefully the API will become more consistent. */
+               GMimeSignatureValidity *sigvalidity = g_mime_multipart_signed_verify (GMIME_MULTIPART_SIGNED (part), params->cryptoctx, &err);
+               if (!sigvalidity) {
+                   fprintf (stderr, "Failed to verify signed part: %s\n", (err ? err->message : "no error explanation given"));
+               }
+               if ((selected || state->in_zone) && format->part_sigstatus)
+                   format->part_sigstatus (sigvalidity);
+               /* extract only data part, and ignore signature part */
+               part = g_mime_multipart_get_part (multipart, 0);
+               if (sigvalidity)
+                   g_mime_signature_validity_free (sigvalidity);
+           }
+       }
+
+       if (err)
+           g_error_free (err);
+    }
+    /* end handle PGP/MIME parts */
+
+    if (selected || state->in_zone)
+       format->part_content (part);
+
     if (GMIME_IS_MULTIPART (part)) {
        GMimeMultipart *multipart = GMIME_MULTIPART (part);
        int i;