Bug#889994: sogo: GPG signed emails are not displayed

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Bug#889994: sogo: GPG signed emails are not displayed

Vivia Nikolaidou
Package: sogo
Version: 3.2.6-2
Severity: normal
Tags: upstream

Dear Maintainer,

The SOGo version in stable (3.2.6) has a bug where PGP signed emails are not
displayed properly; only the headers are displayed, but the body appears to be
empty.

According to the upstream bug report, it is fixed in version 3.2.10:

https://sogo.nu/bugs/bug_relationship_graph.php?bug_id=4201&graph=relation

Please backport the relevant fix from testing to stable.

Thank you very much,

Vivia Nikolaidou


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=el_GR.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sogo depends on:
ii  adduser              3.115
ii  init-system-helpers  1.48
ii  libc6                2.24-11+deb9u1
ii  libcurl3-gnutls      7.52.1-5+deb9u4
ii  libgcc1              1:6.3.0-18
ii  libglib2.0-0         2.50.3-2
ii  libgnustep-base1.24  1.24.9-3.1
ii  libgnutls30          3.5.8-5+deb9u3
ii  liblasso3            2.5.0-5+b1
ii  libmemcached11       1.0.18-4.1
ii  libobjc4             6.3.0-18
ii  libsbjson2.3         2.3.2-3
ii  libsope1             3.2.6-1
ii  lsb-base             9.20161125
ii  sogo-common          3.2.6-2
ii  systemd              232-25+deb9u1
ii  tmpreaper            1.6.13+nmu1+b2
ii  zip                  3.0-11+b1

Versions of packages sogo recommends:
ii  memcached  1.4.33-1

Versions of packages sogo suggests:
ii  default-mysql-server                        1.0.2
ii  mariadb-server-10.1 [virtual-mysql-server]  10.1.26-0+deb9u1

-- Configuration Files:
/etc/sogo/sogo.conf [Errno 13] Permission denied: '/etc/sogo/sogo.conf'

-- no debconf information

Reply | Threaded
Open this post in threaded view
|

Bug#889994: (no subject)

Hanno Stock-2
Severity: high


Upstream says it works in their builds and suggests that this is a
debian specific problem.

Setting severity to high as this makes the software unusable for
everybody who regularly receives signed mails - which especially in the
Debian user group can well be many users.

Reply | Threaded
Open this post in threaded view
|

Bug#889994: (no subject)

Hanno Stock-2
In reply to this post by Vivia Nikolaidou
Reply | Threaded
Open this post in threaded view
|

Bug#889994: (no subject)

Hanno Stock-2
In reply to this post by Vivia Nikolaidou
I can confirm that the error is introduced by the patch mentioned above.
When I build the debian package without the patch applied, I can view
PGP signed mails, however the message "Digital signature is not valid"
is displayed. While this is still a usability problem - it is much less
severe.

Of course just removing the patch is not a solution...

Reply | Threaded
Open this post in threaded view
|

Bug#889994: solution found: sogo: GPG signed emails are not displayed

Hanno Stock-2
In reply to this post by Vivia Nikolaidou

I found a solution - since the signedViewer is for S/MIME only, anyways - it is best to omit it alltogether when OpenSSL is not in use.

This results in same behaior as most other mail clients - the Signature is dispalyed as a "signature.asc" attachment.

See attached patch for the fix.


0008-Omit-signedViewer-altogether-when-not-using-openssl.patch (881 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Bug#889994: (no subject)

Hanno Stock-2
In reply to this post by Vivia Nikolaidou
Thank you very much!

Any chance we can get this fix in stable, also?

Reply | Threaded
Open this post in threaded view
|

Bug#889994: [Pkg-sogo-maintainers] Bug#889994: (no subject)

Jordi Mallach
El dj. 01 de 08 de 2019 a les 11:32 +0200, en/na Hanno Stock va
escriure:
> Thank you very much!
>
> Any chance we can get this fix in stable, also?

It is my intention, yes!

Jordi
--
Jordi Mallach PĂ©rez  -- Debian developer  https://www.debian.org/
[hidden email]    [hidden email]  https://www.sindominio.net/
GnuPG public key information available at https://oskuro.net/