You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@camel.apache.org by "Claus Ibsen (Jira)" <ji...@apache.org> on 2022/09/02 08:59:00 UTC

[jira] [Resolved] (CAMEL-8403) support for PGP signature without encryption (including clearsigned ASCII-armored PGP)

     [ https://issues.apache.org/jira/browse/CAMEL-8403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Claus Ibsen resolved CAMEL-8403.
--------------------------------
    Resolution: Abandoned

> support for PGP signature without encryption (including clearsigned ASCII-armored PGP)
> --------------------------------------------------------------------------------------
>
>                 Key: CAMEL-8403
>                 URL: https://issues.apache.org/jira/browse/CAMEL-8403
>             Project: Camel
>          Issue Type: New Feature
>          Components:  camel-crypto
>    Affects Versions: 2.14.1
>         Environment: n/a
>            Reporter: Daniel Pocock
>            Priority: Major
>
> It is quite common to send emails that have a signature but no encryption.
> A typical example of such an email is a release announcement from a free software project.
> The marshalled message body should be human-readable but will either:
> a) have an ASCII armored signature at the bottom
> b) have a signature in a MIME attachment
> Maybe the PGP marshaller should just put the binary version of the PGP signature in a header and then other data formats can be used for either the ASCII-armoring or conversion to MIME?
> However, if the message body is already MIME (possibly with attachments), then the PGP data format may need to be able to sign each attachment and then the marshalled data will also be a MIME message but with additional signature attachments.
> Below is an example of the most simple case, clearsigning "Hello world" with the gpg command.  The PGP data format should be able to both marshal the body "Hello world" into a message like that below and also unmarshal/verify it.
> When unmarshalling the message below, the signature stuff should all be removed and the body will just become "Hello world" again.
> $ echo "Hello world" | gpg --clearsign
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> Hello world
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> iQIcBAEBCAAGBQJU7ZjuAAoJEOm1uwJp1aqDcqwQAKVl4YQyL9VG+Vwy7y5W5Frb
> mlhqibqquaYFc6HQvw+RLy9zicowdoMiXK4NRPxzTm5+PFxHXjgVMSFSDWNvuO6E
> fzzkGOnyZdzPbFq+d0q1uMs4EnqfqHX/Y8v6PyWPdyHD8Isu7if0xpGNXbWGZMQn
> jNGQzvj2t1lYqDP9DJDnctROI5qVDzXqR69pmgG+J9ZzaZW4EJmkitt9BJIath0a
> ueVc5XJroGGj7KBJSyQAbpEhEO6b9Kz4cXCUqUfHTdKgVjO9UBfAZpmCappwMbDH
> yvaAvUq1lAIncIS5ocWVvz66qG/tver5jrruGU5ptEwn9At/ZyKp88nvM09hNzuN
> 4Q6dFcytKtnEc2mSDeQ3/IFgT0FVU9vFhP8UusdfHF5GOBfsTWLc0RJdofCo27JN
> jy1fHj9LroM7m0S/3ln7yQaa9qzatCOctzqq4d0xo8zX5WZ/7Eo9gwYgNUKg0WsU
> PgZrzov0ImeULJvj43i2IMfojQSAN7aXnVPW817stIoKmkZpavH4TutfV6DDgbGa
> UfsiYQ3BX/o/cfPB88SWmEMWZvP7syDwxK+iBzPDtwAexIAYP9NURfyWZvWe1ZBl
> zdR/6pN8VR6/R17jJr3YCjpFlDs4zG67QoI8qSl91TH2h4V7uPQbaOUaSdAoh9Z6
> TXpyXYPk5GTGx8rf5v5E
> =Qbwp
> -----END PGP SIGNATURE-----



--
This message was sent by Atlassian Jira
(v8.20.10#820010)