使用python和GnuPG进行断开附件加密

Question

我已经采取了所有的叉子的gpg邮件，并把所有的工作部分在一起，使它几乎完全工作。我遇到的最后一个问题是附件是作为文件名.originalextension.pgp但不可破解。在

这里是完整的代码的mailgate插件，因为我有它的工作。在

#!/usr/bin/python

from ConfigParser import RawConfigParser
from email.mime.base import MIMEBase
import email
import email.message
import re
import GnuPG
import smtplib
import sys

# Read configuration from /etc/gpg-mailgate.conf
_cfg = RawConfigParser()
_cfg.read('/etc/gpg-mailgate.conf')
cfg = dict()
for sect in _cfg.sections():
        cfg[sect] = dict()
        for (name, value) in _cfg.items(sect):
                cfg[sect][name] = value

# Read e-mail from stdin
raw = sys.stdin.read()
raw_message = email.message_from_string( raw )
from_addr = raw_message['From']
to_addrs = sys.argv[1:]

def send_msg( message, recipients = None ):
        if recipients == None:
                recipients = to_addrs
        if cfg.has_key('logging') and cfg['logging'].has_key('file'):
                log = open(cfg['logging']['file'], 'a')
                log.write("Sending email to: <%s>\n" % '> <'.join( recipients ))
                log.close()
        relay = (cfg['relay']['host'], int(cfg['relay']['port']))
        smtp = smtplib.SMTP(relay[0], relay[1])
        smtp.sendmail( from_addr, recipients, message.as_string() )

def encrypt_payload( payload, gpg_to_cmdline ):
        gpg = GnuPG.GPGEncryptor( cfg['gpg']['keyhome'], gpg_to_cmdline )
        raw_payload = payload.get_payload(decode=True)
        gpg.update( raw_payload )
        if "-----BEGIN PGP MESSAGE-----" in raw_payload and "-----END PGP MESSAGE-----" in raw_payload:
          return payload
        payload.set_payload( gpg.encrypt() )
        if payload['Content-Disposition']:
                payload.replace_header( 'Content-Disposition', re.sub(r'filename="([^"]+)"', r'filename="\1.pgp"', payload['Content-Disposition']) )
        if payload['Content-Type']:
                payload.replace_header( 'Content-Type', re.sub(r'name="([^"]+)"', r'name="\1.pgp"', payload['Content-Type']) )
#               if payload.get_content_type() != 'text/plain' and payload.get_content_type != 'text/html':
                if 'name="' in payload['Content-Type']:
                        payload.replace_header( 'Content-Type', re.sub(r'^[a-z/]+;', r'application/octet-stream;', payload['Content-Type']) )
                        payload.set_payload( "\n".join( filter( lambda x:re.search(r'^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$',x), payload.get_payload().split("\n") ) ) )
        return payload

def encrypt_all_payloads( payloads, gpg_to_cmdline ):
        encrypted_payloads = list()
        if type( payloads ) == str:
                msg = email.message.Message()
                msg.set_payload( payloads )
                return encrypt_payload( msg, gpg_to_cmdline ).as_string()
        for payload in payloads:
                if( type( payload.get_payload() ) == list ):
                        encrypted_payloads.append( encrypt_all_payloads( payload.get_payload(), gpg_to_cmdline ) )
                else:
                        encrypted_payloads.append( [encrypt_payload( payload, gpg_to_cmdline )] )
        return sum(encrypted_payloads, [])

def get_msg( message ):
        if not message.is_multipart():
                return message.get_payload()
        return '\n\n'.join( [str(m) for m in message.get_payload()] )

keys = GnuPG.public_keys( cfg['gpg']['keyhome'] )
gpg_to = list()
ungpg_to = list()

for to in to_addrs:
        domain = to.split('@')[1]
        if domain in cfg['default']['domains'].split(','):
                if to in keys:
                        gpg_to.append( (to, to) )
                elif cfg.has_key('keymap') and cfg['keymap'].has_key(to):
                        gpg_to.append( (to, cfg['keymap'][to]) )
        else:
                ungpg_to.append(to)

if gpg_to == list():
        if cfg['default'].has_key('add_header') and cfg['default']['add_header'] == 'yes':
                raw_message['X-GPG-Mailgate'] = 'Not encrypted, public key not found'
        send_msg( raw_message )
        exit()

if ungpg_to != list():
        send_msg( raw_message, ungpg_to )

if cfg.has_key('logging') and cfg['logging'].has_key('file'):
        log = open(cfg['logging']['file'], 'a')
        log.write("Encrypting email to: %s\n" % ' '.join( map(lambda x: x[0], gpg_to) ))
        log.close()

if cfg['default'].has_key('add_header') and cfg['default']['add_header'] == 'yes':
        raw_message['X-GPG-Mailgate'] = 'Encrypted by GPG Mailgate'

gpg_to_cmdline = list()
gpg_to_smtp = list()
for rcpt in gpg_to:
        gpg_to_smtp.append(rcpt[0])
        gpg_to_cmdline.extend(rcpt[1].split(','))

encrypted_payloads = encrypt_all_payloads( raw_message.get_payload(), gpg_to_cmdline )
raw_message.set_payload( encrypted_payloads )

send_msg( raw_message, gpg_to_smtp )

我的客户机（roundcube和k-9）不知道如何处理该文件。 从命令行执行gpg—解密文件名.txt.pgp我得到： gpg:找不到有效的OpenPGP数据。 gpg:解密消息失败：eof

电子邮件的标题是：

^{pr2}$

我甚至不确定要调试什么，因为一切看起来都很好，而且完全没有错误。在

如果有人有任何方向，我会很感激的。在

更新： 我碰到这个Decrypt gpg file attached from email (file.pgp)

我决定添加一行将raw写入日志文件。在

MIME-Version: 1.0
X-Received: by 10.68.130.1 with SMTP id oa1mr18868651pbb.35.1379162867744;
Sat, 14 Sep 2013 05:47:47 -0700 (PDT)
Received: by 10.68.46.72 with HTTP; Sat, 14 Sep 2013 05:47:47 -0700 (PDT)
Date: Sat, 14 Sep 2013 08:47:47 -0400
Message-ID: <CACRtyey-L9Z5JGNG4bheYqJ7tVK+6qfigmanH9pTUk0ute5gEw@mail.gmail.com>
Subject: Test with attachment - Saturday
From: Bruce Markey <bmarkey@gmail.com>
To: bruce@packetaddiction.com
Content-Type: multipart/mixed; boundary=047d7b10ca15d1c7b904e65760eb

--047d7b10ca15d1c7b904e65760eb
Content-Type: text/plain; charset=ISO-8859-1

Just a simple test with txt attachment

--047d7b10ca15d1c7b904e65760eb
Content-Type: text/plain; charset=US-ASCII; name="TestAttach.txt"
Content-Disposition: attachment; filename="TestAttach.txt"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_hlkty4930

VGhpcyBpcyBqdXN0IGEgdGVzdCBvZiB0aGUgYXR0YWNobWVudHMuIApUaGlzIGlzIGEgc2ltcGxl
IHRleHQgZmlsZS4gCgo=
--047d7b10ca15d1c7b904e65760eb--

因为这是原始编写的，所以是预加密。那么我应该在加密之前解码base64吗？在

看了一会儿我不明白为什么这条线在这里。在

if 'name="' in payload['Content-Type']:
payload.replace_header( 'Content-Type', re.sub(r'^[a-z/]+;', r'application/octet-  stream;', payload['Content-Type']) )
payload.set_payload( "\n".join( filter( lambda x:re.search(r'^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$',x), payload.get_payload().split("\n") ) ) )

为什么更改为应用程序/八位字节流？在

更新：

我想除非我做错了一件可怕的事，否则我会成功的。我更改了以下内容：

def get_msg( message ):
    if not message.is_multipart():
        return message.get_payload()
return '\n\n'.join( [base64.decodestring(str(m)) for m in message.get_payload()] )

现在我可以实际运行gpg—decrypt文件名.txt. 在

（我假设大多数附件都是base64，不过我可能会为所有内容传输编码类型添加一个测试。）在

Answer 1

附件需要解码，内容传输编码，在加密之前。参见原问题更新中的代码。在