bug#37025: [found the culprit]

[Uwe Brauer <oub@mat.ucm.es>]

[-- Attachment #1: Type: text/plain, Size: 1708 bytes --]

>>> "TL" == Teemu Likonen <tlikonen@iki.fi> writes:

   > Glenn Morris [2019-08-14T21:39:37-04] wrote:
   >> Teemu Likonen wrote:
   >>> Thanks for the report and bisecting. I think we can fix the bug by
   >>> including "--sender" option only with openpgp protocol (i.e. gpg).

   > Because --sender is an OpenPGP thing (gpg) it is logical to narrow its
   > use to that protocol only. Here's the first fix:

A couple of comments. 

    1. A quick fix. Since your patch is not applied. I tried to change
       my setting. To my surprise
       (mml-secure-smime-sign-with-sender nil)
       *did not help*, although I am using smime not opengpg.
       But
       (mml-secure-openpgp-sign-with-sender nil)
       *did help*.
       This should be mentioned in the documentation (NEWS and in the
       relevant doc strings)

    2. I am not sure what will happen with older pgp versions. A quick
       fix would be to set the above variable to nil

    3. I think this issue should be discussed on the devel list.

    4. Who and when your patch will be applied?


[Snip]...



   >> gpg --sender
   -> gpg: invalid option "--sender"  # RHEL 7.6 with gpg 2.0.22
   >> 
   >> The option seems to only by present since gpg 2.1.15.
   >> https://gnupg.org/download/release_notes.html
   >> 
   >> Ideally you should test if it is supported or not.

   > So there should also be version checking in epg.el's epg-start-sign and
   > epg-start-encrypt functions (or somewhere). Currently I don't know if
   > there are useful infrastructure in epg for dealing with different
   > versions of gpg.

Given that circumstance, is your change really worth the effort?

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5025 bytes --]