* (mime-mc-insert-public-key, mime-mc-encrypt-region,
[elisp/semi.git] / mime-pgp.el
index fd0203a..1ec9487 100644 (file)
@@ -1,11 +1,12 @@
-;;; mime-pgp.el --- mime-view internal methods for PGP.
+;;; mime-pgp.el --- mime-view internal methods for either PGP or GnuPG.
 
 ;; Copyright (C) 1995,1996,1997,1998,1999 MORIOKA Tomohiko
 
 ;; Author: MORIOKA Tomohiko <morioka@jaist.ac.jp>
+;;         Katsumi Yamaoka  <yamaoka@jpl.org>
 ;; Created: 1995/12/7
 ;;     Renamed: 1997/2/27 from tm-pgp.el
-;; Keywords: PGP, security, MIME, multimedia, mail, news
+;; Keywords: PGP, GnuPG, security, MIME, multimedia, mail, news
 
 ;; This file is part of SEMI (Secure Emacs MIME Interface).
 
@@ -30,9 +31,9 @@
 
 ;;     [security-multipart] RFC 1847: "Security Multiparts for MIME:
 ;;         Multipart/Signed and Multipart/Encrypted" by
-;;          Jim Galvin <galvin@tis.com>, Sandy Murphy <sandy@tis.com>,
+;;         Jim Galvin <galvin@tis.com>, Sandy Murphy <sandy@tis.com>,
 ;;         Steve Crocker <crocker@cybercash.com> and
-;;          Ned Freed <ned@innosoft.com> (1995/10)
+;;         Ned Freed <ned@innosoft.com> (1995/10)
 
 ;;     [PGP/MIME] RFC 2015: "MIME Security with Pretty Good Privacy
 ;;         (PGP)" by Michael Elkins <elkins@aero.org> (1996/6)
 ;;         by Kazuhiko Yamamoto <kazu@is.aist-nara.ac.jp> (1995/10;
 ;;         expired)
 
+;;     [OpenPGP/MIME] draft-yamamoto-openpgp-mime-00.txt: "MIME
+;;         Security with OpenPGP (OpenPGP/MIME)" by Kazuhiko YAMAMOTO
+;;         <kazu@iijlab.net> (1998/1)
+
 ;;; Code:
 
+(require 'std11)
+(require 'semi-def)
 (require 'mime-play)
 
+(defgroup mime-pgp nil
+  "Internal methods for either PGP or GnuPG."
+  :prefix "mime-pgp-"
+  :group 'mime)
 
 ;;; @ Internal method for multipart/signed
 ;;;
@@ -80,7 +91,8 @@
           (delete-region
            (point-min)
            (and
-            (re-search-forward "^-+BEGIN PGP SIGNED MESSAGE-+\n\n")
+            (re-search-forward "^-+BEGIN PGP SIGNED MESSAGE-+\n")
+            (search-forward "\n\n")
             (match-end 0)))
           (delete-region
            (and (re-search-forward "^-+BEGIN PGP SIGNATURE-+")
 
 ;;; @ Internal method for application/pgp-signature
 ;;;
-;;; It is based on RFC 2015 (PGP/MIME).
-
-(defvar mime-pgp-command "pgp"
-  "*Name of the PGP command.")
-
-(defvar mime-pgp-default-language 'en
-  "*Symbol of language for pgp.
-It should be ISO 639 2 letter language code such as en, ja, ...")
-
-(defvar mime-pgp-good-signature-regexp-alist
-  '((en . "Good signature from user.*$"))
-  "Alist of language vs regexp to detect ``Good signature''.")
-
-(defvar mime-pgp-key-expected-regexp-alist
-  '((en . "Key matching expected Key ID \\(\\S +\\) not found"))
-  "Alist of language vs regexp to detect ``Key expected''.")
+;;; It is based on RFC 2015 (PGP/MIME) and
+;;; draft-yamamoto-openpgp-mime-00.txt (OpenPGP/MIME).
+
+(defcustom mime-pgp-command-alist '((gpg   . "gpg")
+                                   (pgp50 . "pgp")
+                                   (pgp   . "pgp"))
+  "Alist of the schemes and the name of the commands.  Valid SCHEMEs are:
+
+   gpg   - GnuPG.
+   pgp50 - PGP version 5.0i.
+   pgp   - PGP version 2.6.
+
+COMMAND for `pgp50' must *NOT* have a suffix, like neither \"pgpe\", \"pgpk\",
+\"pgps\" nor \"pgpv\"."
+  :group 'mime-pgp
+  :type '(repeat (cons :format "%v"
+                      (choice (choice-item :tag "GnuPG" gpg)
+                              (choice-item :tag "PGP 5.0i" pgp50)
+                              (choice-item :tag "PGP 2.6" pgp))
+                      (string :tag "Command"))))
+
+(defcustom mime-pgp-default-language-alist '((gpg   . nil)
+                                            (pgp50 . us)
+                                            (pgp   . en))
+  "Alist of the schemes and the symbol of languages.  It should be ISO 639
+2 letter language code such as en, ja, ...  Each element looks like
+\(SCHEME . SYMBOL).  See also `mime-pgp-command-alist' for valid SCHEMEs."
+  :group 'mime-pgp
+  :type '(repeat (cons :format "%v"
+                      (choice (choice-item :tag "GnuPG" gpg)
+                              (choice-item :tag "PGP 5.0i" pgp50)
+                              (choice-item :tag "PGP 2.6" pgp))
+                      (symbol :tag "Language"))))
+
+(defcustom mime-pgp-good-signature-regexp-alist
+  '((gpg
+     (nil "Good signature from.*$" nil)
+     )
+    (pgp50
+     (us "Good signature made .* by key:$"
+        mime-pgp-good-signature-post-function-pgp50-us)
+     )
+    (pgp
+     (en "Good signature from user.*$" nil)
+     ))
+  "Alist of the schemes and alist of the languages and the regexps for
+detecting ``Good signature''.  The optional symbol of the post processing
+function for arranging the output message can be specified in each element.
+It will be called just after re-search is done successfully, and it is
+expected that the function returns a string for messaging."
+  :group 'mime-pgp
+  :type '(repeat (cons :format "%v"
+                      (choice (choice-item :tag "GnuPG" gpg)
+                              (choice-item :tag "PGP 5.0i" pgp50)
+                              (choice-item :tag "PGP 2.6" pgp))
+                      (repeat (list :format "%v"
+                                    (symbol :tag "Language")
+                                    (regexp :tag "Regexp")
+                                    (function :tag "Post Function"))))))
+
+(defcustom mime-pgp-bad-signature-regexp-alist
+  '((gpg
+     (nil "BAD signature from.*$" nil)
+     )
+    (pgp50
+     (us "BAD signature made .* by key:$"
+        mime-pgp-bad-signature-post-function-pgp50-us)
+     )
+    (pgp
+     (en "Bad signature from user.*$" nil)
+     ))
+  "Alist of the schemes and alist of the languages and the regexps for
+detecting ``BAD signature''.  The optional symbol of the post processing
+function for arranging the output message can be specified in each element.
+It will be called just after re-search is done successfully, and it is
+expected that the function returns a string for messaging."
+  :group 'mime-pgp
+  :type '(repeat (cons :format "%v"
+                      (choice (choice-item :tag "GnuPG" gpg)
+                              (choice-item :tag "PGP 5.0i" pgp50)
+                              (choice-item :tag "PGP 2.6" pgp))
+                      (repeat (list :format "%v"
+                                    (symbol :tag "Language")
+                                    (regexp :tag "Regexp")
+                                    (function :tag "Post Function"))))))
+
+(defcustom mime-pgp-key-expected-regexp-alist
+  '((gpg
+     (nil
+      .
+      "key ID \\(\\S +\\)\ngpg: Can't check signature: public key not found")
+     )
+    (pgp50
+     (us . "Signature by unknown keyid: 0x\\(\\S +\\)")
+     )
+    (pgp
+     (en . "Key matching expected Key ID \\(\\S +\\) not found")
+     ))
+  "Alist of the schemes and alist of the languages and regexps for detecting
+``Key expected''."
+  :group 'mime-pgp
+  :type '(repeat (cons :format "%v"
+                      (choice (choice-item :tag "GnuPG" gpg)
+                              (choice-item :tag "PGP 5.0i" pgp50)
+                              (choice-item :tag "PGP 2.6" pgp))
+                      (repeat (cons :format "%v"
+                                    (symbol :tag "Language")
+                                    (regexp :tag "Regexp"))))))
+
+(defmacro mime-pgp-command (&optional suffix)
+  "Return a suitable command.  SUFFIX should be either \"e\", \"k\", \"s\"
+or \"v\" for choosing a command of PGP 5.0i."
+  (` (let ((command (cdr (assq pgp-version mime-pgp-command-alist))))
+       (if (and command
+               (progn
+                 (if (eq 'pgp50 pgp-version)
+                     (setq command (format "%s%s" command (, suffix))))
+                 (exec-installed-p command)))
+          command
+        (error "Please specify the valid command name for `%s'."
+               (or pgp-version 'pgp-version))))))
+
+(defmacro mime-pgp-default-language ()
+  "Return a symbol of language."
+  '(cond ((eq 'gpg pgp-version)
+         nil)
+        ((eq 'pgp50 pgp-version)
+         (or (cdr (assq pgp-version mime-pgp-default-language-alist)) 'us)
+         )
+        (t
+         (or (cdr (assq pgp-version mime-pgp-default-language-alist)) 'en)
+         )))
+
+(defmacro mime-pgp-good-signature-regexp ()
+  "Return a regexp to detect ``Good signature''."
+  '(nth 1
+       (assq
+        (mime-pgp-default-language)
+        (cdr (assq pgp-version mime-pgp-good-signature-regexp-alist))
+        )))
+
+(defmacro mime-pgp-good-signature-post-function ()
+  "Return a post processing function for arranging the message for
+``Good signature''."
+  '(nth 2
+       (assq
+        (mime-pgp-default-language)
+        (cdr (assq pgp-version mime-pgp-good-signature-regexp-alist))
+        )))
+
+(defmacro mime-pgp-bad-signature-regexp ()
+  "Return a regexp to detect ``BAD signature''."
+  '(nth 1
+       (assq
+        (mime-pgp-default-language)
+        (cdr (assq pgp-version mime-pgp-bad-signature-regexp-alist))
+        )))
+
+(defmacro mime-pgp-bad-signature-post-function ()
+  "Return a post processing function for arranging the message for
+``BAD signature''."
+  '(nth 2
+       (assq
+        (mime-pgp-default-language)
+        (cdr (assq pgp-version mime-pgp-bad-signature-regexp-alist))
+        )))
+
+(defmacro mime-pgp-key-expected-regexp ()
+  "Return a regexp to detect ``Key expected''."
+  '(cdr (assq (mime-pgp-default-language)
+             (cdr (assq pgp-version mime-pgp-key-expected-regexp-alist))
+             )))
+
+(defun mime-pgp-detect-version (entity)
+  "Detect PGP version from detached signature."
+  (with-temp-buffer
+    (mime-insert-entity-content entity)
+    (std11-narrow-to-header)
+    (let ((version (std11-fetch-field "Version")))
+      (cond ((not version)
+            pgp-version)
+           ((string-match "GnuPG" version)
+            'gpg)
+           ((string-match "5\\.0i" version)
+            'pgp50)
+           ((string-match "2\\.6" version)
+            'pgp)
+           (t
+            pgp-version)))))
 
 (defun mime-pgp-check-signature (output-buffer orig-file)
-  (save-excursion
-    (set-buffer output-buffer)
-    (erase-buffer))
-  (let* ((lang (or mime-pgp-default-language 'en))
-        (status (call-process-region (point-min)(point-max)
-                                     mime-pgp-command
-                                     nil output-buffer nil
-                                     orig-file (format "+language=%s" lang)))
-        (regexp (cdr (assq lang mime-pgp-good-signature-regexp-alist))))
-    (if (= status 0)
-       (save-excursion
-         (set-buffer output-buffer)
-         (goto-char (point-min))
-         (message
-          (cond ((not (stringp regexp))
-                 "Please specify right regexp for specified language")
-                ((re-search-forward regexp nil t)
-                 (buffer-substring (match-beginning 0) (match-end 0)))
-                (t "Bad signature")))
-         ))))
+  (with-current-buffer output-buffer
+    (erase-buffer)
+    (setq truncate-lines t))
+  (let* ((lang (mime-pgp-default-language))
+        (command (mime-pgp-command 'v))
+        (args (cond ((eq 'gpg pgp-version)
+                     (list "--batch" "--verify"
+                           (concat orig-file ".sig"))
+                     )
+                    ((eq 'pgp50 pgp-version)
+                     (list "+batchmode=1"
+                           (format "+language=%s" lang)
+                           (concat orig-file ".sig"))
+                     )
+                    ((eq 'pgp pgp-version)
+                     (list (format "+language=%s" lang) orig-file))
+                    ))
+        (good-regexp (mime-pgp-good-signature-regexp))
+        (good-post-function (mime-pgp-good-signature-post-function))
+        (bad-regexp (mime-pgp-bad-signature-regexp))
+        (bad-post-function (mime-pgp-bad-signature-post-function))
+        status
+        )
+    (setq status (apply 'call-process-region (point-min) (point-max)
+                       command nil output-buffer nil args)
+         )
+    (with-current-buffer output-buffer
+      (goto-char (point-min))
+      (cond ((not (stringp good-regexp))
+            (message "Please specify right regexp for specified language")
+            )
+           ((and (zerop status) (re-search-forward good-regexp nil t))
+            (message (if good-post-function
+                         (funcall good-post-function)
+                       (buffer-substring (match-beginning 0)
+                                         (match-end 0))))
+            (goto-char (point-min))
+            )
+           ((not (stringp bad-regexp))
+            (message "Please specify right regexp for specified language")
+            )
+           ((re-search-forward bad-regexp nil t)
+            (message (if bad-post-function
+                         (funcall bad-post-function)
+                       (buffer-substring (match-beginning 0)
+                                         (match-end 0))))
+            (goto-char (point-min))
+            )
+           (t
+            ;; Returns nil in order for attempt to fetch key.
+            nil
+            )))))
+
+(defmacro mime-pgp-parse-verify-error (&rest forms)
+  (` (with-current-buffer mime-echo-buffer-name
+       (goto-char (point-min))
+       (prog1
+          (let ((regexp (mime-pgp-key-expected-regexp)))
+            (cond
+             ((not (stringp regexp))
+              (message "Please specify right regexp for specified language")
+              nil
+              )
+             ((re-search-forward regexp nil t)
+              (concat "0x" (buffer-substring-no-properties
+                            (match-beginning 1) (match-end 1)))
+              )))
+        (goto-char (point-min))
+        (,@ forms)
+        (set-window-start
+         (get-buffer-window mime-echo-buffer-name) (point))
+        ))))
+
+(defun mime-pgp-parse-verify-error-for-gpg ()
+  "Subroutine used for parsing verify error with GnuPG.  Returns expected
+key-ID if it is found."
+  (mime-pgp-parse-verify-error)
+  )
+
+(defun mime-pgp-parse-verify-error-for-pgp50 ()
+  "Subroutine used for parsing verify error with PGP 5.0i.  Returns expected
+key-ID if it is found."
+  (mime-pgp-parse-verify-error
+   (forward-line 1)
+   ))
+
+(defun mime-pgp-parse-verify-error-for-pgp ()
+  "Subroutine used for parsing verify error with PGP 2.6.  Returns expected
+key-ID if it is found."
+  (mime-pgp-parse-verify-error
+   (if (search-forward "\C-g" nil t)
+       (goto-char (match-beginning 0))
+     (forward-line 7))
+   ))
 
 (defun mime-verify-application/pgp-signature (entity situation)
   "Internal method to check PGP/MIME signature."
@@ -164,47 +423,53 @@ It should be ISO 639 2 letter language code such as en, ja, ...")
         (basename (expand-file-name "tm" temporary-file-directory))
         (orig-file (make-temp-name basename))
         (sig-file (concat orig-file ".sig"))
-        )
+        (pgp-version (mime-pgp-detect-version entity))
+        (parser (intern (format "mime-pgp-parse-verify-error-for-%s"
+                                pgp-version)))
+        pgp-id done)
     (mime-write-entity orig-entity orig-file)
-    (save-excursion (mime-show-echo-buffer))
+    (save-current-buffer (mime-show-echo-buffer))
     (mime-write-entity-content entity sig-file)
-    (or (mime-pgp-check-signature mime-echo-buffer-name orig-file)
-       (let (pgp-id)
-         (save-excursion
-           (set-buffer mime-echo-buffer-name)
-           (goto-char (point-min))
-           (let ((regexp (cdr (assq (or mime-pgp-default-language 'en)
-                                    mime-pgp-key-expected-regexp-alist))))
-             (cond ((not (stringp regexp))
-                    (message
-                     "Please specify right regexp for specified language")
-                    )
-                   ((re-search-forward regexp nil t)
-                    (setq pgp-id
-                          (concat "0x" (buffer-substring-no-properties
-                                        (match-beginning 1)
-                                        (match-end 1))))
-                    ))))
-         (if (and pgp-id
-                  (y-or-n-p
-                   (format "Key %s not found; attempt to fetch? " pgp-id))
-                  )
-             (progn
+    (message "Checking signature...")
+    (unwind-protect
+       (while (not done)
+         (if (setq done (mime-pgp-check-signature
+                         mime-echo-buffer-name orig-file))
+             (let ((other-window-scroll-buffer mime-echo-buffer-name))
+               (scroll-other-window
+                (cdr (assq pgp-version
+                           '((gpg . 0) (pgp50 . 1) (pgp . 10)))))
+               )
+           (if (and
+                (not pgp-id)
+                (setq pgp-id (funcall parser))
+                (y-or-n-p (format "Key %s not found; attempt to fetch? "
+                                  pgp-id))
+                )
                (funcall (pgp-function 'fetch-key) (cons nil pgp-id))
-               (mime-pgp-check-signature mime-echo-buffer-name orig-file)
-               ))
-         ))
-    (let ((other-window-scroll-buffer mime-echo-buffer-name))
-      (scroll-other-window 8)
-      )
-    (delete-file orig-file)
-    (delete-file sig-file)
-    ))
+             (funcall parser)
+             (setq done t)
+             (message "Can't check signature")
+             )))
+      (delete-file orig-file)
+      (delete-file sig-file)
+      )))
+
+(defun mime-pgp-good-signature-post-function-pgp50-us ()
+  (forward-line 2)
+  (looking-at "\\s +\\(.+\\)$")
+  (format "Good signature from %s" (match-string 1)))
+
+(defun mime-pgp-bad-signature-post-function-pgp50-us ()
+  (forward-line 2)
+  (looking-at "\\s +\\(.+\\)$")
+  (format "BAD signature from %s" (match-string 1)))
 
 
 ;;; @ Internal method for application/pgp-encrypted
 ;;;
-;;; It is based on RFC 2015 (PGP/MIME).
+;;; It is based on RFC 2015 (PGP/MIME) and
+;;; draft-yamamoto-openpgp-mime-00.txt (OpenPGP/MIME).
 
 (defun mime-decrypt-application/pgp-encrypted (entity situation)
   (let* ((entity-node-id (mime-entity-node-id entity))
@@ -213,14 +478,16 @@ It should be ISO 639 2 letter language code such as en, ja, ...")
         (onum (if (> knum 0)
                   (1- knum)
                 (1+ knum)))
-        (orig-entity (nth onum (mime-entity-children mother))))
+        (orig-entity (nth onum (mime-entity-children mother)))
+        (pgp-version (mime-pgp-detect-version orig-entity)))
     (mime-view-application/pgp orig-entity situation)
     ))
 
 
 ;;; @ Internal method for application/pgp-keys
 ;;;
-;;; It is based on RFC 2015 (PGP/MIME).
+;;; It is based on RFC 2015 (PGP/MIME) and
+;;; draft-yamamoto-openpgp-mime-00.txt (OpenPGP/MIME).
 
 (defun mime-add-application/pgp-keys (entity situation)
   (let* ((start (mime-entity-point-min entity))
@@ -243,7 +510,256 @@ It should be ISO 639 2 letter language code such as en, ja, ...")
     (kill-buffer (current-buffer))
     ))
 
-        
+
+;;; @ Internal method for fetching a public key
+;;;
+
+(defcustom mime-pgp-keyserver-url-template "/pks/lookup?op=get&search=%s"
+  "The URL to pass to the keyserver."
+  :group 'mime-pgp
+  :type 'string)
+
+(defcustom mime-pgp-keyserver-address "pgp.nic.ad.jp"
+  "Host name of keyserver."
+  :group 'mime-pgp
+  :type 'string)
+
+(defcustom mime-pgp-keyserver-port 11371
+  "Port on which the keyserver's HTTP daemon lives."
+  :group 'mime-pgp
+  :type 'integer)
+
+(defcustom mime-pgp-http-proxy-url-template
+  "/cgi-bin/pgpsearchkey.pl?op=get&search=%s"
+  "The URL to pass to the keyserver via HTTP proxy."
+  :group 'mime-pgp
+  :type 'string)
+
+(defcustom mime-pgp-http-proxy-server-address nil
+  "Host name of HTTP proxy server.  If you are behind firewalls, set the
+values of this variable and `mime-pgp-http-proxy-server-port' appropriately."
+  :group 'mime-pgp
+  :type 'string)
+
+(defcustom mime-pgp-http-proxy-server-port 8080
+  "Port on which the proxy server's HTTP daemon lives."
+  :group 'mime-pgp
+  :type 'integer)
+
+(defcustom mime-pgp-fetch-timeout 20
+  "Timeout, in seconds, for any particular key fetch operation."
+  :group 'mime-pgp
+  :type 'integer)
+
+(defmacro mime-pgp-show-fetched-key (key scroll &rest args)
+  (` (let ((buffer (get-buffer-create "*fetched keys*"))
+          start height window shrink)
+       (with-current-buffer buffer
+        (erase-buffer)
+        (insert (, key))
+        (as-binary-process
+         (call-process-region
+          (point-min) (point-max) (mime-pgp-command 'v) t t (,@ args))
+         )
+        (goto-char (point-min))
+        (forward-line (, scroll))
+        (setq height (count-lines (point) (point-max))
+              start (point))
+        )
+       (setq window (get-buffer-window mime-echo-buffer-name))
+       (if window
+          (set-window-buffer window buffer)
+        (let (pop-up-frames)
+          (display-buffer buffer)
+          ))
+       (setq window (get-buffer-window buffer)
+            shrink (1- (- (window-height window) height)))
+       (if (> shrink 0)
+          (let ((window-min-height 1))
+            (enlarge-window shrink)
+            ))
+       (set-window-start window start)
+       buffer)))
+
+(defun mime-pgp-show-fetched-key-for-gpg (key)
+  "Extract KEY and show. Returns buffer object to be killed."
+  (mime-pgp-show-fetched-key key 0)
+  )
+
+(defun mime-pgp-show-fetched-key-for-pgp50 (key)
+  "Extract KEY and show. Returns buffer object to be killed."
+  (let ((buffer (get-buffer-create "*fetched keys*"))
+       (process-environment process-environment)
+       process-connection-type process start height window shrink)
+    (setenv "PGPPASSFD" nil)
+    (with-current-buffer buffer
+      (erase-buffer)
+      (setq process
+           (start-process "*show fetched keys*"
+                          buffer (mime-pgp-command 'v)
+                          "-f" "+batchmode=0" "+language=us")
+           )
+      (set-process-coding-system process 'binary 'binary)
+      (process-send-string process key)
+      (process-send-eof process)
+      (while
+         (progn
+           (accept-process-output process 1)
+           (goto-char (point-min))
+           (not
+            (re-search-forward
+             "^Add these keys to your keyring\\? \\[Y/n\\] "
+             nil t))
+           ))
+      (setq start (match-beginning 0))
+      (delete-process process)
+      (delete-region start (point-max))
+      (goto-char (point-min))
+      (forward-line 10)
+      (setq height (count-lines (point) start)
+           start (point))
+      )
+    (setq window (get-buffer-window mime-echo-buffer-name))
+    (if window
+       (set-window-buffer window buffer)
+      (let (pop-up-frames)
+       (display-buffer buffer)
+       ))
+    (setq window (get-buffer-window buffer)
+         shrink (1- (- (window-height window) height)))
+    (if (> shrink 0)
+       (let ((window-min-height 1))
+         (enlarge-window shrink)
+         ))
+    (set-window-start window start)
+    buffer))
+
+(defun mime-pgp-show-fetched-key-for-pgp (key)
+  "Extract KEY and show. Returns buffer object to be killed."
+  (mime-pgp-show-fetched-key key 7 "-f" "+language=en")
+  )
+
+(defun mime-pgp-fetch-key (&optional id)
+  "Attempt to fetch a key for addition to PGP or GnuPG keyring.
+Interactively, prompt for string matching key to fetch.
+
+Non-interactively, ID must be a pair.  The CAR must be a bare Email
+address and the CDR a keyID (with \"0x\" prefix).  Either, but not
+both, may be nil.
+
+Return t if we think we were successful; nil otherwise.  Note that nil
+is not necessarily an error, since we may have merely fired off an Email
+request for the key.
+
+If you want to use this function for verifying a message of PGP/MIME,
+for example, please put the following lines in your startup file:
+
+  (eval-after-load \"semi-def\"
+    '(progn (require 'alist)
+           (set-alist 'pgp-function-alist 'fetch-key
+                      '(mime-pgp-fetch-key \"mime-pgp\"))
+           (autoload 'mime-pgp-fetch-key \"mime-pgp\" nil t)
+           ))
+
+In addition, if you are behind firewalls, please set the values of
+`mime-pgp-http-proxy-server-address' and `mime-pgp-http-proxy-server-port'
+appropriately."
+  (interactive)
+  (let ((buffer (get-buffer-create "*key fetch*"))
+       (server (or mime-pgp-http-proxy-server-address
+                   mime-pgp-keyserver-address))
+       (port (or mime-pgp-http-proxy-server-port
+                 mime-pgp-keyserver-port))
+       (url-template
+        (if mime-pgp-http-proxy-server-address
+            (concat "http://"
+                    mime-pgp-keyserver-address
+                    mime-pgp-http-proxy-url-template
+                    " HTTP/1.0\r\n")
+          mime-pgp-keyserver-url-template))
+       (show-function (intern (format "mime-pgp-show-fetched-key-for-%s"
+                                      pgp-version)))
+       (snarf-function (pgp-function 'snarf-keys))
+       (window-config (current-window-configuration))
+       case-fold-search process-connection-type process show-buffer)
+    (unwind-protect
+       (catch 'mime-pgp-fetch-key-done
+         (cond ((interactive-p)
+                (setq id (read-string "Fetch key for: "))
+                (cond ((string-equal "" id)
+                       (message "Aborted")
+                       (throw 'mime-pgp-fetch-key-done nil)
+                       )
+                      ((string-match "^0[Xx]" id)
+                       (setq id (cons nil id))
+                       )
+                      (t
+                       (setq id (cons id nil))
+                       )))
+               ((or (null id)
+                    (not (or (stringp (car id)) (stringp (cdr id)))))
+                (message "Aborted")
+                (throw 'mime-pgp-fetch-key-done nil)
+                ))
+         (with-current-buffer buffer
+           (erase-buffer)
+           (message "Fetching %s via HTTP to %s..."
+                    (or (cdr id) (car id))
+                    mime-pgp-keyserver-address
+                    )
+           (condition-case err
+               (setq process (open-network-stream-as-binary
+                              "*key fetch*" buffer server port)
+                     )
+             (error
+              (message "%s" err)
+              (throw 'mime-pgp-fetch-key-done nil)
+              ))
+           (if (not process)
+               (progn
+                 (message "Can't connect to %s%s."
+                          mime-pgp-keyserver-address
+                          (if mime-pgp-http-proxy-server-address
+                              (concat "via "
+                                      mime-pgp-http-proxy-server-address)
+                            ""))
+                 (throw 'mime-pgp-fetch-key-done nil)
+                 )
+             (process-send-string
+              process
+              (concat "GET " (format url-template
+                                     (or (cdr id) (car id))) "\r\n")
+              )
+             (while (and (eq 'open (process-status process))
+                         (accept-process-output process
+                                                mime-pgp-fetch-timeout)
+                         ))
+             (delete-process process)
+             (goto-char (point-min))
+             (if (and (re-search-forward
+                       "^-----BEGIN PGP PUBLIC KEY BLOCK-----\r?$" nil t)
+                      (progn
+                        (delete-region (point-min) (match-beginning 0))
+                        (re-search-forward
+                         "^-----END PGP PUBLIC KEY BLOCK-----\r?$" nil t)
+                        ))
+                 (progn
+                   (delete-region (1+ (match-end 0)) (point-max))
+                   (setq show-buffer
+                         (funcall show-function (buffer-string))
+                         )
+                   (if (y-or-n-p "Add this key to keyring? ")
+                       (funcall snarf-function)
+                     )
+                   (kill-buffer show-buffer)
+                   t)
+               (message "Key not found.")
+               nil))))
+      (kill-buffer buffer)
+      (set-window-configuration window-config)
+      )))
+
+
 ;;; @ end
 ;;;