SOURCES: mutt-smime.rc.patch (NEW) - safe defaults for S/MIME

[baggins]

Author: baggins                      Date: Mon Apr 13 17:41:22 2009 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- safe defaults for S/MIME

---- Files affected:
SOURCES:
   mutt-smime.rc.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/mutt-smime.rc.patch
diff -u /dev/null SOURCES/mutt-smime.rc.patch:1.1
--- /dev/null	Mon Apr 13 19:41:23 2009
+++ SOURCES/mutt-smime.rc.patch	Mon Apr 13 19:41:16 2009
@@ -0,0 +1,51 @@
+--- mutt-1.5.19/contrib/smime.rc~	2008-03-19 21:07:57.000000000 +0100
++++ mutt-1.5.19/contrib/smime.rc	2009-04-13 19:29:03.515858795 +0200
+@@ -4,7 +4,7 @@
+ 
+ # If you compiled mutt with support for both PGP and S/MIME, PGP
+ # will be the default method unless the following option is set
+-set smime_is_default
++# set smime_is_default
+ 
+ # Uncoment this if you don't want to set labels for certificates you add.
+ # unset smime_ask_cert_label
+@@ -13,30 +13,31 @@
+ set smime_timeout=300
+ 
+ # Global crypto options -- these affect PGP operations as well.
+-set crypt_autosign = yes
+-set crypt_replyencrypt = yes
+-set crypt_replysign = yes
+-set crypt_replysignencrypted = yes
++# set crypt_autosign = yes
++# set crypt_replyencrypt = yes
++# set crypt_replysign = yes
++# set crypt_replysignencrypted = yes
+ set crypt_verify_sig = yes
+ 
+ # Section A: Key Management.
+ 
+ # The (default) keyfile for signing/decrypting.  Uncomment the following
+ # line and replace the keyid with your own.
+-set smime_default_key="12345678.0"
++# set smime_default_key="12345678.0"
+ 
+ # Uncommen to make mutt ask what key to use when trying to decrypt a message.
+ # It will use the default key above (if that was set) else.
+ # unset smime_decrypt_use_default_key
+ 
+ # Path to a file or directory with trusted certificates
+-set smime_ca_location="~/.smime/ca-bundle.crt"
++# set smime_ca_location="~/.smime/ca-bundle.crt"
++set smime_ca_location="/etc/certs/ca-certificates.crt"
+ 
+ # Path to where all known certificates go. (must exist!)
+-set smime_certificates="~/.smime/certificates"
++# set smime_certificates="~/.smime/certificates"
+ 
+ # Path to where all private keys go. (must exist!)
+-set smime_keys="~/.smime/keys"
++# set smime_keys="~/.smime/keys"
+ 
+ # These are used to extract a certificate from a message.
+ # First generate a PKCS#7 structure from the message.
================================================================