解析签名和加密的电子邮件

dmoore1181

我正在编写一个应用程序,该应用程序必须能够读取签名和加密的电子邮件并解析其内容。对于仅加密的电子邮件,我能够使一切正常运行,但是当我收到也经过签名的电子邮件时,却不知道该怎么办。一旦我解密了此电子邮件,而不是在Multipart对象中包含了预期的4个部分,则在MimePart对象中只有1个部分(文件名为smime.p7m)。我不知道如何分解该文件或验证签名。我已经找到了有关验证签名的文档(http://www.mimekit.net/docs/html/Working-With-SMime.htm#Verify),但是我看不到它是如何工作的。显然,在这一点上我只是不了解。

下面是我正在使用的代码示例。请注意,在我弄清所有内容后,将对其进行重构,但是到目前为止,此代码对于我已经测试过的所有未签名(可以加密或未加密)的电子邮件都可以正常工作。

public void decryptAndSendEmails()
{
    List<EmailMessage> emails = getEmails();
    foreach (var email in emails)
    {
        var decryptedEmailMessage = new EmailMessage(service);
        MimeMessage message;

        using (var stream = new MemoryStream(email.MimeContent.Content, false))
        {
            message = MimeMessage.Load(stream);
        }

        var pkcs7 = message.BodyParts.OfType<ApplicationPkcs7Mime>().FirstOrDefault();

        if (pkcs7 != null)
        {
            //If the SecureMimeType has not been set as it should, set it to EnvelopedData
            if (pkcs7.SecureMimeType == SecureMimeType.Unknown)
            {
                var content = new MemoryStream();
                pkcs7.Content.DecodeTo(content);
                content.Position = 0;

                pkcs7 = new ApplicationPkcs7Mime(SecureMimeType.EnvelopedData, content);
            }

            using (var ctx = new TemporarySecureMimeContext())
            {
                using (var stream = File.OpenRead(ConfigurationManager.AppSettings["certLocation"]))
                {
                    ctx.Import(stream, ConfigurationManager.AppSettings["certPassword"]);
                }

                var decrypted = pkcs7.Decrypt(ctx);
                var decryptedParts = new List<MimePart>();
                if (decrypted is Multipart)
                {
                    decryptedParts = breakMultiPart((Multipart)decrypted);
                }
                else if (decrypted is MimePart)
                {
                    decryptedParts.Add((MimePart)decrypted);
                }
                else
                {
                    throw new InvalidOperationException("Unknown Mime part found");
                }

                var textParts = decryptedParts.Where(r => r is TextPart);
                var htmlParts = textParts.Where(x => ((TextPart)x).IsHtml);
                var textBodyParts = textParts.Where(x => !((TextPart)x).IsHtml);
                var attachmentParts = decryptedParts.Where(r => !(r is TextPart));

                if (htmlParts.Any())
                {
                    if (htmlParts.Count() > 1)
                    {
                        throw new InvalidOperationException("multiple html body parts.");
                    }
                    var htmlPart = (TextPart)htmlParts.First();
                    decryptedEmailMessage.Body = new MessageBody(BodyType.HTML, htmlPart.Text);
                }
                else
                {
                    //Text body
                    if (textBodyParts.Count() > 1)
                    {
                        throw new InvalidOperationException("multiple text body parts.");
                    }
                    var textPart = (TextPart)textBodyParts.First();
                    decryptedEmailMessage.Body = new MessageBody(BodyType.Text, textPart.Text);
                }

                foreach (var part in attachmentParts)
                {
                    var content = new MemoryStream();
                    part.Content.DecodeTo(content);
                    content.Position = 0;

                        decryptedEmailMessage.Attachments.AddFileAttachment(part.FileName, content);

                    if (!part.IsAttachment)
                    {
                        decryptedEmailMessage.Attachments.First(r => r.Name == part.FileName).IsInline = true;
                        decryptedEmailMessage.Attachments.First(r => r.Name == part.FileName).ContentId = part.ContentId;
                    }
                }
            }
            ////do stuff with decrypted Email
        }

        else
        {
            //The email is not encrypted
            decryptedEmailMessage = email;
            //do stuff with decrypted Email
        }
    }
}
dmoore1181

我终于结合使用@jstedfast的注释和我在无法使用MimeKit解密p7m中找到的信息来解决这个问题以下是解决此问题的最终代码:

public void decryptAndSendEmails()
{
List<EmailMessage> emails = getEmails();

foreach (var email in emails)
{
    var decryptedEmailMessage = new EmailMessage(service);
    MimeMessage message;

    using (var stream = new MemoryStream(email.MimeContent.Content, false))
    {
        message = MimeMessage.Load(stream);
    }

    var pkcs7 = message.BodyParts.OfType<ApplicationPkcs7Mime>().FirstOrDefault();

    if (pkcs7 != null)
    {
        using (var ctx = new TemporarySecureMimeContext())
        {
            using (var stream = File.OpenRead(ConfigurationManager.AppSettings["certLocation"]))
            {
                ctx.Import(stream, ConfigurationManager.AppSettings["certPassword"]);
            }


            var decrypted = pkcs7.Decrypt(ctx);

            if (decrypted != null && decrypted is MimePart && ((MimePart)decrypted).FileName == "smime.p7m")
            {
                //We need to verify the signature
                var signedDecryptedEntity = decrypted as ApplicationPkcs7Mime;
                signedDecryptedEntity.Verify(ctx, out decrypted); //the real decrypted data
            }

            var decryptedParts = new List<MimePart>();
            if (decrypted is Multipart)
            {
                decryptedParts = breakMultiPart((Multipart)decrypted);
            }
            else if (decrypted is MimePart)
            {
                decryptedParts.Add((MimePart)decrypted);
            }
            else
            {
                throw new InvalidOperationException("Unknown Mime part found");
            }

            var textParts = decryptedParts.Where(r => r is TextPart);
            var htmlParts = textParts.Where(x => ((TextPart)x).IsHtml);
            var textBodyParts = textParts.Where(x => !((TextPart)x).IsHtml);
            var attachmentParts = decryptedParts.Where(r => !(r is TextPart));

            if (htmlParts.Any())
            {
                if (htmlParts.Count() > 1)
                {
                    throw new InvalidOperationException("multiple html body parts.");
                }
                var htmlPart = (TextPart)htmlParts.First();
                decryptedEmailMessage.Body = new MessageBody(BodyType.HTML, htmlPart.Text);
            }
            else
            {
                //Text body
                if (textBodyParts.Count() > 1)
                {
                    throw new InvalidOperationException("multiple text body parts.");
                }
                var textPart = (TextPart)textBodyParts.First();
                decryptedEmailMessage.Body = new MessageBody(BodyType.Text, textPart.Text);
            }

            foreach (var part in attachmentParts)
            {
                var content = new MemoryStream();
                part.Content.DecodeTo(content);
                content.Position = 0;

                decryptedEmailMessage.Attachments.AddFileAttachment(part.FileName, content);

                if (!part.IsAttachment)
                {
                    decryptedEmailMessage.Attachments.First(r => r.Name == part.FileName).IsInline = true;
                    decryptedEmailMessage.Attachments.First(r => r.Name == part.FileName).ContentId = part.ContentId;
                }
            }
        }
        //Do Something with email (decryptedEmailMessage)
    }

    else
    {
        //The email is not encrypted
        decryptedEmailMessage = email;
        //Do Something with email (decryptedEmailMessage)
    }

}

}

本文收集自互联网,转载请注明来源。

如有侵权,请联系 [email protected] 删除。

编辑于
0

我来说两句

0 条评论
登录 后参与评论

相关文章