org.apache.james.transport.mailets.smime

Abstract mailet providing common SMIME signature services.
It can be subclassed to make authoring signing mailets simple.
By extending it and overriding one or more of the following methods a new behaviour can be quickly created without the author having to address any issue other than the relevant one:

• SMIMEAbstractSign.initDebug , SMIMEAbstractSign.setDebug and SMIMEAbstractSign.isDebug manage the debugging mode.
• SMIMEAbstractSign.initExplanationText , SMIMEAbstractSign.setExplanationText and SMIMEAbstractSign.getExplanationText manage the text of an attachment that will be added to explain the meaning of this server-side signature.
• SMIMEAbstractSign.initKeyHolder , SMIMEAbstractSign.setKeyHolder and SMIMEAbstractSign.getKeyHolder manage the KeyHolder object that will contain the keys and certificates and will do the crypto work.
• SMIMEAbstractSign.initPostmasterSigns , SMIMEAbstractSign.setPostmasterSigns and SMIMEAbstractSign.isPostmasterSigns determines whether messages originated by the Postmaster will be signed or not.
• SMIMEAbstractSign.initRebuildFrom , SMIMEAbstractSign.setRebuildFrom and SMIMEAbstractSign.isRebuildFrom determines whether the "From:" header will be rebuilt to neutralize the wrong behaviour of some MUAs like Microsoft Outlook Express.
• SMIMEAbstractSign.initSignerName , SMIMEAbstractSign.setSignerName and SMIMEAbstractSign.getSignerName manage the name of the signer to be shown in the explanation text.
• SMIMEAbstractSign.isOkToSign controls whether the mail can be signed or not.
• The abstract method SMIMEAbstractSign.getWrapperBodyPart returns the massaged javax.mail.internet.MimeBodyPart that will be signed, or null if the message has to be signed "as is".

Handles the following init parameters:

• <debug>: if true some useful information is logged. The default is false.
• <keyStoreFileName>: the java.security.KeyStore full file name.
• <keyStorePassword>: the KeyStore password. If given, it is used to check the integrity of the keystore data, otherwise, if null, the integrity of the keystore is not checked.
• <keyAlias>: the alias name to use to search the Key using java.security.KeyStore.getKey . The default is to look for the first and only alias in the keystore; if zero or more than one is found a java.security.KeyStoreException is thrown.
• <keyAliasPassword>: the alias password.

Verifies the s/mime signature of a message.

Puts a server-side SMIME signature on a message.
It is a concrete subclass of SMIMEAbstractSign , with very few modifications to it.

A text file with an explanation text is attached to the original message, and the resulting message with all its attachments is signed. The resulting appearence of the message is almost unchanged: only an extra attachment and the signature are added.

Handles the following init parameters (will comment only the differences from SMIMEAbstractSign ):

• <debug>.
• <keyStoreFileName>.
• <keyStorePassword>.
• <keyAlias>.
• <keyAliasPassword>.
• <keyStoreType>.
• <postmasterSigns>.