schleuder 4.0.0 → 4.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 71fae6520fb76978d0292533c7e4b1d4ed72cd881ba81be71eacd2ab1811d5e2
-  data.tar.gz: 5542044280bcd7bb2875bdc443c37146c490fe186a16c9d2449d8d9dab8131c9
+  metadata.gz: c44b12c722680d91cee45a80ae2ee6a4ff47a9544dfd171cc83a5549bdd72be2
+  data.tar.gz: 77773ef59d05b1faff86cf2fe5d22ef657cd5683e6184db1a55b28d1592b07d2
 SHA512:
-  metadata.gz: 8c724133f39be4c6af72c61d6f26e95bcf4f1a99f6184ac845d55a36d53eaea60fc78273950609f3bbae7fc4faec72005adf9324ab5186d505be58495cb58582
-  data.tar.gz: 608978e0555f93ab3e4f7aefb67063df9e0fd8f7b06b28d20ea8f869384ba7ed0e08ba0d071ca81fccd2f269656907413b82fce930c6535aff30f60ef8ad4f95
+  metadata.gz: eb351c776f1773cf0dd5ef0f04f310fe70a0155d9344fd75eb78fce9b0d69cad0f0d9bfad664d1a8ab004a55c2d29a849cf1ea2cd0a295c61c3b56b96a25d9a8
+  data.tar.gz: 97ab8283c694fac04196ee752ffe3153f57acb1e37c8754c8c9f1840fbf5109d47fac3426aa8fa3f168341efbfcf38c8d4292e9a360b3d81dff5d9231ac9b700

data/README.md

@@ -1,10 +1,9 @@
-Schleuder, version 3
+Schleuder
 ======================================
 
 Schleuder is a gpg-enabled mailing list manager with resending-capabilities. Subscribers can communicate encrypted (and pseudonymously) among themselves, receive emails from non-subscribers and send emails to non-subscribers via the list.
 
-Version 3 of schleuder is a complete rewrite, which aims to be more robust, flexible, and internationalized. It
-also provides an API for the optional web interface called [schleuder-web](https://0xacab.org/schleuder/schleuder-web).
+It aims to be robust, flexible, internationalized and also provides an API for the optional web interface called [schleuder-web](https://0xacab.org/schleuder/schleuder-web).
 
 For more details see <https://schleuder.org/docs/>.
 
@@ -17,21 +16,10 @@ Requirements
 * openssl
 * icu
 
-*If you use Debian buster or CentOS 7, please have a look at the [installation docs](https://schleuder.org/schleuder/docs/server-admins.html#installation). We do provide packages for those platforms, which simplify the installation a lot.*
-
-*🛈 A note regarding Ubuntu: All Ubuntu versions up to and including 17.10 don't meet the requirements with their packaged versions of gnupg! To run Schleuder on Ubuntu you currently have to install a more recent version of gnupg manually. Only Ubuntu 18.04 ("bionic") provides modern enough versions of Schleuder's requirements.*
-
-On systems that base on Debian 10 ("buster"), install the dependencies via
-
-    apt-get install ruby-dev gnupg2 libgpgme-dev libsqlite3-dev libssl-dev build-essential libicu-dev
-
+*If you use Debian buster, CentOS 7 or Archlinux, please have a look at the [installation docs](https://schleuder.org/schleuder/docs/server-admins.html#installation). We do provide packages for those platforms, which simplify the installation a lot.*
 
 We **recommend** to also run a random number generator like [haveged](http://www.issihosts.com/haveged/). This ensures Schleuder won't be blocked by lacking entropy, which otherwise might happen especially during key generation.
 
-On Debian based systems, install it via
-
-    apt-get install haveged
-
 
 Additionally these **rubygems** are required (will be installed automatically unless present):
 
@@ -48,15 +36,15 @@ Additionally these **rubygems** are required (will be installed automatically un
 Installing Schleuder
 ------------
 
-1. Download [the gem](https://schleuder.org/download/schleuder-4.0.0.gem) and [the OpenPGP-signature](https://schleuder.org/download/schleuder-4.0.0.gem.sig) and verify:
+1. Download [the gem](https://schleuder.org/download/schleuder-4.0.3.gem) and [the OpenPGP-signature](https://schleuder.org/download/schleuder-4.0.3.gem.sig) and verify:
    ```
    gpg --recv-key 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
-   gpg --verify schleuder-4.0.0.gem.sig
+   gpg --verify schleuder-4.0.3.gem.sig
    ```
 
 2. If all went well install the gem:
    ```
-   gem install schleuder-4.0.0.gem
+   gem install schleuder-4.0.3.gem
    ```
 
 3. Set up schleuder:
@@ -146,4 +134,4 @@ GNU GPL 3.0. Please see [LICENSE.txt](LICENSE.txt).
 Alternative Download
 --------------------
 
-Alternatively to the gem-files you can download the latest release as [a tarball](https://schleuder.org/download/schleuder-4.0.0.tar.gz) and [its OpenPGP-signature](https://schleuder.org/download/schleuder-4.0.0.tar.gz.sig).
+Alternatively to the gem-files you can download the latest release as [a tarball](https://schleuder.org/download/schleuder-4.0.3.tar.gz) and [its OpenPGP-signature](https://schleuder.org/download/schleuder-4.0.3.tar.gz.sig).

data/Rakefile

@@ -7,6 +7,9 @@ require_relative "lib/#{project}.rb"
 @filename_gem = "#{@tagname}.gem"
 @filename_tarball = "#{@tagname}.tar.gz"
 
+# Make ActiveRecord's tasks usable for us (without this, those tasks try to run
+# in the "default_env" environment, which is not configured).
+ENV['RACK_ENV'] ||= ENV['SCHLEUDER_ENV']
 load 'active_record/railties/databases.rake'
 
 # Configure ActiveRecord
@@ -120,7 +123,7 @@ end
 
 desc 'Build and sign a tarball'
 task :build_tarball do
-  `git archive --format tar.gz --prefix "#{@tagname}/" -o #{@filename_tarball} master`
+  `git archive --format tar.gz --prefix "#{@tagname}/" -o #{@filename_tarball} main`
 end
 
 desc 'Describe manual release-tasks'

data/db/migrate/20211106112020_change_boolean_values_to_integers.rb

@@ -0,0 +1,46 @@
+# Since ActiveRecord >= 6.0, the SQLite3 connection adapter relies on boolean
+# serialization to use 1 and 0, but does not natively recognize 't' and 'f' as
+# booleans were previously serialized.
+#
+# Accordingly, this migration handles conversion of both column defaults and
+# stored data provided by a user.
+#
+# In contrast to other migrations, only a 'forward' method is provided, a
+# mechanism to 'reverse' is not. Given the nature of this migration, the later
+# is not really required.
+#
+# Unfortunately, we missed this breaking change when bumping ActiveRecord to >=
+# 6.0 in Schleuder version 4.0. This caused quite some work upstream, but also
+# in downstream environments and, last but not least, at the side of users.
+#
+# We should extend our CI to explicitly test, and ensure things work as
+# expected, if running a Schleuder setup in real world. As of now, we don't
+# ensure data provided by a user in Schleuder version x still works after
+# upgrading to version y.
+
+class ChangeBooleanValuesToIntegers < ActiveRecord::Migration[6.0]
+  class Lists < ActiveRecord::Base
+  end
+
+  class Subscriptions < ActiveRecord::Base
+  end
+
+  def up
+    [Lists, Subscriptions].each do |table|
+      unless table.connection.is_a?(ActiveRecord::ConnectionAdapters::SQLite3Adapter)
+        return
+      end
+
+      bool_columns_defaults = table.columns.select { |column| column.type == :boolean }.map{ |column| [column.name, column.default] }
+
+      bool_columns_defaults.each do |column_name, column_default|
+        column_bool = ActiveRecord::Type::Boolean.new.deserialize(column_default)
+        
+        change_column_default :"#{table.table_name}", :"#{column_name}", column_bool
+        
+        table.where("#{column_name} = 'f'").update_all("#{column_name}": 0)
+        table.where("#{column_name} = 't'").update_all("#{column_name}": 1)
+      end
+    end
+  end
+end

data/db/migrate/20211107151309_add_limits_to_string_columns.rb

@@ -0,0 +1,28 @@
+# It seems, the change to ActiveRecord >= 6.0 makes this necessary.
+# Without doing this, the auto-generated database schema file would drop
+# these limits, if running migrations.
+#
+# In contrast to other migrations, only a 'forward' method is provided, a
+# mechanism to 'reverse' is not. Given the nature of this migration, the later
+# is not really required.
+#
+# This has been an upstream issue for quite some time. For details, see
+# https://github.com/rails/rails/issues/19001.
+
+class AddLimitsToStringColumns < ActiveRecord::Migration[6.0]
+  class Lists < ActiveRecord::Base
+  end
+
+  class Subscriptions < ActiveRecord::Base
+  end
+
+  def up
+    [Lists, Subscriptions].each do |table|
+      string_columns = table.columns.select { |column| column.type == :string }.map(&:name)
+
+      string_columns.each do |column_name|
+        change_column :"#{table.table_name}", :"#{column_name}", :string, :limit => 255
+      end
+    end
+  end
+end

data/db/schema.rb

@@ -2,15 +2,15 @@
 # of editing this file, please use the migrations feature of Active Record to
 # incrementally modify your database, and then regenerate this schema definition.
 #
-# This file is the source Rails uses to define your schema when running `rails
-# db:schema:load`. When creating a new database, `rails db:schema:load` tends to
+# This file is the source Rails uses to define your schema when running `bin/rails
+# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to
 # be faster and is potentially less error prone than running all of your
 # migrations from scratch. Old migrations may fail to apply correctly if those
 # migrations use external dependencies or application code.
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 2020_01_18_170110) do
+ActiveRecord::Schema.define(version: 2021_11_07_151309) do
 
   create_table "lists", force: :cascade do |t|
     t.datetime "created_at"

data/lib/schleuder/cli.rb

@@ -70,7 +70,6 @@ module Schleuder
 
     desc 'refresh_keys [list1@example.com]', 'Refresh all keys of all list from the keyservers sequentially (one by one or on the passed list). (This is supposed to be run from cron or systemd weekly.)'
     def refresh_keys(list=nil)
-      GPGME::Ctx.send_notice_if_gpg_does_not_know_import_filter
       work_on_lists(:refresh_keys, list)
       permission_notice
     end
@@ -133,7 +132,7 @@ module Schleuder
       def shellexec(cmd)
         result = `#{cmd} 2>&1`
         if $?.exitstatus > 0
-          exit $?.exitstatus
+          fatal result, $?.exitstatus
         end
         result
       end

data/lib/schleuder/conf.rb

@@ -4,13 +4,7 @@ module Schleuder
   class Conf
     include Singleton
 
-    # since the regexp got only included into stdlib 2.2
-    # TODO: remove once 2.1 support dropped
-    if RUBY_VERSION < '2.2'
-      EMAIL_REGEXP = /\A[a-zA-Z0-9.!\#$%&'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\z/
-    else
-      EMAIL_REGEXP = URI::MailTo::EMAIL_REGEXP
-    end
+    EMAIL_REGEXP = URI::MailTo::EMAIL_REGEXP
     # TODO: drop v3 keys and only accept length of 40
     FINGERPRINT_REGEXP = /\A(0x)?[a-f0-9]{32}([a-f0-9]{8})?\z/i
 

data/lib/schleuder/filters_runner.rb

@@ -13,11 +13,7 @@ module Schleuder
           list.logger.debug "Calling filter #{cmd}"
           response = Filters.send(cmd, list, mail)
           if stop?(response)
-            if bounce?(response, mail)
-              return response
-            else
-              return nil
-            end
+            return response
           end
         end
         nil
@@ -32,31 +28,6 @@ module Schleuder
         response.kind_of?(StandardError)
       end
 
-      def bounce?(response, mail)
-        if list.bounces_drop_all
-          list.logger.debug 'Dropping bounce as configurated'
-          notify_admins(I18n.t('.bounces_drop_all'), mail.original_message)
-          return false
-        end
-
-        list.bounces_drop_on_headers.each do |key, value|
-          if mail[key].to_s.match(/#{value}/i)
-            list.logger.debug "Incoming message header key '#{key}' matches value '#{value}': dropping the bounce."
-            notify_admins(I18n.t('.bounces_drop_on_headers', key: key, value: value), mail.original_message)
-            return false
-          end
-        end
-
-        list.logger.debug 'Bouncing message'
-        true
-      end
-
-      def notify_admins(reason, original_message)
-        if list.bounces_notify_admins?
-          list.logger.notify_admin reason, original_message, I18n.t('notice')
-        end
-      end
-
       def load_filters
         list.logger.debug "Loading #{filter_type}_decryption filters"
         sorted_filters.map do |filter_name|

data/lib/schleuder/gpgme/ctx.rb

@@ -134,7 +134,6 @@ module GPGME
       arguments, error = fetch_key_gpg_arguments_for(input)
       return error if error
 
-      self.class.send_notice_if_gpg_does_not_know_import_filter
       gpgerr, gpgout, exitcode = self.class.gpgcli("#{import_filter_arg} #{arguments}")
 
       # Unfortunately gpg doesn't exit with code > 0 if `--fetch-key` fails.
@@ -229,21 +228,6 @@ module GPGME
       raise 'Need gpg in $PATH or in $GPGBIN'
     end
 
-    def self.spawn_daemon(name, args)
-      delete_daemon_socket(name)
-      cmd = "#{name} #{args} --daemon > /dev/null 2>&1"
-      if ! system(cmd)
-        return [false, "#{name} exited with code #{$?}"]
-      end
-    end
-
-    def self.delete_daemon_socket(name)
-      path = File.join(ENV['GNUPGHOME'], "S.#{name}")
-      if File.exist?(path)
-        File.delete(path)
-      end
-    end
-
     def keyserver_arg
       if Conf.keyserver.present?
         "--keyserver #{Conf.keyserver}"
@@ -252,24 +236,8 @@ module GPGME
       end
     end
 
-    def self.gpg_knows_import_filter?
-      sufficient_gpg_version?('2.1.15')
-    end
-
     def import_filter_arg
-      if self.class.gpg_knows_import_filter?
-        %{ --import-filter drop-sig='sig_created_d > 0000-00-00'}
-      end
-    end
-
-    def self.send_notice_if_gpg_does_not_know_import_filter
-      if ! gpg_knows_import_filter?
-        Schleuder.logger.notify_superadmin(
-            subject: 'Schleuder installation problem',
-            message: "Your version of GnuPG is very old, please update!\n\nWith your version of GnuPG we can not protect your setup against signature flooding. Please update to at least version 2.1.15 to fix this problem. See <https://dkg.fifthhorseman.net/blog/openpgp-certificate-flooding.html> for details on the background."
-          )
-        ''
-      end
+      %{ --import-filter drop-sig='sig_created_d > 0000-00-00'}
     end
   end
 end

data/lib/schleuder/keyword_handlers/key_management.rb

@@ -125,7 +125,7 @@ module Schleuder
 
       def import_keys_from_attachments
         @mail.attachments.map do |attachment|
-          import_from_string(attachment.body.to_s)
+          import_from_string(attachment.body.raw_source)
         end
       end
 

data/lib/schleuder/logger.rb

@@ -7,13 +7,9 @@ module Schleuder
   class Logger < Syslog::Logger
     include LoggerNotifications
     def initialize
-      if RUBY_VERSION.to_f < 2.1
-        super('Schleuder')
-      else
-        super('Schleuder', Syslog::LOG_MAIL)
-      end
+      super('Schleuder', Syslog::LOG_MAIL)
       # We need some sender-address different from the superadmin-address.
-      @from = "#{`whoami`.chomp}@#{`hostname`.chomp}"
+      @from = "#{Etc.getlogin}@#{Socket.gethostname}"
       @adminaddresses = Conf.superadmin
       @level = ::Logger.const_get(Conf.log_level.upcase)
     end

data/lib/schleuder/mail/gpg/sign_part.rb

@@ -0,0 +1,33 @@
+module Mail
+  module Gpg
+    class SignPart < Mail::Part
+      # Copied verbatim from mail-gpg v.0.4.2. This code was changed in
+      # <https://github.com/jkraemer/mail-gpg/commit/5fded41ccee4a58f848a2f8e7bd53d11236f8984>,
+      # which breaks verifying some encapsulated (signed-then-encrypted)
+      # messages. See
+      # <https://github.com/jkraemer/mail-gpg/pull/40#issue-95776382> for
+      # details.
+      def self.verify_signature(plain_part, signature_part, options = {})
+        if !(signature_part.has_content_type? &&
+            ('application/pgp-signature' == signature_part.mime_type))
+          return false
+        end
+
+        # Work around the problem that plain_part.raw_source prefixes an
+        # erroneous CRLF, <https://github.com/mikel/mail/issues/702>.
+        if ! plain_part.raw_source.empty?
+          plaintext = [ plain_part.header.raw_source,
+                        "\r\n\r\n",
+                        plain_part.body.raw_source
+          ].join
+        else
+          plaintext = plain_part.encoded
+        end
+
+        signature = signature_part.body.encoded
+        GpgmeHelper.sign_verify(plaintext, signature, options)
+      end
+    end
+  end
+end
+

data/lib/schleuder/runner.rb

@@ -31,7 +31,13 @@ module Schleuder
       end
 
       error = run_filters('pre')
-      return error if error
+      if error
+        if bounce?(error, @mail)
+          return error
+        else
+          return nil
+        end
+      end
 
       begin
         # This decrypts, verifies, etc.
@@ -48,7 +54,13 @@ module Schleuder
       end
 
       error = run_filters('post')
-      return error if error
+      if error
+        if bounce?(error, @mail)
+          return error
+        else
+          return nil
+        end
+      end
 
       if ! @mail.was_validly_signed?
         logger.debug 'Message was not validly signed, adding subject_prefix_in'
@@ -85,16 +97,34 @@ module Schleuder
       @list
     end
 
-    def run_filters(filter_type)
-      error = filters_runner(filter_type).run(@mail)
-      if error
-        if list.bounces_notify_admins?
-          text = "#{I18n.t('.bounces_notify_admins')}\n\n#{error}"
-          # TODO: raw_source is mostly blank?
-          logger.notify_admin text, @mail.original_message, I18n.t('notice')
+    def notify_admins(reason, original_message)
+      if list.bounces_notify_admins
+        list.logger.notify_admin reason, original_message, I18n.t('notice')
+      end
+    end
+
+    def bounce?(response, mail)
+      if list.bounces_drop_all
+        list.logger.debug 'Dropping bounce as configurated'
+        notify_admins(I18n.t('.bounces_drop_all'), mail.original_message)
+        return false
+      end
+
+      list.bounces_drop_on_headers.each do |key, value|
+        if mail[key].to_s.match(/#{value}/i)
+          list.logger.debug "Incoming message header key '#{key}' matches value '#{value}': dropping the bounce."
+          notify_admins(I18n.t('.bounces_drop_on_headers', key: key, value: value), mail.original_message)
+          return false
         end
-        return error
       end
+
+      list.logger.debug 'Bouncing message'
+      notify_admins("#{I18n.t('.bounces_notify_admins')}\n\n#{response}", mail.original_message)
+      true
+    end
+
+    def run_filters(filter_type)
+      filters_runner(filter_type).run(@mail)
     end
 
     def filters_runner(filter_type)

data/lib/schleuder/version.rb

@@ -1,3 +1,3 @@
 module Schleuder
-  VERSION = '4.0.0'
+  VERSION = '4.0.3'
 end

data/lib/schleuder.rb

@@ -6,6 +6,7 @@
 Encoding.default_external = Encoding::UTF_8
 
 # Stdlib
+require 'etc'
 require 'fileutils'
 require 'singleton'
 require 'yaml'
@@ -13,6 +14,7 @@ require 'pathname'
 require 'syslog/logger'
 require 'logger'
 require 'open3'
+require 'socket'
 
 # Require mandatory libs. The database-layer-lib is required below.
 require 'mail-gpg'
@@ -32,7 +34,8 @@ $:.unshift libdir
 require 'schleuder/mail/parts_list.rb'
 require 'schleuder/mail/message.rb'
 require 'schleuder/mail/gpg.rb'
-require 'schleuder/mail/encrypted_part.rb'
+require 'schleuder/mail/gpg/encrypted_part.rb'
+require 'schleuder/mail/gpg/sign_part.rb'
 require 'schleuder/gpgme/import_status.rb'
 require 'schleuder/gpgme/key.rb'
 require 'schleuder/gpgme/sub_key.rb'

data/locales/de.yml

@@ -11,12 +11,12 @@ de:
         invalid: "enthält nicht druckbare Zeichen"
       public_footer:
         invalid: "enthält nicht druckbare Zeichen"
-    invalid_email: "ist keine valide E-Mail-Adresse"
-    invalid_fingerprint: "ist kein valider OpenPGP-Fingerabdruck"
-    list_fingerprint_missing: "Fingerabdruck der Liste ist nicht gesetzt, kann nicht arbeiten! (In `%{listdir}`.)"
-    list_key_missing: "Schlüssel der Liste nicht im Schlüsselring gefunden, kann nicht arbeiten! (In `%{listdir}`.)"
-    list_secret_key_missing: "Geheimer Schlüssel der Liste nicht im Schlüsselring gefunden, kann nicht arbeiten! (In `%{listdir}`.)"
-    list_admins_missing: "List hat keine Admins konfiguriert, kann nicht arbeiten! (In `%{listdir}`.)"
+    invalid_email: "ist keine gültige E-Mail-Adresse"
+    invalid_fingerprint: "ist kein gültiger OpenPGP-Fingerabdruck"
+    list_fingerprint_missing: "Fingerabdruck der Liste ist nicht gesetzt, kann nicht verarbeiten! (In `%{listdir}`.)"
+    list_key_missing: "Schlüssel der Liste nicht im Schlüsselring gefunden, kann nicht verarbeiten! (In `%{listdir}`.)"
+    list_secret_key_missing: "Geheimer Schlüssel der Liste nicht im Schlüsselring gefunden, kann nicht verarbeiten! (In `%{listdir}`.)"
+    list_admins_missing: "List hat keine Admins konfiguriert, kann nicht verarbeiten! (In `%{listdir}`.)"
     fatalerror: |
       Es ist ein schwerwiegender Fehler aufgetreten. Administratoren wurden benachrichtigt.
       Bitte versuche es später noch ein Mal.
@@ -37,7 +37,7 @@ de:
     message_signature_unknown: |
       Emails an diese Adresse müssen mit dem OpenPGP-Schlüssel signiert sein, der 
       deiner Mitgliedschaft zugewiesen ist. Wenn du nicht weisst, welcher Schlüssel das ist, frage
-      die Administrator/innen. Die erreichst du per Email an
+      die Administrator/innen. Diese erreichst du per Email an
       <%{owner_email}>.
       (Vorzugsweise verschlüssele die Email mit dem Schlüssel dieser Adresse:
       %{list_fingerprint}).
@@ -147,7 +147,7 @@ de:
         Mitgliedschaft von %{email} nicht gelöscht:
         %{errors}
       cannot_unsubscribe_last_admin: |
-        %{email} ist die einzige admin-Mitgliedschaft für diese Liste, daher darf sie nicht gelöscht werden.
+        %{email} ist die einzige Admin-Mitgliedschaft für diese Liste, daher darf sie nicht gelöscht werden.
       subscribed: |
         Mitgliedschaft von %{email} mit diesen Werten eingetragen:
 
@@ -159,7 +159,7 @@ de:
 
         %{errors}.
       list_of_subscriptions: "Mitgliedschaften:\n"
-      set_fingerprint_only_self: Nur admins dürfen den Fingerabdruck für andere Mitgliedschaften festlegen.
+      set_fingerprint_only_self: Nur Admins dürfen den Fingerabdruck für andere Mitgliedschaften festlegen.
       fingerprint_set: Fingerabdruck für %{email} auf %{fingerprint} gesetzt.
       setting_fingerprint_failed: |
         Fingerabdruck für %{email} konnte nicht auf %{fingerprint} gesetzt werden:
@@ -172,7 +172,7 @@ de:
         Benötigt werden ein oder zwei Werte, bspw.:
         X-SET-FINGERPRINT: 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
 
-        oder (als admin):
+        oder (als Admin):
         X-SET-FINGERPRINT: subscription2@hostname 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
 
         Wobei der Fingerprint in der gesamten Länge (40 Zeichen) angegeben werden muss. Optional mit 0x als Präfix.
@@ -184,11 +184,11 @@ de:
         Benötigt werden ein oder zwei Werte, bspw.:
         X-SET-FINGERPRINT: 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
 
-        oder (als admin):
+        oder (als Admin):
         X-SET-FINGERPRINT: subscription2@hostname 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
 
         Um einen Fingerprint zu entfernen kannst du das Schlüsselwort 'UNSET-FINGERPRINT' verwenden.
-      unset_fingerprint_only_self: Nur admins dürfen den Fingerabdruck für andere Mitgliedschaften löschen.
+      unset_fingerprint_only_self: Nur Admins dürfen den Fingerabdruck für andere Mitgliedschaften löschen.
       fingerprint_unset: Fingerabdruck für %{email} wurde entfernt.
       unsetting_fingerprint_failed: |
         Fingerabdruck für %{email} konnte nicht entfernt werden:
@@ -199,7 +199,7 @@ de:
         Benötigt werden ein Wert, bspw.:
         X-UNSET-FINGERPRINT: subscription2@hostname
 
-        Als admin musst du um deinen eigenen Fingerabdruck zu entfernen, noch zusätzlich das Argument force mitgeben. bspw.:
+        Als Admin musst du um deinen eigenen Fingerabdruck zu entfernen, noch zusätzlich das Argument force mitgeben. bspw.:
         X-UNSET-FINGERPRINT: adminsubscription2@hostname force
       subscribe_requires_arguments: |
         Fehler: Du hast zu dem Schlüsselwort 'SUBSCRIBE' keinen Wert angegeben.
@@ -210,13 +210,13 @@ de:
         Oder, um den Schlüssel der neuen Mitgliedschaft zuzuweisen:
         X-SUBSCRIBE: new-subscription@hostname 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
 
-        Oder, um den Schlüssel zuzuweisen, und die Mitgliedschaft als admin einzutragen:
+        Oder, um den Schlüssel zuzuweisen, und die Mitgliedschaft als Admin einzutragen:
         X-SUBSCRIBE: new-subscription@hostname 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3 true
 
-        Oder, um den Schlüssel zuzuweisen, die Mitgliedschaft als admin einzutragen, und die Zustellung von Listen-Emails für diese Mitgliedschaft abzuschalten:
+        Oder, um den Schlüssel zuzuweisen, die Mitgliedschaft als Admin einzutragen, und die Zustellung von Listen-Emails für diese Mitgliedschaft abzuschalten:
         X-SUBSCRIBE: new-subscription@hostname 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3 true false
 
-        Wenn du die optionalen Werte weglässt hat die Mitgliedschaft keinen Schlüssel zugewiesen, ist nicht admin, und hat die Zustellung von Listen-Email aktiviert.
+        Wenn du die optionalen Werte weglässt hat die Mitgliedschaft keinen Schlüssel zugewiesen, ist nicht Admin, und hat die Zustellung von Listen-Email aktiviert.
     sign_this:
       signatures_attached: Die Signaturen hängen an.
       no_content_found: Deine Email enthielt keine Anhänge und keinen Text-Inhalt, daher konnte nichts signiert werden.

metadata

@@ -1,105 +1,105 @@
 --- !ruby/object:Gem::Specification
 name: schleuder
 version: !ruby/object:Gem::Version
-  version: 4.0.0
+  version: 4.0.3
 platform: ruby
 authors:
 - schleuder dev team
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-04 00:00:00.000000000 Z
+date: 2022-04-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bigdecimal
+  name: activerecord
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: 6.1.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: 6.1.3
 - !ruby/object:Gem::Dependency
-  name: gpgme
+  name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 2.0.19
+        version: 3.1.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 2.0.19
+        version: 3.1.2
 - !ruby/object:Gem::Dependency
-  name: mail
+  name: charlock_holmes
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.7.1
+        version: 0.7.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.7.1
+        version: 0.7.6
 - !ruby/object:Gem::Dependency
-  name: mail-gpg
+  name: gpgme
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.3'
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.19
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.3'
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.19
 - !ruby/object:Gem::Dependency
-  name: activerecord
+  name: mail
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 6.1.3
+        version: 2.7.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 6.1.3
+        version: 2.7.1
 - !ruby/object:Gem::Dependency
-  name: bcrypt
+  name: mail-gpg
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.1.2
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.1.2
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -114,20 +114,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 10.5.0
-- !ruby/object:Gem::Dependency
-  name: sqlite3
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.4.2
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.4.2
 - !ruby/object:Gem::Dependency
   name: sinatra
   requirement: !ruby/object:Gem::Requirement
@@ -157,19 +143,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '2'
 - !ruby/object:Gem::Dependency
-  name: thor
+  name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.4.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.4.2
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement
@@ -185,47 +171,47 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1'
 - !ruby/object:Gem::Dependency
-  name: charlock_holmes
+  name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.6
+        version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.6
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: rspec
+  name: byebug
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '10'
 - !ruby/object:Gem::Dependency
-  name: hirb
+  name: database_cleaner
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: factory_bot
   requirement: !ruby/object:Gem::Requirement
@@ -241,21 +227,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '6.0'
 - !ruby/object:Gem::Dependency
-  name: database_cleaner
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '2.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '2.0'
-- !ruby/object:Gem::Dependency
-  name: simplecov-console
+  name: hirb
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
@@ -283,45 +255,45 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1'
 - !ruby/object:Gem::Dependency
-  name: rubocop
+  name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1'
+        version: '3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1'
+        version: '3'
 - !ruby/object:Gem::Dependency
-  name: byebug
+  name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10'
+        version: '1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10'
+        version: '1'
 - !ruby/object:Gem::Dependency
-  name: irb
+  name: simplecov-console
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0'
 description: |-
@@ -355,6 +327,8 @@ files:
 - db/migrate/20180723173900_add_deliver_selfsent_to_list.rb
 - db/migrate/20190906194820_add_autocrypt_header_to_list.rb
 - db/migrate/20200118170110_add_set_reply_to_to_sender_and_munge_from.rb
+- db/migrate/20211106112020_change_boolean_values_to_integers.rb
+- db/migrate/20211107151309_add_limits_to_string_columns.rb
 - db/schema.rb
 - etc/init.d/schleuder-api-daemon
 - etc/list-defaults.yml
@@ -432,8 +406,9 @@ files:
 - lib/schleuder/listlogger.rb
 - lib/schleuder/logger.rb
 - lib/schleuder/logger_notifications.rb
-- lib/schleuder/mail/encrypted_part.rb
 - lib/schleuder/mail/gpg.rb
+- lib/schleuder/mail/gpg/encrypted_part.rb
+- lib/schleuder/mail/gpg/sign_part.rb
 - lib/schleuder/mail/message.rb
 - lib/schleuder/mail/parts_list.rb
 - lib/schleuder/runner.rb
@@ -452,7 +427,7 @@ licenses:
 metadata:
   homepage_uri: https://schleuder.org/
   documentation_uri: https://schleuder.org/docs/
-  changelog_uri: https://0xacab.org/schleuder/schleuder/blob/master/CHANGELOG.md
+  changelog_uri: https://0xacab.org/schleuder/schleuder/blob/main/CHANGELOG.md
   source_code_uri: https://0xacab.org/schleuder/schleuder/
   bug_tracker_uri: https://0xacab.org/schleuder/schleuder/issues
   mailing_list_uri: https://lists.nadir.org/mailman/listinfo/schleuder-announce/
@@ -473,8 +448,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.7
-signing_key:
+rubyforge_project: 
+rubygems_version: 2.7.6.2
+signing_key: 
 specification_version: 4
 summary: Schleuder is an encrypting mailing list manager with remailing-capabilities.
 test_files: []