Bug 54505

Version:           1.5 (using KDE 3.1.0)
Installed from:    Mandrake Linux Cooker athlon - Cooker
Compiler:          gcc version 3.2 (Mandrake Linux 9.0 3.2-1mdk)
OS:          Linux (i686) release 2.4.19-16mdkcustom

PGP/MIME signatures in KMail 1.5 (created using Crypto plugin /usr/lib/cryptplug/gpgme-openpgp.so) are mishandled when modifying already written email (e.g. by double-clicking on it in the Outbox folder). When using builtin inline OpenPGP signature, the signature is removed from message body and the message is signed again after you finish modifying (composing) it.

With PGP/MIME, the signature is left in the message as an attachment (i.e. the composer shows one attachment where there was no attachment at all when composing the message). When you finish composing and click on "Queue", the message is signed again using PGP/MIME *together with the attachment* and stored in Outbox. So you now have a message with *two* attachments: one of them is the old signature and the other one is the "real" signature that signs "new" message (i.e. modified message text plus "old" signature).

I hope this report is clear; please let me know if you need some clarification.