如何使用python发送gpg加密的电子邮件(带有附件)

时间:2019-02-01 19:48:22

标签: python email encryption gnupg

我有一个脚本,希望通过电子邮件发送给定文件夹中的新生成的文件。我已经能够使用 smtplib 电子邮件 uu 生成和发送电子邮件(不加密)。我还设法成功地发送不带附件加密的GPG。

发送带有附件的gpg加密电子邮件一直是一个挑战。

我使用python-gnupg库为文件创建了密文,并认为我可以将其作为电子邮件正文通过电子邮件发送。这就是我尝试过的方法。

from email.mime.text import MIMEText
import gnupg
gpg = gnupg.GPG(gnupghome=GPG_HOME_HOME)
with open(FILE_PATH, "rb") as f:
    cipher_text = str(gpg.encrypt(FILE_PATH.read(), RECIPIENT_EMAIL)

msg = MIMEText(cipher_text, "plain")
msg["Subject"] = "***TEST***"
msg["From"] = EMAIL_SENDER
msg["To"] = EMAIL_RECIPIENT
msg_text = msg.as_string()

我也尝试根据自己的需要调整https://docs.python.org/release/3.5.3/library/email-examples.html上的示例,但是我也没有成功。

我的gpg设置正确,我可以使用Thunderbird / enigmail发送/接收gpg加密的电子邮件。

有人可以告诉我如何发送带有附件的gpg加密电子邮件吗?我相信这需要对电子邮件结构进行一些底层操作,但是我对此不太熟悉。

谢谢

2 个答案:

答案 0 :(得分:0)

这是我设法获得带有附件的有效gnupg加密电子邮件的方法。我使用了雷鸟发送的电子邮件,其中使用enigmail作为模板。

from email.mime.base import MIMEBase
from email.message import Message
import base64
import mimetypes
import os

import gnupg # python-gnupg

def get_email_string(email_address_recipient, file_path_attachment, email_message=""):
    def get_base64_file(file_path):
        with open(file_path, "rb") as f:
            b_str = base64.b64encode(f.read())
        return b_str

    def get_mimetype(file_path):
        return mimetypes.guess_type(file_path)[0]

    def get_file_name(file_path):
        return os.path.basename(file_path)

    def get_gpg_cipher_text(string, recipient_email_address):
        gpg = gnupg.GPG(gnupghome=DIR_GNUPG)
        encrypted_str = str(gpg.encrypt(string, recipient_email_address))
        return encrypted_str


    msg = Message()
    msg.add_header(_name="Content-Type", _value="multipart/mixed", protected_headers="v1")
    msg["From"] = EMAIL_FROM
    msg["To"] = email_address_recipient

    msg_text = Message()
    msg_text.add_header(_name="Content-Type", _value="multipart/mixed")
    msg_text.add_header(_name="Content-Language", _value="en-US")

    msg_body = Message()
    msg_body.add_header(_name="Content-Type", _value="text/plain", charset="utf-8")
    msg_body.add_header(_name="Content-Transfer-Encoding", _value="quoted-printable")
    msg_body.set_payload(email_message + 2*"\n")

    msg_attachment = Message()
    msg_attachment.add_header(_name="Content-Type", _value=get_mimetype(file_path_attachment), name=get_file_name(file_path_attachment))
    msg_attachment.add_header(_name="Content-Transfer-Encoding", _value="base64")
    msg_attachment.add_header(_name="Content-Disposition", _value="attachment", filename=get_file_name(file_path_attachment))
    msg_attachment.set_payload(get_base64_file(file_path_attachment))

    msg_text.attach(msg_body)
    msg_text.attach(msg_attachment)
    msg.attach(msg_text)


    pgp_msg = MIMEBase(_maintype="multipart", _subtype="encrypted", protocol="application/pgp-encrypted")
    pgp_msg["From"] = EMAIL_FROM
    pgp_msg["To"] = email_address_recipient

    pgp_msg_part1 = Message()
    pgp_msg_part1.add_header(_name="Content-Type", _value="application/pgp-encrypted")
    pgp_msg_part1.add_header(_name="Content-Description", _value="PGP/MIME version identification")
    pgp_msg_part1.set_payload("Version: 1" + "\n")

    pgp_msg_part2 = Message()
    pgp_msg_part2.add_header(_name="Content-Type", _value="application/octet-stream", name="encrypted.asc")
    pgp_msg_part2.add_header(_name="Content-Description", _value="OpenPGP encrypted message")
    pgp_msg_part2.add_header(_name="Content-Disposition", _value="inline", filename="encrypted.asc")
    pgp_msg_part2.set_payload(get_gpg_cipher_text(msg.as_string(), email_address_recipient))

    pgp_msg.attach(pgp_msg_part1)
    pgp_msg.attach(pgp_msg_part2)

    return pgp_msg.as_string()

答案 1 :(得分:0)

如果您仍在寻找更短的解决方案,则可以看看envelope库。

pip3 install envelope

它仅需几行即可处理附加和加密。

from envelope import Envelope

e = (Envelope()
     .message(email_message)
     .from_(EMAIL_FROM)
     .to(email_address_recipient)
     .attach(path=file_path_attachment)
     .encryption())
e.as_message()  # returns EmailMessage
e.smtp("localhost").send()  # directly sends