fix(email): show an unauthorized signing key as its own verdict

- map host validity 10 (key not authorized) to a new badge state
- rank it between "could not be checked" and "bad signature"
- word it on the badge, security view and report, not as BAD
- carry it through the verification payload by name
- translate the new strings in every shipped locale

1 files changed, 5 insertions, 0 deletions

diff --git a/src/m_email/test/EMailViewLayoutTest.cpp b/src/m_email/test/EMailViewLayoutTest.cpp
index beae5ce..8e75dc1 100644
--- a/src/m_email/test/EMailViewLayoutTest.cpp
+++ b/src/m_email/test/EMailViewLayoutTest.cpp
@@ -275,11 +275,16 @@ TEST(EMailViewLayoutTest, TheSecurityStatusSaysOnlyWhatIsKnown) {
             QStringLiteral("Signature verified"));
   EXPECT_EQ(EMailSecurityStatus(EMailBadgeState::kSIGNED_BAD, false).text,
             QStringLiteral("Bad signature"));
+  EXPECT_EQ(
+      EMailSecurityStatus(EMailBadgeState::kSIGNED_UNAUTHORIZED_KEY, false)
+          .text,
+      QStringLiteral("Signing key not authorized"));
   EXPECT_EQ(EMailSecurityStatus(EMailBadgeState::kNOT_PROTECTED, false).text,
             QStringLiteral("Not signed or encrypted"));
   // A verdict against the signature never wears the signature's icon.
   for (const auto badge :
        {EMailBadgeState::kSIGNED_BAD, EMailBadgeState::kSIGNED_ERROR,
+        EMailBadgeState::kSIGNED_UNAUTHORIZED_KEY,
         EMailBadgeState::kSIGNED_MISMATCH, EMailBadgeState::kMALFORMED}) {
     EXPECT_EQ(EMailSecurityStatus(badge, false).icon,
               QStringLiteral(":/icons/warning.png"));