I spent some hours for this task and came to the conclusion, that we can't implement this easily. The details are documented in the ticket (together with a naive implementation):
http://trac.turbogears.org/ticket/1587#comment:2
If you have an idea, how to solve the problem for TurboGears+CherryPy please drop me a line.
fs
smime.p7s
Description: S/MIME Cryptographic Signature
