<<< Date Index >>>     <<< Thread Index >>>

Re: S/MIME app/x-pkcs7-mime signed-data

while we're talking about difficult to handle signatures, here's a signed email from mail.app in OS X. :)
I had to apply a patch to mutt & implement a procmail hack to get it to handle these sorts of messages at all. 

On Feb 1, 2004, at 11:12 AM, Thomas Roessler wrote:


Can you send me an example message to reproduce this behavior?

On 2004-01-02 13:03:33 +0100, Alain Bench wrote:

From: Alain Bench <messtic@xxxxxxxxx>
To: Mutt users ml <mutt-users@xxxxxxxx>
Date: Fri, 2 Jan 2004 13:03:33 +0100 (CET)
Subject: S/MIME app/x-pkcs7-mime signed-data
Mail-Followup-To: Mutt users ml <mutt-users@xxxxxxxx>
X-Spam-Level:

Hello,

    I received an S/MIME opaque signed (not clearsigned) mail,
containing one only piece of base64ed binary data containing all mixed
some headers, text, signature, and certificate:

| MIME-Version: 1.0
| Content-Type: application/x-pkcs7-mime; name="smime.p7m";
|       smime-type=signed-data
| Content-Transfer-Encoding: base64
| Content-Disposition: attachment; filename="smime.p7m"
| X-Mailer: Microsoft Outlook Express 6.00.2800.1158

    Mutt 1.4 displays nothing else than:
| [-- application/x-pkcs7-mime is unsupported (use 'v' to view this part) --]
Question: Is there a magic mailcap entry I could use to (auto_)view 
properly in Mutt 1.4 the text of this pkcs7-mime signed-data mail?


    I mean something similar to what I use in ~/.mailcap to
<view-attach> full details of a signature's certificate chain:

| application/x-pkcs7-signature ; openssl smime -pk7out -inform DER |\
|  openssl pkcs7 -print_certs -text -noout ; nametemplate=%s.p7s ;\
|  copiousoutput


    BTW Mutt 1.5.5.1 displays correctly the above p7m signed-data
body, but doesn't print OpenSSL verification output (not even the
enclosing lines with current time), reports "S/MIME signature could
NOT be verified.", and the index 's' stays lowercase. All I get is:

| [-- The following data is S/MIME signed --]
| Clear body of message.
| [-- End of S/MIME signed data. --]

    The message is verified OK with MSOE. What am I missing here?


Bye!    Alain.
--
Everything about locales on Sven Mascheck's excellent site at new
location <URL:http://www.in-ulm.de/~mascheck/locale/>. The little tester utility is at <URL:http://www.in-ulm.de/~mascheck/locale/checklocale.c>. 



--
Thomas Roessler · Personal soap box at <http://log.does-not-exist.org/>.

Attachment: smime.p7s
Description: S/MIME cryptographic signature