| Summary | Can't verify signed and encrypted S/MIME message |
| Queue | IMP |
| Queue Version | 5.0.18 |
| Type | Bug |
| State | Resolved |
| Priority | 2. Medium |
| Owners | slusarz (at) horde (dot) org |
| Requester | maciej.uhlig (at) us (dot) edu (dot) pl |
| Created | 01/31/2012 (4904 days ago) |
| Due | |
| Updated | 02/02/2012 (4902 days ago) |
| Assigned | |
| Resolved | 02/02/2012 (4902 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | 5.0.19 |
| Patch | No |
Queue ⇒ IMP
commit bd6437e4915f121da7a355cfe0b8243b162f407b
Author: Michael M Slusarz <slusarz@horde.org>
Date: Wed Feb 1 17:54:14 2012 -0700
[mms] Fix regression in verifying signed & encrypted S/MIME
messages (
Bug #10947).imp/docs/CHANGES | 2 ++
imp/lib/Contents.php | 2 +-
imp/package.xml | 2 ++
3 files changed, 5 insertions(+), 1 deletions(-)
http://git.horde.org/horde-git/-/commit/bd6437e4915f121da7a355cfe0b8243b162f407b
Assigned to Michael Slusarz
State ⇒ Resolved
commit bd6437e4915f121da7a355cfe0b8243b162f407b
Author: Michael M Slusarz <slusarz@horde.org>
Date: Wed Feb 1 17:54:14 2012 -0700
[mms] Fix regression in verifying signed & encrypted S/MIME
messages (
Bug #10947).imp/docs/CHANGES | 2 ++
imp/lib/Contents.php | 2 +-
imp/package.xml | 2 ++
3 files changed, 5 insertions(+), 1 deletions(-)
http://git.horde.org/horde-git/-/commit/bd6437e4915f121da7a355cfe0b8243b162f407b
Priority ⇒ 2. Medium
Type ⇒ Bug
Summary ⇒ Can't verify signed and encrypted S/MIME message
Queue ⇒ Horde Groupware Webmail Edition
Milestone ⇒
Patch ⇒ No
State ⇒ Unconfirmed
sent by Horde/Imp) can not be verified. You get the following result:
S/MIME Encrypted Message
The data in this part has been encrypted via S/MIME.
Signed part
The data in this part has been digitally signed via S/MIME.
Verification failed - this message may have been tampered with.
Text part
Message
The reason of this behaviour is: \pear\php\Horde\Crypt\Smime.php
public function verify($text, $certs) is called with $text being raw
encrypted message and thus can't be verified. The message should be
decrypted before trying to verify signature.