S/MIME signed messages cannot be verified if body contains 8-bit characters

S/MIME signed messages cannot be verified if body contains 8

Wed, 07 Mar 2012 14:45:46 +0000

S/MIME signed messages cannot be verified if body contains 8-bit character. It seems, that a 'Content-Transfer-Encoding: 8bit' header is added after signing.

> S/MIME signed messages cannot be verified if body contains

Wed, 07 Mar 2012 20:24:07 +0000

> S/MIME signed messages cannot be verified if body contains 8-bit character. > > It seems, that a 'Content-Transfer-Encoding: 8bit' header is added > after signing. We don't add this. Sounds like a MTA is adding this somewhere in transit.

>> S/MIME signed messages cannot be verified if body contain

Thu, 08 Mar 2012 06:46:19 +0000

>> S/MIME signed messages cannot be verified if body contains 8-bit character. >> >> It seems, that a 'Content-Transfer-Encoding: 8bit' header is added >> after signing. > > We don't add this. Sounds like a MTA is adding this somewhere in transit. Hi Michael, it's not so simple. I test this internally, so only one MTA(postfix) is involved. I'm also not sure, that this header is the reason for the verification failure. However, if it is added by the MTA, shouldn't it be added by IMP before signing? I've attached 3 complete Messages. mail-1 contains only the letter 'a' (and my signature) and can be verified. mail-2 contains only the letter 'ä' (and my signature) and cannot be verified. mail-3 is what imp appended to my Sent-folder(when sending mail-2), this one can be verified.

Thu, 08 Mar 2012 06:48:05 +0000

The problem is not in postfix but in Horde/Mime/Part.php, fu

Thu, 15 Mar 2012 10:06:31 +0000

The problem is not in postfix but in Horde/Mime/Part.php, function send(), starting on line 1669. There is code that detects if MTA supports 8BITMIME (RFC 1652) or BINARYMIME (RFC 3030) extensions and re-encodes the mimePart. A S/MIME part cannot be reencoded from quoted-printable to anything else because it breaks the signature. One of possible solutions would be to extend the send function by giving it a new boolean parameter to use only 7bit encoding (quoted-printable) for S/MIME signed messages and set this parameter on sign time.

Until this is fixed you can use the attached workaround.

Mon, 19 Mar 2012 11:06:17 +0000

Until this is fixed you can use the attached workaround.

> Until this is fixed you can use the attached workaround.

Mon, 19 Mar 2012 12:10:07 +0000

> Until this is fixed you can use the attached workaround. Thank you, after your last comment,i set 'encode' => self::ENCODE_7BIT; in the following toString call as a workarround, which is essentially the same (changes a single line only :-))

Changes have been made in Git (master): commit 86d6dec3184a

Wed, 28 Mar 2012 05:48:15 +0000

Changes have been made in Git (master): commit 86d6dec3184a2bd470f165f5aebbf9751fefee58 Author: Michael M Slusarz Date: Tue Mar 27 23:43:16 2012 -0600 [mms] Add option to allow encoding options to be defined for Horde_Mime_Part#send() (Bug #11058). framework/Mime/lib/Horde/Mime/Part.php | 40 ++++++++++++++++++++------------ framework/Mime/package.xml | 12 ++++---- 2 files changed, 31 insertions(+), 21 deletions(-) http://git.horde.org/horde-git/-/commit/86d6dec3184a2bd470f165f5aebbf9751fefee58

Changes have been made in Git (master): commit 53f124c40670

Wed, 28 Mar 2012 05:48:19 +0000

Changes have been made in Git (master): commit 53f124c40670b6a1b25b7bf06fe9c904bbe1e263 Author: Michael M Slusarz Date: Tue Mar 27 23:48:02 2012 -0600 [mms] Ensure that PGP & S/MIME signed message bodies are not altered after the signature is calculated (Bug #11058). imp/docs/CHANGES | 2 ++ imp/lib/Compose.php | 18 +++++++++++++++--- imp/package.xml | 4 +++- 3 files changed, 20 insertions(+), 4 deletions(-) http://git.horde.org/horde-git/-/commit/53f124c40670b6a1b25b7bf06fe9c904bbe1e263

Do these commits fix things?

Wed, 28 Mar 2012 05:48:38 +0000

Do these commits fix things?

Changes have been made in Git (master): commit 054d6c36fd45

Wed, 28 Mar 2012 05:56:27 +0000

Changes have been made in Git (master): commit 054d6c36fd451c0711c2eb45a1653f0b7e48c018 Author: Michael M Slusarz Date: Tue Mar 27 23:56:19 2012 -0600 Bug #11058: Encrypted messages will be base64 encoded, so ok to send 8bit/binary, even if signed. imp/lib/Compose.php | 8 ++------ 1 files changed, 2 insertions(+), 6 deletions(-) http://git.horde.org/horde-git/-/commit/054d6c36fd451c0711c2eb45a1653f0b7e48c018

Changes have been made in Git (develop): commit 86d6dec3184

Wed, 28 Mar 2012 05:57:33 +0000

Changes have been made in Git (develop): commit 86d6dec3184a2bd470f165f5aebbf9751fefee58 Author: Michael M Slusarz Date: Tue Mar 27 23:43:16 2012 -0600 [mms] Add option to allow encoding options to be defined for Horde_Mime_Part#send() (Bug #11058). framework/Mime/lib/Horde/Mime/Part.php | 40 ++++++++++++++++++++------------ framework/Mime/package.xml | 12 ++++---- 2 files changed, 31 insertions(+), 21 deletions(-) http://git.horde.org/horde-git/-/commit/86d6dec3184a2bd470f165f5aebbf9751fefee58

Changes have been made in Git (develop): commit 53f124c4067

Wed, 28 Mar 2012 05:57:37 +0000

Changes have been made in Git (develop): commit 53f124c40670b6a1b25b7bf06fe9c904bbe1e263 Author: Michael M Slusarz Date: Tue Mar 27 23:48:02 2012 -0600 [mms] Ensure that PGP & S/MIME signed message bodies are not altered after the signature is calculated (Bug #11058). imp/docs/CHANGES | 2 ++ imp/lib/Compose.php | 18 +++++++++++++++--- imp/package.xml | 4 +++- 3 files changed, 20 insertions(+), 4 deletions(-) http://git.horde.org/horde-git/-/commit/53f124c40670b6a1b25b7bf06fe9c904bbe1e263

Changes have been made in Git (develop): commit 054d6c36fd4

Wed, 28 Mar 2012 05:57:40 +0000

Changes have been made in Git (develop): commit 054d6c36fd451c0711c2eb45a1653f0b7e48c018 Author: Michael M Slusarz Date: Tue Mar 27 23:56:19 2012 -0600 Bug #11058: Encrypted messages will be base64 encoded, so ok to send 8bit/binary, even if signed. imp/lib/Compose.php | 8 ++------ 1 files changed, 2 insertions(+), 6 deletions(-) http://git.horde.org/horde-git/-/commit/054d6c36fd451c0711c2eb45a1653f0b7e48c018

"array_key_exists($opts['encode'])" should be "array_key

Wed, 28 Mar 2012 07:33:44 +0000

"array_key_exists($opts['encode'])" should be "array_key_exists('encode',$opts)" beside this it seems ok

Changes have been made in Git (master): commit d9f98a4b9fed

Wed, 28 Mar 2012 07:40:13 +0000

Changes have been made in Git (master): commit d9f98a4b9feddf1f89c1f2439295563a1d8a453a Author: Michael M Slusarz Date: Wed Mar 28 01:40:03 2012 -0600 Bug #11058: Fix bad method call framework/Mime/lib/Horde/Mime/Part.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) http://git.horde.org/horde-git/-/commit/d9f98a4b9feddf1f89c1f2439295563a1d8a453a

> "array_key_exists($opts['encode'])" should be > "array_k

Wed, 28 Mar 2012 07:43:08 +0000

> "array_key_exists($opts['encode'])" should be > "array_key_exists('encode',$opts)" Yeah, my fault. I switched the method of sanity checking halfway through and forgot to change this back. Reopen this ticket if you see any further issues.

I can confirm this working, too.

Wed, 28 Mar 2012 07:56:18 +0000

I can confirm this working, too.

Changes have been made in Git (develop): commit d9f98a4b9fe

Wed, 28 Mar 2012 17:33:55 +0000

Changes have been made in Git (develop): commit d9f98a4b9feddf1f89c1f2439295563a1d8a453a Author: Michael M Slusarz Date: Wed Mar 28 01:40:03 2012 -0600 Bug #11058: Fix bad method call framework/Mime/lib/Horde/Mime/Part.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) http://git.horde.org/horde-git/-/commit/d9f98a4b9feddf1f89c1f2439295563a1d8a453a