S/MIME: Rarely signature failure if adding attachment

Hello! Atm we search for the reason why... but we can see

Fri, 05 Jul 2013 08:50:32 +0000

Hello! Atm we search for the reason why... but we can see this failure: If one of our users is adding an attachment to a s/mime signed mail the signature got broken (this is only the case if he adds an attachment!). If you look at the source of the mail you see the problem: Right near the end of the signed base64 part there is a newline. For example it looks like this: <> [...] JayliE7ts/PZyJ+457ZjNrOEavIdp5g+bmJc+kSbhSTLH2aNmrXCV7OYlh7Xwy+3s9uZX6zQ1CwQ eJgT4auOKTQZ13fPXNf18hig10ldbveKfdDo7lhlXCSUYl0hPuLnaunlz7/K/i0sUShebd3jn9Jk Q7hJ05ghz2EeSYT4Om+5p2PXQDhZsHWWxR55J7hWsA2pkEDlPGzYQoDusyC6Bt5qBsIBeIlXCJjZ guUoAAq5mwh2mfBaTJzmFmhr0M1SuMcDMCO68uL5fj9iZiKRBEvrHmc77DSsIZR7wxR1Y23YYm10 [...] <> So if I delete the newline the mail is ok, signature valid. (strange, isn't it? maybe a invalid character somehow in the users identity profile... we are searching...)

This sounds like something added by another system in the ma

Mon, 15 Jul 2013 18:05:00 +0000

This sounds like something added by another system in the mailing chain. This isn't something IMP would do. And if so - this would be an error in PHP, since we don't generate the S/MIME data ourselves (it is done via the openssl_pkcs7_sign method).

Hi Michael , > This sounds like something added by anothe

Tue, 16 Jul 2013 11:56:54 +0000

Hi Michael , > This sounds like something added by another system in the mailing > chain. This isn't something IMP would do. And if so - this would be > an error in PHP, since we don't generate the S/MIME data ourselves > (it is done via the openssl_pkcs7_sign method). Ok, I see. Meanwhile I got the feedback that the user deleted his IMP identity and created a new one from scratch. After that the problem got solved. I would say we could close this ticket as invalid/solved. If I ever know what exactely caused the problem I would leafe a note here. Maybe (just maybe) we could do something in IMP/Horde to not get such a strange openssl_pkcs7_sign behaviour. Thanks!