127820 - Mozilla fails to verify correct signature of Mails

Status: CLOSED WORKSFORME

(MailNews Core :: Security: S/MIME, defect, P2)

Description

[timtas]

When receiving a normal signed Mail, Mozilla will indicate an invalid signature,
although the signature is valid by any means (Hash and Trust Chain). Netscape
4.7x, Outlook and openssl smime will all report the signature as "valid".

This used to work in the first Releases of Mozilla with S/MIME.

Comment 1

[timtas]

Attachment: The root certificate to verify the signed_message

This is the root certificate to check the signed message with. The command with
openssl is:

openssl smime -verify -in signed_mail.txt  -CAfile root.crt

It will verify successfully.

Comment 2

[timtas]

Attachment: A sample signed mail that is not correctly verified

This is a message (taken out of Mozilla by "View Source") that is not verified
properly in Mozilla but in Netscape, Outlook and openssl.

The openssl command is:
openssl smime -verify -in signed_mail.txt  -CAfile root.crt

Comment 3

[Boris Zbarsky [:bzbarsky]]

to PSM

Comment 4

[Stephane Saux]

kai

Comment 5

[Kai Engert [:KaiE:]]

I think this is either meanwhile fixed, or there is a problem with the trust in
your security database.

Here is why I think so:

I put your mail manually into a mailbox in my local mail folders.
When I open that message, it is displayed as signed.

Can you please test again?
If you still see this problem, please reopen this bug, and describe the trust of
your CA certs.

Thanks!

Comment 6

[timtas]

You are right, this is now fixed (im Mozilla 0.9.9), the message will display
correctly. This now only leaves:
- opaque signed messages
- Outlook signed/encrypted messages
- Encrypting messages using dual keys

But I enyou the great progress being, made.
Thanks
Tim