MozillaZine


S/MIME signature verification not shown on eml files

User Help for Mozilla Thunderbird
albertlevi
 
Posts: 3
Joined: May 20th, 2021, 5:52 am

Post Posted May 20th, 2021, 6:00 am

Hi,

I have a valid signed email message. When I check it within folder, signature seal is shown. However, when I export as eml file and double click on it, message is shown but signature seal is not shown. The signature attachment still exists in the eml file.

Anybody knows a remedy for this.
Regards
Albert Levi

LIMPET235
Moderator

User avatar
 
Posts: 39664
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Post Posted May 20th, 2021, 6:03 am

Moving this to Thunderbird Support...
Ancient Amateur Astronomer
Win-7-HP/IntelĀ® DualCore-2.0GHz/500G HDD/4 Gig Ram/550Watt PSU/350WattUPS/Firefox-20.0-62.0-79.0-93.0/T-bird-2.0.0.24/SnagIt-v10.0.1/MWP-7.12.
W.M.Y.C.
(Always choose the "Custom" Install.)

tanstaafl
Moderator

User avatar
 
Posts: 48173
Joined: July 30th, 2003, 5:06 pm

Post Posted May 21st, 2021, 11:05 am

Did you import the necessary certificate authority (CA) for whatever certificate was used?

If you use view -> message source (or Ctrl-U) to look at the raw message source, what are the headers for the MIME section that adds the digital signature?

albertlevi
 
Posts: 3
Joined: May 20th, 2021, 5:52 am

Post Posted May 21st, 2021, 1:33 pm

Yes CAs are there. Actually seal is shown when I open the message in the folder. The problem is when I open as an independent eml file.

Signatures are also in place in the eml file(below):

Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

tanstaafl
Moderator

User avatar
 
Posts: 48173
Joined: July 30th, 2003, 5:06 pm

Post Posted May 21st, 2021, 6:21 pm

I'm out of town right now. Let me try to duplicate your problem Sunday.

What companies S/MIME certificate are you using? Last I looked most of the free ones are no longer available and Actalis doesn't let you use a browser to generate the private key, but will generate it themselves and send you it.

https://thomas.vanhoutte.be/miniblog/wh ... 3-options/

albertlevi
 
Posts: 3
Joined: May 20th, 2021, 5:52 am

Post Posted May 22nd, 2021, 12:38 pm

For some senders it was Comodo (the senders were Comodo employees). Last one I tried was by getting a certificate from Actalis. They are all the same. I do not think that it is related to CA since the signature is shown to be verified if the email was opened in inbox.

Thanks

Return to Thunderbird Support


Who is online

Users browsing this forum: Bing [Bot] and 3 guests