Package: thunderbird
Version: 1:68.5.0-1+b1
Severity: normal
Tags: security

A pkcs7 s/mime signature is not recognized by the client. I compared what is
the difference between a recognized and an unrecognized signature.

correctly recognized:

Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
        micalg=SHA1; boundary="----=_NextPart_000_0000_01D6040E.23370570"
MIME-Version: 1.0
...
------=_NextPart_000_0000_01D6040E.23370570
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
----------------------------------------------------------------------------------------------------------
not recognized:

Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
        boundary="--=_V1R2=_=q1202.27865.7237_1"
MIME-Version: 1.0
...
----=_V1R2=_=q1202.27865.7237_1
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
----------------------------------------------------------------------------------------------------------
The source code of the email does not differ anywhere else. In the past, he
still displayed the smime.p7s attachment for such undetected signatures, which
he no longer does. By the way, the manufacturer of the outlook plugin "cv act s
/ mail" for signing writes that he did everything correctly and the email
client (thunderbird) has to be checked.

the error occurs with a Thunderbird 68.5.0 under debian Linux (Bullseye).



-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.5.0-1-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de 
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages thunderbird depends on:
ii  debianutils               4.9.1
ii  fontconfig                2.13.1-2+b1
ii  libatk1.0-0               2.36.0-2
ii  libc6                     2.30-4
ii  libcairo-gobject2         1.16.0-4
ii  libcairo2                 1.16.0-4
ii  libdbus-1-3               1.12.16-2
ii  libdbus-glib-1-2          0.110-5
ii  libevent-2.1-7            2.1.11-stable-1
ii  libffi7                   3.3-4
ii  libfontconfig1            2.13.1-2+b1
ii  libfreetype6              2.10.1-2
ii  libgcc-s1                 10-20200411-1
ii  libgdk-pixbuf2.0-0        2.40.0+dfsg-4
ii  libglib2.0-0              2.64.1-1
ii  libgtk-3-0                3.24.18-1
ii  libgtk2.0-0               2.24.32-4
ii  libicu63                  63.2-3
ii  libjsoncpp1               1.7.4-3.1
ii  libnspr4                  2:4.25-1
ii  libnss3                   2:3.49.1-1
ii  libpango-1.0-0            1.42.4-8
ii  libsqlite3-0              3.31.1-4
ii  libstartup-notification0  0.12-6
ii  libstdc++6                10-20200411-1
ii  libvpx6                   1.8.2-dmo1
ii  libx11-6                  2:1.6.9-2
ii  libx11-xcb1               2:1.6.9-2
ii  libxcb-shm0               1.14-2
ii  libxcb1                   1.14-2
ii  libxext6                  2:1.3.3-1+b2
ii  libxrender1               1:0.9.10-1
ii  libxt6                    1:1.1.5-1+b3
ii  psmisc                    23.3-1
ii  x11-utils                 7.7+5
ii  zlib1g                    1:1.2.11.dfsg-2

Versions of packages thunderbird recommends:
ii  hunspell-de-at [hunspell-dictionary]  20161207-7
ii  hunspell-de-ch [hunspell-dictionary]  20161207-7
ii  hunspell-de-de [hunspell-dictionary]  20161207-7
ii  lightning                             1:68.5.0-1

Versions of packages thunderbird suggests:
pn  apparmor          <none>
ii  fonts-lyx         2.3.4.2-2
ii  libgssapi-krb5-2  1.17-7

-- no debconf information

Reply via email to