We tried to read a signed email in TBird. We made sure that the signed message contained the intermediate CA certs.
The sample you sent doesn't contain the intermediate CA certs.
The command
openssl pkcs7 -inform der -print_certs
runned on the smime.p7s part of your sample mail shows that there is only two certificates inside the pkcs7/cms structure, the end user's encryption and signature certificates.
I copy them below :
subject=/C=NL/O=Stichting ICTU/serialNumber=AC020000001062137/CN=Verbree Martijn
issuer=/C=NL/O=DigiNotar B.V./CN=DigiNotar PKIoverheid CA Overheid
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=NL/O=Stichting ICTU/serialNumber=AC020000001062141/CN=Verbree Martijn
issuer=/C=NL/O=DigiNotar B.V./CN=DigiNotar PKIoverheid CA Overheid
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto
