Hello everyone,

weÂre using openssl cli for signing and enrypting mails on a linux
box automatically for quite a long time using someting like

        $openssl smime -sign -binary -in $filename -signer $serverzertifikat \
                -inkey $serverkey -passin pass:$serverpasswort -nodetach \
        | \
        $openssl smime -encrypt -binary -des3 -to "$adressename <$adresse>" \
                $(if [ -n "$absender" ] ; then echo "-from $absender" ; fi) \
                -subject "$betreff" `find $TMPDIR -type f -name "cert_*.pem"` \
        | \
        $sendmail $adresse

Recently we observed a mail that was different than all others. Trying to decode
it (using openssl libs on windows) leads to an error like:

1804:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough 
data:.\crypto\asn1\a_d2i_fp.c:240:
1804:error:21078082:PKCS7 routines:B64_READ_PKCS7:decode 
error:.\crypto\pkcs7\pk7_mime.c:142:
1804:error:2107A08B:PKCS7 routines:SMIME_read_PKCS7:pkcs7 parse 
error:.\crypto\pkcs7\pk7_mime.c:315:

Looking closer to the base64 block of the bailbody we found the last line 
missing
the CR of the regular CR/LF pair und instead having appended a dot.

If one strips the dot and feeds the block into openssl base64 decoding
it leads to a complente file of 4532 bytes. If the dot is being left the same
operatione leads to a shot file of 4515 bytes - some bytes too short
for the contained asn1 structure.

This is a great surbrise for two reasons:
- the dot doesn't belong to the base64 charset
- when the dot is being parsed the base64 block is already closed with the 
equal sign

Is this phenomenon or even a cure known?

Base64 block follows - any help greatly appreciated.

-- snipp --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.
-- snapp --

Thanks in advance
--
Christian Weber
mailto:[EMAIL PROTECTED]    Tel: 02361/91300
For information on InfoTech visit http://www.InfoTech.de/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to