On Mon, Aug 27, 2012, GWu wrote: > On Mon, Aug 27, 2012 at 9:27 PM, Dr. Stephen Henson wrote: > > On Mon, Aug 27, 2012, GWu wrote: > >> [...] > >> openssl smime -inform SMIME -CAfile all.pem -verify -in mail.eml > >> which gives an error: > >> [...] > > > > It sounds like the signature is malformed. That wouldn't cause problems with > > asn1parse but would when OpenSSL tried to verify it. > > > > I'd need to see the email to be sure though. > > The email is available at > http://www.buergerkarte.at/mvnforum/mvnforum/viewthread_thread,272#1180 > (German language forum, but the email - or it's significant parts > respectively - is easily visble). >
Well I'm not surprised Thunderbird and OpenSSL has problems with that. The signature is malformed. It should contain the digest enclosed in an ASN1 structure called DigestInfo but it isn't: it just contains the raw digest. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
