Re: S-MIME Certification from CaCert.org
Guten Tag Thomas Fernandez, am Samstag, 10. Oktober 2009 um 04:42 schrieben Sie: How do I import a new root certificate into TB!? I communicate with people who sign all their message by S/Mime but I cannot verify the sigs. You need to watch the Details of the S/MIME Certificate, there you might find the Name of the Certification Authority (for me it is CaCERT). On the Website of the Authority you need to fetch the Root Certificate (.crt) - this you can import in the Adressbook under Certification Authorities beside Thawte for Example. -- Mit freundlichen Grüßen Jens Franik mailto:je...@gmx.de The Bat! 4.2.10.14 + AntiSpamSniper 3.2.1.5 + Gaijin XMP Makro Plugin 1.2 Language-File-Checksum: EC2C2E75 Windows XP 5.1 build 2600 Service Pack 2 AMD Athlon Dual Core 4850e 2,50 GHz, 4 GB RAM Debian Lenny + Windows XP @VirtualBox 3.0.8 r53138 non-OSE 8 POP3 Accounts - 1 IMAP - 170 (Common) Folders - about 10 Messages Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello Jens, On Sat, 10 Oct 2009 16:50:08 +0200 GMT (10/Oct/09, 21:50 PM +0700 GMT), Jens Franik wrote: How do I import a new root certificate into TB!? I communicate with people who sign all their message by S/Mime but I cannot verify the sigs. JF You need to watch the Details of the S/MIME Certificate, there you JF might find the Name of the Certification Authority (for me it is JF CaCERT). Thanks, I just checked that. The cert authority in the email I am referring to is called DOD EMAIL. JF On the Website of the Authority you need to fetch the Root JF Certificate (.crt) - this you can import in the Adressbook under JF Certification Authorities beside Thawte for Example. They don't seem to have it on their website. However, since I have imported the cert successfully into IE on my office computer, I will check on Monday whether I have a .crt file on that computer. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hi On Saturday 10 October 2009 at 3:42:12 AM, in mid:1809206101.20091010094...@thomas-bkk.my-fqdn.de, Thomas Fernandez wrote: I see. But S/Mime is internal capability? You have a choice of internal implementation or Microsoft CryptoAPI which is set at Options | S/MIME How do I import a new root certificate into TB!? I communicate with people who sign all their message by S/Mime but I cannot verify the sigs. I went to the organisdation's server, and they offer a .msi file, which actually works for Internet Explorer and the secure websites are now certified, so the cert apparently resides somewhere in an IE directory. No experience myself but maybe the solution given at reference 2.2 in the first post of http://ritlabs.com/en/forum/read.php?FID=4TID=7101MID=27073phrase_id=1629356#message27073 will help? I think you need to be using the internal implementation. -- Best regards MFPA If you save the world too often, it begins to expect it Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
On Saturday, October 10, 2009, 17:38:22, Thomas Fernandez wrote: They don't seem to have it on their website. However, since I have imported the cert successfully into IE on my office computer, I will check on Monday whether I have a .crt file on that computer. Even if you don't, you can export the certificate from IE - go to Certificates - Trusted root certification authorities, find the CA there and export it. -- Jernej Simončič http://eternallybored.org/ Where there's a will, there's a won't. -- Law of Inertia Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Guten Tag Thomas Fernandez, am Samstag, 10. Oktober 2009 um 17:38 schrieben Sie: The cert authority in the email I am referring to is called DOD EMAIL. Resources: Installing DoD Root Certificates from searching http://www.google.de/#q=dod+email+root+certificatebtnG=Google-Suchemeta=aq=foq=dod+email+root+certificate and watching http://www.dtic.mil/dtic/announcements/dodrootcertificates.html i found it should be found here, but the Site does not load for me: http://dodpki.c3pki.chamb.disa.mil/rootca.html but they say: For further assistance: DTIC Web site customers should contact r...@dtic.mil or (703) 767-8274. Maybe you should eMail r...@dtic.mil and tell them to guide you to the correct Website, where you can download the Root Certificate and see the Fingerprints, because you have to compare the Fingerprints to be sure this is the wanted Certificate. -- Mit freundlichen Grüßen Jens Franik mailto:je...@gmx.de The Bat! 4.2.10.14 + AntiSpamSniper 3.2.1.5 + Gaijin XMP Makro Plugin 1.2 Language-File-Checksum: EC2C2E75 Windows XP 5.1 build 2600 Service Pack 2 AMD Athlon Dual Core 4850e 2,50 GHz, 4 GB RAM Debian Lenny + Windows XP @VirtualBox 3.0.8 r53138 non-OSE 8 POP3 Accounts - 1 IMAP - 170 (Common) Folders - about 10 Messages Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello Jernej, On Sat, 10 Oct 2009 17:45:58 +0200 GMT (10/Oct/09, 22:45 PM +0700 GMT), Jernej Simončič wrote: They don't seem to have it on their website. However, since I have imported the cert successfully into IE on my office computer, I will check on Monday whether I have a .crt file on that computer. JS Even if you don't, you can export the certificate from IE - go to JS Certificates - Trusted root certification authorities, find the CA JS there and export it. Thanks, I'll try that on Monday. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello MFPA, On Sat, 10 Oct 2009 16:43:21 +0100 GMT (10/Oct/09, 22:43 PM +0700 GMT), MFPA wrote: I see. But S/Mime is internal capability? M You have a choice of internal implementation or Microsoft CryptoAPI M which is set at Options | S/MIME I never saw that before. What different does it make, and will it help to solve the problem? How do I import a new root certificate into TB!? I communicate with people who sign all their message by S/Mime but I cannot verify the sigs. I went to the organisdation's server, and they offer a .msi file, which actually works for Internet Explorer and the secure websites are now certified, so the cert apparently resides somewhere in an IE directory. M No experience myself but maybe the solution given at reference 2.2 in M the first post of M http://ritlabs.com/en/forum/read.php?FID=4TID=7101MID=27073phrase_id=1629356#message27073 M will help? I think you need to be using the internal implementation. Hey, this is a great link! I will try that on Monday. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hi On Saturday 10 October 2009 at 4:53:12 PM, in mid:1004758652.20091010175...@gmx.de, Jens Franik wrote: Resources: Installing DoD Root Certificates from searching http://www.google.de/#q=dod+email+root+certificatebtnG=Google-Suchemeta=aq=foq=dod+email+root+certificate and watching http://www.dtic.mil/dtic/announcements/dodrootcertificates.html i found it should be found here, but the Site does not load for me: http://dodpki.c3pki.chamb.disa.mil/rootca.html but they say: For further assistance: DTIC Web site customers should contact r...@dtic.mil or (703) 767-8274. Possibly try something like http://crl.disa.mil/getsign?DOD%20CA-21 I googled 'DOD EMAIL certificate' and selected the first result, which was an FAQ page on portal.navfac.navy.mil. Firefox gave me the certified by unknown authority dialogue box and I selected examine certificate and found the above link under details | certificate fields | certificate | extensions | authority information access -- Best regards MFPA War is a matter of vital importance to the State. Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello Jens, On Sat, 10 Oct 2009 17:53:12 +0200 GMT (10/Oct/09, 22:53 PM +0700 GMT), Jens Franik wrote: The cert authority in the email I am referring to is called DOD EMAIL. JF Resources: Installing DoD Root Certificates JF from searching JF http://www.google.de/#q=dod+email+root+certificatebtnG=Google-Suchemeta=aq=foq=dod+email+root+certificate JF and watching JF http://www.dtic.mil/dtic/announcements/dodrootcertificates.html JF i found it should be found here, but the Site does not load for me: JF http://dodpki.c3pki.chamb.disa.mil/rootca.html JF but they say: JF For further assistance: DTIC Web site customers should contact r...@dtic.mil or (703) 767-8274. Thanks for all this. Yes, I am in contact with dodpki. Believe me, the DOD has so many different departments with different approval procedures, that my request over here is a cry for help. They do offer suppport for Outlook and Thunderbird (and a few others), but TheBat! isn't in their standard list. JF Maybe you should eMail r...@dtic.mil and tell them to guide you to the JF correct Website, where you can download the Root Certificate and see JF the Fingerprints, because you have to compare the Fingerprints to be JF sure this is the wanted Certificate. I have never heared of DTIC but am not surprised there is just another unit again. I'll try that but don't expect a quick answer, with the long weekend coming up in the US. I'll also be in the 703 area code later this month, so there is hope this problem will be solved. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello MFPA, On Sat, 10 Oct 2009 17:15:44 +0100 GMT (10/Oct/09, 23:15 PM +0700 GMT), MFPA wrote: M Possibly try something like http://crl.disa.mil/getsign?DOD%20CA-21 M I googled 'DOD EMAIL certificate' and selected the first result, M which was an FAQ page on portal.navfac.navy.mil. Firefox gave me the M certified by unknown authority dialogue box and I selected examine M certificate and found the above link under details | certificate M fields | certificate | extensions | authority information access This is very useful, thank you. NAVFAC is actually my customer, so you are right on the spot. For those who don't know US Naval Facilities (Navfac): We have often heard about the US Army Corps of Engineers. However, in fact (and I don't really know whether I have to shoot you after telling you this), the world has been seperated between the Army and the Navy. Over here, it's the Navy that fixes things (dams, ports, you name it). In other parts of the world (like the continental US), the Army is in charge. That's all there is to it. Not very exciting (no shooting involved), but interesting from a logistics POV. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hi On Saturday 10 October 2009 at 5:40:59 PM, in mid:878417541.20091010234...@thomas-bkk.my-fqdn.de, Thomas Fernandez wrote: This is very useful, thank you. NAVFAC is actually my customer, so you are right on the spot. Completely by accident (-; -- Best regards MFPA When you're through changing, you're through Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Guten Tag Thomas Fernandez, am Samstag, 10. Oktober 2009 um 17:38 schrieben Sie: I will check on Monday whether I have a .crt file on that computer. Or you could export from the Browser. -- Mit freundlichen Grüßen Jens Franik mailto:je...@gmx.de The Bat! 4.2.10.14 + AntiSpamSniper 3.2.1.5 + Gaijin XMP Makro Plugin 1.2 Language-File-Checksum: EC2C2E75 Windows XP 5.1 build 2600 Service Pack 2 AMD Athlon Dual Core 4850e 2,50 GHz, 4 GB RAM Debian Lenny + Windows XP @VirtualBox 3.0.8 r53138 non-OSE 8 POP3 Accounts - 1 IMAP - 170 (Common) Folders - about 10 Messages Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Guten Tag Thomas Fernandez, am Samstag, 10. Oktober 2009 um 18:24 schrieben Sie: Believe me, the DOD has so many different departments with different approval procedures I saw, how much Zertifikates are in the ZIP File, which poorly is another .exe but you could list the certificates with Commandline Switches, maybe you find here, what you need (about 72 inside): Anlagen: 1) Certs.txt (3464 Byte, Textdatei) -- Mit freundlichen Grüßen Jens Franik mailto:je...@gmx.de The Bat! 4.2.10.14 + AntiSpamSniper 3.2.1.5 + Gaijin XMP Makro Plugin 1.2 Language-File-Checksum: EC2C2E75 Windows XP 5.1 build 2600 Service Pack 2 AMD Athlon Dual Core 4850e 2,50 GHz, 4 GB RAM Debian Lenny + Windows XP @VirtualBox 3.0.8 r53138 non-OSE 8 POP3 Accounts - 1 IMAP - 170 (Common) Folders - about 10 Messages DoD PKE InstallRoot v3.12A List File Certificates: Store SubjectIssuer Not After Status --- -- -- -- -- --- 1. ROOT DoD PKI Med Root CA 2. ROOT DoD CLASS 3 Root CA 3. ROOT DoD ROOT CA 2 4. ROOT DoD OCSP SS 5. ROOT ECA Root CA 6. ROOT ECA Root CA 7. ROOT ECA Root CA 2 8. CA Med CA-1 9. CA Med CA-2 10. CA DoD CLASS 3 CAC CA 11. CA DoD CLASS 3 CA-3 12. CA DoD CLASS 3 CA-4 13. CA DoD CLASS 3 CA-5 14. CA DoD CLASS 3 CA-6 15. CA DoD CLASS 3 CA-7 16. CA DoD CLASS 3 CA-8 17. CA DoD CLASS 3 CA-9 18. CA DoD CLASS 3 CA-10 19. CA DoD CA-11 20. CA DoD CA-12 21. CA DoD CA-13 22. CA DoD CA-14 23. CA DoD CA-15 24. CA DoD CA-16 25. CA DoD CA-17 26. CA DoD CA-18 27. CA DoD CA-19 28. CA DoD CA-20 29. CA Med Email CA-1 30. CA Med Email CA-2 31. CA DoD CLASS 3 CAC EMAIL CA 32. CA DoD CLASS 3 EMAIL CA-3 33. CA DoD CLASS 3 EMAIL CA-4 34. CA DoD CLASS 3 EMAIL CA-5 35. CA DoD CLASS 3 EMAIL CA-6 36. CA DoD CLASS 3 EMAIL CA-7 37. CA DoD CLASS 3 EMAIL CA-8 38. CA DoD CLASS 3 EMAIL CA-9 39. CA DoD CLASS 3 EMAIL CA-10 40. CA DoD EMAIL CA-11 41. CA DoD EMAIL CA-12 42. CA DoD EMAIL CA-13 43. CA DoD EMAIL CA-14 44. CA DoD EMAIL CA-15 45. CA DoD EMAIL CA-16 46. CA DoD EMAIL CA-17 47. CA DoD EMAIL CA-18 48. CA DoD EMAIL CA-19 49. CA DoD EMAIL CA-20 50. CA DoD Intermediate CA-1 51. CA ORC ECA 52. CA ORC ECA 53. CA ORC ECA 54. CA ORC ECA 2 55. CA ORC ECA FN 56. CA IdenTrust ECA 1 57. CA VeriSign Client External Certi 58. CA VeriSign Client External Certi 59. CA VeriSign Client External Certi 60. CA DoD Intermediate CA-1 61. CA DoD Intermediate CA-2 62. CA ORC ECA SW 3 63. CA ORC ECA HW 3 64. CA IdenTrust ECA 2 65. CA VeriSign Client External Certi 66. CA DOD CA-21 67. CA DOD CA-22 68. CA DOD CA-23 69. CA DOD CA-24 70. CA DOD EMAIL CA-21 71. CA DOD EMAIL CA-22 72. CA DOD EMAIL CA-23 73. CA DOD EMAIL CA-24 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Tracing filteractivity
Hello Dan, Monday, October 5, 2009, 12:57:54 PM, you wrote: DP Hello Gene, DP Monday, October 5, 2009, 6:40:41 AM, you wrote: Hello TBUDL, I seem to remember, from a long time ago, some method to trace how a particular email was routed by filters. I have a problem in filtering that I haven't been able to trace and this feature (if I remember correctly) would be useful DP If you look at the accountlog for the respective account, it will DP show which rule was triggered (if any) for all emails. If it is a DP high-traffic account, you can use the Ctrl+F 'Find' in the account DP log to search for the particular subjectline or sender. DP Hope this helps Thanks! I think that is putting me on the road to success! -- Best regards, Genemailto:ewkea...@triad.rr.com --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 091009-0, 10/09/2009 Tested on: 10/10/2009 5:37:59 PM avast! - copyright (c) 1988-2009 ALWIL Software. http://www.avast.com Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: S-MIME Certification from CaCert.org
Hello Jens, On Sat, 10 Oct 2009 19:46:59 +0200 GMT (11/Oct/09, 0:46 AM +0700 GMT), Jens Franik wrote: Believe me, the DOD has so many different departments with different approval procedures JF I saw, how much Zertifikates are in the ZIP File, which poorly is JF another .exe but you could list the certificates with Commandline JF Switches, maybe you find here, what you need (about 72 inside): JF Anlagen: JF1) Certs.txt (3464 Byte, Textdatei) Where did you get this list from? Where can I download the .exe to import these certs into TB!? -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.10.6 under Windows XP 5.1 Build 2600 Service Pack 3 Current version is 4.2.10.0 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
