Hi.
I'll bring it all together here, in the meantime i have subscribed
my poor I to Ubuntu, too...

Sven Neuhaus <sven-launch...@sven.de> wrote:
 |I added these two lines to the .mailrc file on both machines:
 |
 |set mime-cipher=aes256
 |set mime-sign-message-digest=sha512

Yes, sorry, that was a typo, it is smime-xy.

 |Also I replaced the content type, as suggested.
 |
 |The problem remains.

and

 |I tried both your suggestions:
 |
 |a) change the content type back to application/x-pkcs7-mime
 |b) add "set mime-cipher=aes256" and
 |   "set mime-sign-message-digest=sha512"
 |   directives to the .mailrc
 |
 |The issue remains: I can decrypt the mails sent via heirloom-mailx but
 |not those from s-nail.

That seems to be a very tough problem, then.  ^.^

 |Are there any command line tools that let you analyze the smime.p7m
 |attachment?

..and..

 |I had a quick look at cc-test.sh.
 |
 |The S/MIME test seems to be: encrypt an email with s-nail and decrypt it
 |with s-nail and check if they are identical.
 |
 |That does not check a lot.
 |
 |Are there any other command line tools to analyze S/MIME mails?

That is quite funny, indeed yesterday evening i thought about
extending the test and adding calls to openssl itself, i.e., the
command line application.  We don't do much, Gunnar Ritter, the
original author, practically followed 1:1 the popular book on
OpenSSL programming ("Network Security with OpenSSL", Pravir
Chandra, Matt Messier, John Viega, O'Reilly, ISBN 0-596-00270-X).

But you will find that using the command line application just
works fine on S/MIME mails generated by S-nail, e.g.,

  < ENCRYPTED-FILE
  openssl smime -decrypt -inkey tkey.pem |
  openssl smime -verify -CAfile TRUSTED-FILE-STORE

But i have extended the test and credited you for that:

https://git.sdaoden.eu/cgit/s-nail.git/commit/?id=7a657d9c3392049f52a04a33397c94fd3cc8f4a8

Ciao,

--steffen

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1640190

Title:
  S/MIME encryption broken

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/s-nail/+bug/1640190/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to