Koozali.org: home of the SME Server

verify sender in email using s/mime signing

interprb

verify sender in email using s/mime signing
« on: May 26, 2007, 12:03:48 AM »
Hi All,

Can anyone tell me where webmail looks to check valid signatures in s/mime  signing? (browsers have all certs in right place) Works great in thunderbird and oe. It wont verify in webmail. Server is set to our certs (thanks slord for the contrib) ???

thanks
hmb

interprb

verify sender in email using s/mime signing
« Reply #1 on: May 26, 2007, 04:29:56 AM »
Still trying .I get this error:Message Verified Successfully but the signer's certificate could not be verified.

The CA is in the cert store of browser. Isn't that where it looks?  Does the ca sign key belong on the sme server somewhere?

interprb

verify sender in email using s/mime signing
« Reply #2 on: May 27, 2007, 12:20:27 AM »
Another day, and still no luck.. :(  I gave this some thought. Please tell me if I am on the right track.
The created user cert, signed by a ca like cacert inherits trust because the ca cert is in the ca cert store in my browser. Also my pub and private key are installed in the browser as well a other users pub key which have been signed by the same ca cert sign key.  I have no errors or mismatch when going to https://sitename and all works as it should.
When I imported my pub and private key in webmail it seemed to work and showed up in the right place. I used pkcs#12 w/ cert chain.I also tried witout chain and got same results.
I searched forum and found imapd.pem info but it was our cert. I thought it might authenticate off of it but even if did the same ca cert should pass the trust on to any  other cert that was signed by that  ca. That is why I asked where does web mail look to verify the signature validity of the sender. Shouldn't it be in the browsers cert store? Does web mail require a cert to be placed in a certain folder to verify the sender?
I really like these features and need some help to make it work.
SME  is a very fine product and I hope to get it all working soon.

Thanks in advance for any help!
HMB