[Tickets #6323] Re: False positive SMIME verification

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=6323
-----------------------------------------------------------------------
 Ticket             | 6323
 Updated By         | Jan Schneider <jan at horde.org>
 Summary            | False positive SMIME verification
 Queue              | Horde Framework Packages
 Version            | FRAMEWORK_3
 Type               | Bug
-State              | Unconfirmed
+State              | Feedback
-Priority           | 3. High
+Priority           | 2. Medium
 Milestone          | 
 Patch              | 
 Owners             | 
-----------------------------------------------------------------------


Jan Schneider <jan at horde.org> (2008-02-26 16:22) wrote:

> Why do you consider -1 a valid verification ???

Because, if the signature was really invalid, it would have returned
false. The commit message that allowed -1 as a valid return, says:
"openssl_pkcs7_verify returns -1 when the signature is ok but there are no
certificates to return."