[Tickets #10947] Can't verify signed and encrypted S/MIME message

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10947
------------------------------------------------------------------------------
  Ticket             | 10947
  Created By         | maciej.uhlig at us.edu.pl
  Summary            | Can't verify signed and encrypted S/MIME message
  Queue              | Horde Groupware Webmail Edition
  Version            | 4.0.6
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


maciej.uhlig at us.edu.pl (2012-01-31 10:16) wrote:

The signature of signed and encrypted S/MIME message (for instance  
sent by Horde/Imp) can not be verified. You get the following result:

S/MIME Encrypted Message
The data in this part has been encrypted via S/MIME.
Signed part
The data in this part has been digitally signed via S/MIME.
Verification failed - this message may have been tampered with.
Text part
Message

The reason of this behaviour is: \pear\php\Horde\Crypt\Smime.php  
public function verify($text, $certs) is called with $text being raw  
encrypted message and thus can't be verified. The message should be  
decrypted before trying to verify signature.