[dev] S/MIME verification

[Jan Schneider]

Zitat von Cliff Green <green@UMDNJ.EDU>:

> Quoting Jan Schneider <jan@horde.org>:
> 
> > I just looked back at the archives but couldn't find any useful hint.
> > Did anyone ever succeed in verifying an s/mime signed message?
> 
> Yes.
> 
> > Verification of the message itself does actually work, but the senders
> cert
> > can never be verified.
> >
> > I tried to put my openssl distribution's certs directory as well as
> > mod_ssl's ca-bundle.crt file into $conf['utils']['openssl_cafile'].
> 
> I currently only have:
>  $conf['utils']['openssl_cafile'] = '/usr/share/ssl/certs/';  (though
> usually I
> install ssl in /usr/local/ssl and therefore the certs in
> /usr/local/ssl/certs -
> YMMV).
> 
> I've stored all of the certs I care to check against in pem format, and
> have
> hashed the files in that directory with c_hash (if you have c_rehash,
> it'll do
> the whole directory for you).

That's what I have, besides that my certs (pem and hashed) are in
/etc/ssl/certs/. It still doesn't work. Can you verify the cert your own
message? I couldn't.

Jan.

--
http://www.horde.org - The Horde Project
http://www.ammma.de - discover your knowledge
http://www.tip4all.de - Deine private Tippgemeinschaft