[dev] lost large attachments with S/MIME signed Mails

Michael Menge michael.menge at zdv.uni-tuebingen.de
Wed Sep 17 14:31:18 UTC 2008


Hi,

as my colleague did not got any answer on her e-mail from 05. Sep.  
2008 on    	horde at lists.horde.org I will describe the problem here  
with more informations.

tested with

horde-3.2   / imp-h3-4.2
horde-3.2.1 / imp-h3-4.2.1-rc1

1. the passphrase of the private smime key is unloaded (not entered  
after login)
2. compose a new message with an large attachment ( >3MB ) and choose the
    Encryption Options: S/MIME Sign Message
3. Update the Compose window
4. send message / enter passphrase in popup

the e-Mail is send signed, but without the attachment.
If the passphrase is known to horde/imp or the attachment is small the mail
is send signed with attachment. This bug does not ocure in our  
production system running horde-3.1.9 / imp-h3-4.1.4

We did not analyze the smallest attachment size which will trigger this bug,
or what other options may have an influence on the size.

Can anybody reproduce the bug? Which other information do you
need to debug this?

Thanks in advance

Regards

      Michael Menge


--------------------------------------------------------------------------------
M.Menge                                 Tel.: (49) 7071/29-70316
Universitaet Tuebingen                  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung          mail:  
michael.menge at zdv.uni-tuebingen.de
Waechterstrasse 76
72074 Tuebingen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5339 bytes
Desc: S/MIME krytographische Unterschrift
URL: <http://lists.horde.org/archives/dev/attachments/20080917/b63528bb/attachment.bin>


More information about the dev mailing list