[imp] signer's certificate could not be verified

[Paul Bentley]

From: "Jan Schneider" <jan at horde.org>
To: <imp at lists.horde.org>
Sent: Thursday, September 27, 2012 5:29 AM
Subject: Re: [imp] signer's certificate could not be verified


> Keep discussions on the list, and please don't top-post.
>
> Zitat von Paul Bentley <paulduncanbentley at gmail.com>:
>
>> ----- Original Message ----- From: "Jan Schneider" <jan at horde.org>
>> To: <imp at lists.horde.org>
>> Sent: Thursday, September 27, 2012 4:30 AM
>> Subject: Re: [imp] signer's certificate could not be verified
>>
>>
>>>
>>> Zitat von Paul Bentley <paulduncanbentley at gmail.com>:
>>>
>>>> Hi,
>>>>
>>>> I am trying to set up Horde so that users can send emails with   S/MIME 
>>>> and the recipients will receive a validated certificate   message with 
>>>> the email. With both sender and recipient having each  other's public 
>>>> keys, I still keep getting the message,
>>>>
>>>> "Message Verified Successfully but the signer's certificate could   not 
>>>> be verified."
>>>>
>>>> I have the signer's certificate (signed by another certificate,   which 
>>>> is self-signed) installed on the server, and the website's  ip  address 
>>>> is using the signer's certificate as it's SSL  Certificate.  But it 
>>>> still doesn't work.
>>>>
>>>> How do I go about setting it up so that above the warning is not given?
>>>>
>>>> Paul Bentley
>>>
>>> You need to install the cert that signed the signer's certificate  too. 
>>> And you need to point Horde to the correct certification store.
>> The cert that signed the signer's cert is a self-signed cert. If I 
>> install this self-signed cert, will Horde recognize it as valid?
>
> This has nothing to do with Horde, this is about openssl.
>
>> (Note, this setup is for internal use, and will not be needed to 
>> validate for unknown users)
>>
>> Also, how do I point Horde to the correct information store? Is it  in 
>> the Horde conf.php file?
>
> Yes, but use the configuration interface.
>
> -- 
> Jan Schneider
> The Horde Project
> http://www.horde.org/
>
>
------------------------------------

I still can't get it to work without the warning message "Message Verified 
Successfully but the signer's certificate could not be verified".

I pasted the complete certificate for the CA into ca-bundle.crt and pointed 
the Horde conf.php file to the ca-bundle.crt file with the following:

$conf['utils']['openssl_cafile']

Then I rebooted the server, but it still doesn't work properly. Do you have 
any other suggestions?

Paul Bentley
----- Original Message -----