Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Nextcloud mail 3.5.0 generates invalid smime signature #9190

Closed
gvansanden opened this issue Dec 21, 2023 · 3 comments · Fixed by #9677
Closed

Nextcloud mail 3.5.0 generates invalid smime signature #9190

gvansanden opened this issue Dec 21, 2023 · 3 comments · Fixed by #9677
Assignees
@st3iny
Labels
0. to triage bug feature:smime For all tasks related to S/MIME regression

Comments

@gvansanden
Copy link

Steps to reproduce

  1. Set up a mailaccount and add a certificate
  2. Send a mail (to self) and smime sign it
  3. Look at the mail in the app AND external apps like Thunderbird

Expected behavior

The signature should be valid

Actual behavior

The mail is signed with the correct key/cert but the signature is invalid

Mail app version

3.5.0

Mailserver or service

Dovecot

Operating system

Ubuntu 22.04

PHP engine version

PHP 8.1

Web server

Apache (supported)

Database

PostgreSQL

Additional info

No response
@ChristophWurst ChristophWurst moved this to 📄 To do (~10 entries) in 💌 📅 👥 Groupware team Dec 21, 2023
@joshtrichards
Copy link
Member

Same as #9178?

@ChristophWurst
Copy link
Member

#9178 seems to be about received emails, this ticket is about sent ones.

@joshtrichards joshtrichards added the feature:smime For all tasks related to S/MIME label Jan 24, 2024
@gvansanden

This comment was marked as duplicate.

Sign in to view
IchbinkeinReh added a commit to IchbinkeinReh/mail that referenced this issue May 23, 2024
@IchbinkeinReh
Upload whole certificate chain when uploading a certificate for S/MIM…
7bbe53b 
…E in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes nextcloud#9190

Signed-off-by: Patrick Bender <[email protected]>
@IchbinkeinReh IchbinkeinReh mentioned this issue May 23, 2024
Closed
IchbinkeinReh added a commit to IchbinkeinReh/mail that referenced this issue May 23, 2024
@IchbinkeinReh
Upload whole certificate chain when uploading a certificate for S/MIM…
4e55fff 
…E in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes nextcloud#9190

Signed-off-by: Patrick Bender <[email protected]>
st3iny pushed a commit to IchbinkeinReh/mail that referenced this issue May 28, 2024
@IchbinkeinReh @st3iny
feat: Upload whole certificate chain when uploading a certificate for…
bcc2530 
… S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes nextcloud#9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
st3iny pushed a commit to IchbinkeinReh/mail that referenced this issue May 28, 2024
@IchbinkeinReh @st3iny
fix: Upload whole certificate chain when uploading a certificate for …
642ba9e 
…S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes nextcloud#9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
st3iny pushed a commit to IchbinkeinReh/mail that referenced this issue May 28, 2024
@IchbinkeinReh @st3iny
fix: Upload whole certificate chain when uploading a certificate for …
d2533fd 
…S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes nextcloud#9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
st3iny pushed a commit that referenced this issue May 28, 2024
@IchbinkeinReh @st3iny
fix(smime): use whole certificate chain
c6e28fd 
Upload whole certificate chain when uploading a certificate for S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes #9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
@st3iny st3iny mentioned this issue May 28, 2024
Merged
@github-project-automation github-project-automation bot moved this from 📄 To do to ☑️ Done in 💌 📅 👥 Groupware team May 28, 2024
backportbot bot pushed a commit that referenced this issue May 28, 2024
@IchbinkeinReh @backportbot
fix(smime): use whole certificate chain
714ba67 
Upload whole certificate chain when uploading a certificate for S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes #9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
backportbot bot pushed a commit that referenced this issue May 28, 2024
@IchbinkeinReh @backportbot
fix(smime): use whole certificate chain
95cc454 
Upload whole certificate chain when uploading a certificate for S/MIME in pkcs12 format. Include whole certificate chain in signed messages. Use whole certificate chain to verify certificates.

Fixes #9190

Signed-off-by: Patrick Bender <[email protected]>
Signed-off-by: Richard Steinmetz <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@st3iny st3iny

Labels
0. to triage bug feature:smime For all tasks related to S/MIME regression
Projects
💌 📅 👥 Groupware team
Archived in project
Milestone
No milestone
4 participants
@ChristophWurst @st3iny @joshtrichards @gvansanden