Hi, i am running in another issue with astaro 7.507 and microsoft mail products.
I know the encryption changes in outlook 2010. This is not the problem.
encrypted -> works
signed -> works
encrypted and signed -> broken
(S/MIME: WARNING - Encrypted, but cannot verify signature)
Is anybody use this configuration:
S/MIME Encryption with signing MS Products and Astaro Encryption
Thank you
[emailenc] SMIME | processing inbound message ----------------------------------
[emailenc] SMIME | Infile: spool/work/1OqPic-0004p4-1f.eml
[emailenc] SMIME | Outfile: spool/work/131o41-0004p4-1f.eml
[emailenc] SMIME | Verify: 1
[emailenc] SMIME | Decrypt: 1
[emailenc] SMIME | Cert Import: 1
[emailenc] SMIME | Sender FP: 5DC08B2430B473EC0F32C0930CD5185580A18715
[emailenc] SMIME | Recipient FP: 3362579CF28826DDBBBE2431B72FC8025146D21B
[emailenc] SMIME | Calling OpenSSL for decryption ------------ [emailenc] SMIME | Decrypt successful [emailenc] SMIME | Calling OpenSSL pkcs7 extraction ---------- [emailenc] SMIME | Got pkcs7 container [emailenc] SMIME | Calling OpenSSL pkcs7 cert dump ----------- [emailenc] SMIME | Calling OpenSSL for verification ---------- [emailenc] SMIME | Have explicit cert Verification failure
18557:error:21075075[[:P]]KCS7 routines[[:P]]KCS7_verify:certificate verify error[:P]k7_smime.c:231:Verify error:unable to get issuer certificate [emailenc] SMIME | Bad or unverifyable signature [emailenc] SMIME | Finished, linking/writing outfile.
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] This is an individual scan run
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] AV: CSSD status 'clean' (cached from Exim)
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] AV: calling CLAMD
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] AV: CLAMD status 'clean'
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] AS: status '' (cached from Exim)
2010-08-31 14:13:50 SCANNER[18552]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="65.54.51.88" from="***@***.***" to="m.mueller@sommer-hof.de" subject="AW: test2" queueid="131o41-0004p4-1f" size="21971"
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] generating Exim spool files from spool/tmp/131o41-0004p4-1f.eml
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] moved to spool/output/0/input/
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f [131o41-0004p4-1f] Forking delivery process
2010-08-31 14:13:50 SCANNER[18552]: 1OqPic-0004p4-1f Finished work
2010-08-31 14:13:50 SCANNER[18552]: 1 deliveries running
2010-08-31 14:13:50 SCANNER[18552]: 0 deliveries running
2010-08-31 14:13:52 QMGR[18532]: MSGLOG 2010-08-31 14:13:50 m.mueller@sommer-hof.de: static_smtp transport succeeded to ***.xx.xx.*** (***.xx.xx.***)
2010-08-31 14:13:52 QMGR[18532]: 131o41-0004p4-1f delivered - added to msglog table
2010-08-31 14:14:00 MASTER[18529]: 0 messages in work queue, 1 scanners are running
2010-08-31 14:14:00 MASTER[18529]: 9 messages in output queue with age >2 minutes, running additional queue runner (max. 5)
2010-08-31 14:14:00 CERT_IMPORT[18567]: Starting up
2010-08-31 14:14:00 CERT_IMPORT[18567]: considering TDB6FURWPC_18408.pem for CA import
2010-08-31 14:14:00 CERT_IMPORT[18567]: Certificate purposes:
2010-08-31 14:14:00 CERT_IMPORT[18567]: SSL client : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: SSL client CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: SSL server : No
2010-08-31 14:14:00 CERT_IMPORT[18567]: SSL server CA : No
2010-08-31 14:14:00 CERT_IMPORT[18567]: Netscape SSL server : No
2010-08-31 14:14:00 CERT_IMPORT[18567]: Netscape SSL server CA : No
2010-08-31 14:14:00 CERT_IMPORT[18567]: S/MIME signing : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: S/MIME signing CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: S/MIME encryption : No
2010-08-31 14:14:00 CERT_IMPORT[18567]: S/MIME encryption CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: CRL signing : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: CRL signing CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: Any Purpose : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: Any Purpose CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: OCSP helper : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: OCSP helper CA : Yes
2010-08-31 14:14:00 CERT_IMPORT[18567]: Importing TDB6FURWPC_18408.pem as S/MIME CA certificate
2010-08-31 14:14:01 CERT_IMPORT[18567]: considering OGQHDXT1WI_18408.pem for CA import
2010-08-31 14:14:01 CERT_IMPORT[18567]: Certificate purposes:
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: considering 4YSUG8CCX5_18552.pem for CA import
2010-08-31 14:14:01 CERT_IMPORT[18567]: Certificate purposes:
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: Importing 4YSUG8CCX5_18552.pem as S/MIME CA certificate
2010-08-31 14:14:01 CERT_IMPORT[18567]: considering J04G9UXZ8A_18552.pem for CA import
2010-08-31 14:14:01 CERT_IMPORT[18567]: Certificate purposes:
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL client CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Netscape SSL server CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME signing CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: S/MIME encryption CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: CRL signing CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: Any Purpose CA : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper : Yes
2010-08-31 14:14:01 CERT_IMPORT[18567]: OCSP helper CA : No
2010-08-31 14:14:01 CERT_IMPORT[18567]: considering OGQHDXT1WI_18408.pem for cert import
2010-08-31 14:14:01 CERT_IMPORT[18567]: smime/import/OGQHDXT1WI_18408.pem: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=www.usertrust.com/CN=UTN-USERFirst-Client Authentication and Email
2010-08-31 14:14:01 CERT_IMPORT[18567]: considering J04G9UXZ8A_18552.pem for cert import
2010-08-31 14:14:01 CERT_IMPORT[18567]: smime/import/J04G9UXZ8A_18552.pem: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=www.usertrust.com/CN=UTN-USERFirst-Client Authentication and Email
2010-08-31 14:14:01 CERT_IMPORT[18567]: Finished, exiting
2010-08-31 14:14:10 MASTER[18529]: 0 messages in work queue, 1 scanners are running
2010-08-31 14:14:19 SCANNER[18552]: Nothing to do, exiting.
2010-08-31 14:14:20 MASTER[18529]: scanner 18552 terminated.
2010-08-31 14:14:20 MASTER[18529]: 0 messages in work queue, 0 scanners are running
This thread was automatically locked due to age.
