Re: S/MIME decryption error

Jan Schneider <[email protected]>
Newsgroups gmane.comp.horde.imp
Message-ID <[email protected]>
Please don't top-post.

> On 20-Jan-16 3:30 AM, Jan Schneider wrote:
>>
>> Zitat von D. Milanovic <[email protected]>:
>>
>>> Hello,
>>>
>>> I am unable to successfully decrypt S/MIME signed/encrypted message in
>>> Horde. Sending is OK and message can be read in Thunderbird without
>>> problems. However, error message "Could not decrypt S/MIME data." is
>>> displayed when trying to read same message in Sent folder. Same error is
>>> displayed for all incoming encrypted messages.
>>> All certificates (personal and public) are imported without any errors.
>>>
>>> No error messages in PHP or Horde log.
>>> Horde version is 5.2.11, Imp version 6.2.11
>>
>> openssl_pkcs7_decrypt() which we use internally doesn't return a more
>> detailed error message if decryption failed. It raises a PHP warning
>> with some more information though, so you should see this in your
>> PHP/Horde logs if your error_reporting level is sufficiently high.
>>
Zitat von D. Milanovic <[email protected]>:

> Enabling debug did not help, so I had to dig inside a source around
> openssl_pkcs7_decrypt() function. All keys are OK, however input file
> passed to this function contains only mime data without headers, unlike
> specs http://php.net/manual/en/function.openssl-pkcs7-decrypt.php
>
> "If you want to decrypt a received email, keep in mind that you need the
> full encrypted message including the mime header."
>
> I've verified this by executing simple function from the command line.
> When input file contains full message source, function succeeds, if not
> decrypt will fail.

Cannot reproduce. openssl_pkcs7_decrypt() is fed with the complete  
message including headers here.

-- 
Jan Schneider
The Horde Project
http://www.horde.org/

-- 
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.