Re: Problem displaying S/MIME certificate
Philipp Faeustlin <[email protected]> Mon, 26 Mar 2018 12:17:59 +0200
| Newsgroups | gmane.comp.horde.turba |
|---|---|
| Message-ID | <[email protected]> |
This is a cryptographically signed message in MIME format. --===============0554818489880998826== Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010501060502040609080406" This is a cryptographically signed message in MIME format. --------------ms010501060502040609080406 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable Am 22.03.2018 um 16:22 schrieb Jan Schneider: >=20 > Zitat von Philipp Faeustlin <[email protected]>: >=20 >> I'm using the latest horde version 5.2.22 from pear with Turba 4.2.21.= >> >> Displaying an S/MIME Public Certificate out of an ldap directory works= =20 >> in most cases, but not for all ldap entries. >> >> For some entries I get the following error: >> >> S/MIME Public Certificate:=C2=A0=C2=A0=C2=A0=C2=A0 Error parsing S/MIM= E certficate:=20 >> error:0D07209B:asn1 encoding routines:ASN1_get_object:too long >> >> I traced the error down to the function "toTurbaKeys" in=20 >> "./turba/lib/Driver.php" >> >> I think this function does the mapping between ldap and turba=20 >> attributes. In this function there is a "trim" function that's=20 >> trimming my SMIME certificate. This seems to be the issue. >> >> In most cases this is not a problem, but the value of the SMIME=20 >> certificate ends with "<C1>P<E3>^HJ\\<E1><99>}ek^M", where trim seems = >> to cut off "^M" resulting in an incomplete and invalid certificate. >> >> Would it be possible not to trim every value? >=20 > Doing some code archaeology, I found that I explicitly added this trim(= )=20 > myself 10 years ago. So there must be a reason for it. :) > I'm afraid it's not that simple. >=20 Coding is never simple and I appreciate your work. But is the 10 years old reason still relevant? I don't know when the hook system was implemented, but I didn't expect=20 that the data from the backends would be altered before it reaches the=20 hook, which is designed for doing such operations. It took me quite some time find this, because I first thought there is a = problem with my hook or the original data from the backend. At least I think this trim function should be mentioned in the hooks=20 documentation, so that it is clear, that the data arriving at the hook=20 might already be trimmed. --=20 Philipp F=C3=A4ustlin --------------ms010501060502040609080406 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC ED0wggTVMIIDvaADAgECAghQTsb1PRG0ZDANBgkqhkiG9w0BAQsFADBxMQswCQYDVQQGEwJE RTEcMBoGA1UEChMTRGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0GA1UECxMWVC1UZWxlU2VjIFRy dXN0IENlbnRlcjEjMCEGA1UEAxMaRGV1dHNjaGUgVGVsZWtvbSBSb290IENBIDIwHhcNMTQw NzIyMTIwODI2WhcNMTkwNzA5MjM1OTAwWjBaMQswCQYDVQQGEwJERTETMBEGA1UEChMKREZO LVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEkMCIGA1UEAxMbREZOLVZlcmVpbiBQQ0EgR2xv YmFsIC0gRzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZvDZ4X5Da71jVTD llA1PWLpbkztlNcAW5UidNQg6zSP1uzAMQQLmYHiphTSUqAoI4SLdIkEXlvg4njBeMsWyyg1 OXstkEXQ7aAAeny/Sg4bAMOG6VwrMRF7DPOCJEOMHDiLamgAmu7cT3ir0sYTm3at7t4m6O8B r3QPwQmi9mvOvdPNFDBP9eXjpMhim4IaAycwDQJlYE3t0QkjKpY1WCfTdsZxtpAdxO3/NYZ9 bzOz2w/FEcKKg6GUXUFr2NIQ9Uz9ylGs2b3vkoO72uuLFlZWQ8/h1RM9ph8nMM1JVNvJEzSa cXXFbOqnC5j5IZ0nrz6jOTlIaoytyZn7wxLyvQIDAQABo4IBhjCCAYIwDgYDVR0PAQH/BAQD AgEGMB0GA1UdDgQWBBRJt8bP6D0ff+pEexMp9/EKcD7eZDAfBgNVHSMEGDAWgBQxw3kbuvVT 1xfgiXotF2wKsyudMzASBgNVHRMBAf8ECDAGAQH/AgECMGIGA1UdIARbMFkwEQYPKwYBBAGB rSGCLAEBBAICMBEGDysGAQQBga0hgiwBAQQDADARBg8rBgEEAYGtIYIsAQEEAwEwDwYNKwYB BAGBrSGCLAEBBDANBgsrBgEEAYGtIYIsHjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vcGtp MDMzNi50ZWxlc2VjLmRlL3JsL0RUX1JPT1RfQ0FfMi5jcmwweAYIKwYBBQUHAQEEbDBqMCwG CCsGAQUFBzABhiBodHRwOi8vb2NzcDAzMzYudGVsZXNlYy5kZS9vY3NwcjA6BggrBgEFBQcw AoYuaHR0cDovL3BraTAzMzYudGVsZXNlYy5kZS9jcnQvRFRfUk9PVF9DQV8yLmNlcjANBgkq hkiG9w0BAQsFAAOCAQEAYyAo/ZwhhnK+OUZZOTIlvKkBmw3Myn1BnIZtCm4ssxNZdbEzkhth Jxb/w7LVNYL7hCoBSb1mu2YvssIGXW4/buMBWlvKQ2NclbbhMacf1QdfTeZlgk4y+cN8ekvN TVx07iHydQLsUj7SyWrTkCNuSWc1vn9NVqTszC/Pt6GXqHI+ybxA1lqkCD3WvILDt7cyjrEs jmpttzUCGc/1OURYY6ckABCwu/xOr24vOLulV0k/2G5QbyyXltwdRpplic+uzPLl2Z9Tsz6h L5Kp2AvGhB8Exuse6J99tXulAvEkxSRjETTMWpMgKnmIOiVCkKllO3yG0xIVIyn8LNrMOVtU FzCCBYswggRzoAMCAQICBxev9pIBtpIwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCREUx EzARBgNVBAoTCkRGTi1WZXJlaW4xEDAOBgNVBAsTB0RGTi1QS0kxJDAiBgNVBAMTG0RGTi1W ZXJlaW4gUENBIEdsb2JhbCAtIEcwMTAeFw0xNDA2MDUxNDA0NTBaFw0xOTA3MDkyMzU5MDBa MIGpMQswCQYDVQQGEwJERTEbMBkGA1UECBMSQmFkZW4tV3VlcnR0ZW1iZXJnMRIwEAYDVQQH EwlTdHV0dGdhcnQxHzAdBgNVBAoTFlVuaXZlcnNpdGFldCBIb2hlbmhlaW0xIDAeBgNVBAMT F1VuaS4gSG9oZW5oZWltIENBIC0gRzAxMSYwJAYJKoZIhvcNAQkBFhdyei1wa2lAdW5pLWhv aGVuaGVpbS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQ3KxyFEtrl84PZ f36LXJqdGZTocvpjk5BEOHkdDdvMYXr6/9GdSGJkeColDvqerAyBNethLOkobYvkUtO942SI Ca4NE1QW9I7Sj6WkJ6/tbbC/yDOj+1FwBos88vtKOJrW3QuNi+U+Df/IQvAVLJW+i5HqWD8w Xx0TWZE9VHhQvlFVNXWA6LDpScDONIZBfw3DrO7PX/DLDUfY7xp2yimXn9BVPYaxSLrNpRGk TIn65IxHPpEUFRvb220BY8l00uicOhC7xaBF2sw4ILYyDKefbU77lMH12ZDU0mZhQ6GsWs43 LwH0oNYnhU7cmxL6ej7/YpKUqSkzKceod/y3hKkCAwEAAaOCAgQwggIAMBIGA1UdEwEB/wQI MAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMBEGA1UdIAQKMAgwBgYEVR0gADAdBgNVHQ4EFgQU JbV5duaENMVQY5xBIQFE/v0Pm/EwHwYDVR0jBBgwFoAUSbfGz+g9H3/qRHsTKffxCnA+3mQw IgYDVR0RBBswGYEXcnotcGtpQHVuaS1ob2hlbmhlaW0uZGUwgYgGA1UdHwSBgDB+MD2gO6A5 hjdodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jcmwvY2Fjcmwu Y3JsMD2gO6A5hjdodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9j cmwvY2FjcmwuY3JsMIHXBggrBgEFBQcBAQSByjCBxzAzBggrBgEFBQcwAYYnaHR0cDovL29j c3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEcGCCsGAQUFBzAChjtodHRwOi8vY2Rw MS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBHBggr BgEFBQcwAoY7aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY2Fj ZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQELBQADggEBAMid+kBwadqJKeVX2pyL8q9Dsvrt spb1Jhp19QouKsHeg0xRUGtyvpqkS5h0yQnXgVbLCEDOip0pnYqopuluFpoZFn+ExYpr+EFG WFX4m9rcPGjdoR3hAmSo3k2OW0/7llA6luI/meswflmEb2K5boYPMwcE6fES7vX3VflZ7m/L iBdL7/7LS4e23dEwlw6jFK+3FmajQ2ctRMmllCKifEyRo1NlwG9kUr1IPkbAYZrMCDGXourV E+BYsJ+bxEP8ha4E+G4ofZhm8BQWzQAN2CMRCsoPgRBmm9Eb9xqik2NkyefqEk2cqyW/LdTm a6+7IzM1DBab6eDGtINWQ1in1qkwggXRMIIEuaADAgECAgcadRjfLZdhMA0GCSqGSIb3DQEB CwUAMIGpMQswCQYDVQQGEwJERTEbMBkGA1UECBMSQmFkZW4tV3VlcnR0ZW1iZXJnMRIwEAYD VQQHEwlTdHV0dGdhcnQxHzAdBgNVBAoTFlVuaXZlcnNpdGFldCBIb2hlbmhlaW0xIDAeBgNV BAMTF1VuaS4gSG9oZW5oZWltIENBIC0gRzAxMSYwJAYJKoZIhvcNAQkBFhdyei1wa2lAdW5p LWhvaGVuaGVpbS5kZTAeFw0xNTExMjUxMTI4MTVaFw0xODExMjQxMTI4MTVaMEoxCzAJBgNV BAYTAkRFMR8wHQYDVQQKDBZVbml2ZXJzaXRhZXQgSG9oZW5oZWltMRowGAYDVQQDDBFQaGls aXBwIEZhZXVzdGxpbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALsoRowpnBLz yYtOcn1ryhzf4ehpyZ7HIKAJaZqRW6hrPbE/Wj5EFqpSvZ8KQJNIof1wWnTDh/jovqupOSDL 8wc0qfvjU1CAZj8ZEr0hmgUpwmoTcADxa7jmiHbTwFZDlREvjMaC6I2z+rkozLwfhSNOxhIE Jig5pAVVQwS2bUdJM1mIVchkI7x2zGJnJG5s5G1O55S2XzmoarKjJWcaNb5+vfeljtCBLSrM eQwduifYf/lkfxg/Bv3dwRu/Dm6Y0x+l2mNIYUvFuPIgPN+UUrXpXQrDlmROZknZdUEHDgNG uTbBX3jcH3WJPmI3d815ip/SDd7T4fRtYjQZ64nppI8CAwEAAaOCAlowggJWMEAGA1UdIAQ5 MDcwEQYPKwYBBAGBrSGCLAEBBAMEMBEGDysGAQQBga0hgiwCAQQDATAPBg0rBgEEAYGtIYIs AQEEMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDBDAdBgNVHQ4EFgQUGA+aAic7ecWiFV0OputviaEjfJowHwYDVR0jBBgwFoAUJbV5duaE NMVQY5xBIQFE/v0Pm/EwLQYDVR0RBCYwJIEicGhpbGlwcC5mYWV1c3RsaW5AdW5pLWhvaGVu aGVpbS5kZTCBjQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vY2RwMS5wY2EuZGZuLmRlL3Vu aS1ob2hlbmhlaW0tY2EvcHViL2NybC9jYWNybC5jcmwwP6A9oDuGOWh0dHA6Ly9jZHAyLnBj YS5kZm4uZGUvdW5pLWhvaGVuaGVpbS1jYS9wdWIvY3JsL2NhY3JsLmNybDCB2wYIKwYBBQUH AQEEgc4wgcswMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2 ZXIvT0NTUDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDEucGNhLmRmbi5kZS91bmktaG9oZW5o ZWltLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDIu cGNhLmRmbi5kZS91bmktaG9oZW5oZWltLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkq hkiG9w0BAQsFAAOCAQEAGVOaiKgL3YMEXkKahLklV1Fb6z/krd2upgGnjEFgpd4lrYoIIvYy Wdn7vw1vIk0eRL3Myn/oDMsRVmeto7JM29N7fGFJcaHA1wG2X185IDLxzRjoyCVZoA8sa2MU Q+qttQvsiBgBTtbF3eJ1YJ8sDKz0OC+W30vwnQwhjRHBwxDW+sQJWk4ipGl2fUPLGbbODT6y uiDNYMbzkmYRUCTTOgYg1EV6OsVKHEPapvPrUVkKnIX0PlrF+M38XyK/eGPjiL9x3PJ7wQmV ijFY7cHyExPte7nVGfKMbbcqzoutCLD+YILSI72Z1456D5vmNPrLqRIfUezXryjGG5E5DFpq ujGCBFAwggRMAgEBMIG1MIGpMQswCQYDVQQGEwJERTEbMBkGA1UECBMSQmFkZW4tV3VlcnR0 ZW1iZXJnMRIwEAYDVQQHEwlTdHV0dGdhcnQxHzAdBgNVBAoTFlVuaXZlcnNpdGFldCBIb2hl bmhlaW0xIDAeBgNVBAMTF1VuaS4gSG9oZW5oZWltIENBIC0gRzAxMSYwJAYJKoZIhvcNAQkB Fhdyei1wa2lAdW5pLWhvaGVuaGVpbS5kZQIHGnUY3y2XYTANBglghkgBZQMEAgEFAKCCAmsw GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTgwMzI2MTAxNzU5 WjAvBgkqhkiG9w0BCQQxIgQgPl2uun6GdRhk7J+HzVYC3G87YA2cUphemS8lfwlItgQwbAYJ KoZIhvcNAQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4G CCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCB xgYJKwYBBAGCNxAEMYG4MIG1MIGpMQswCQYDVQQGEwJERTEbMBkGA1UECBMSQmFkZW4tV3Vl cnR0ZW1iZXJnMRIwEAYDVQQHEwlTdHV0dGdhcnQxHzAdBgNVBAoTFlVuaXZlcnNpdGFldCBI b2hlbmhlaW0xIDAeBgNVBAMTF1VuaS4gSG9oZW5oZWltIENBIC0gRzAxMSYwJAYJKoZIhvcN AQkBFhdyei1wa2lAdW5pLWhvaGVuaGVpbS5kZQIHGnUY3y2XYTCByAYLKoZIhvcNAQkQAgsx gbiggbUwgakxCzAJBgNVBAYTAkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxEjAQ BgNVBAcTCVN0dXR0Z2FydDEfMB0GA1UEChMWVW5pdmVyc2l0YWV0IEhvaGVuaGVpbTEgMB4G A1UEAxMXVW5pLiBIb2hlbmhlaW0gQ0EgLSBHMDExJjAkBgkqhkiG9w0BCQEWF3J6LXBraUB1 bmktaG9oZW5oZWltLmRlAgcadRjfLZdhMA0GCSqGSIb3DQEBAQUABIIBAAXutEiHXe42mzq8 iC2CtUVRKxHSyoI5JAMXBpYaSabItbFBVLLDKT8qvWBOVSyMsoHn/9Jk/oRyVrwOa2tDYQMt tVLjMnLxEppntM5H9F47CT+17UH1Ix7/So7We2YeRUEeFf4/vpm3HPqdcyR4qim10ZQpovqQ 2wUKpgxs0PJRmRfaWukl84LCJPS95RYpw6lYT16zQWXh7b9+A7Pqicv+wUwRF+ccy6NofAkP K9WLLqiSaT5B+hH7wyCOHASLPNhHplpy+k8yaN+el1eN4sBZWoAngL5XEziPGojdjOsuwcmF u5f/jxeKbFqqyKBYJQ46mtAVVROPtzsZ2LQuNGAAAAAAAAA= --------------ms010501060502040609080406-- --===============0554818489880998826== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- turba mailing list Frequently Asked Questions: http://wiki.horde.org/FAQ To unsubscribe, mail: [email protected] --===============0554818489880998826==--