Re: Problem displaying S/MIME certificate

Philipp Faeustlin <[email protected]> Mon, 26 Mar 2018 12:17:59 +0200
Newsgroups gmane.comp.horde.turba
Message-ID <[email protected]>
This is a cryptographically signed message in MIME format.

--===============0554818489880998826==
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010501060502040609080406"

This is a cryptographically signed message in MIME format.

--------------ms010501060502040609080406
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Am 22.03.2018 um 16:22 schrieb Jan Schneider:
>=20
> Zitat von Philipp Faeustlin <[email protected]>:
>=20
>> I'm using the latest horde version 5.2.22 from pear with Turba 4.2.21.=

>>
>> Displaying an S/MIME Public Certificate out of an ldap directory works=
=20
>> in most cases, but not for all ldap entries.
>>
>> For some entries I get the following error:
>>
>> S/MIME Public Certificate:=C2=A0=C2=A0=C2=A0=C2=A0 Error parsing S/MIM=
E certficate:=20
>> error:0D07209B:asn1 encoding routines:ASN1_get_object:too long
>>
>> I traced the error down to the function "toTurbaKeys" in=20
>> "./turba/lib/Driver.php"
>>
>> I think this function does the mapping between ldap and turba=20
>> attributes. In this function there is a "trim" function that's=20
>> trimming my SMIME certificate. This seems to be the issue.
>>
>> In most cases this is not a problem, but the value of the SMIME=20
>> certificate ends with "<C1>P<E3>^HJ\\<E1><99>}ek^M", where trim seems =

>> to cut off "^M" resulting in an incomplete and invalid certificate.
>>
>> Would it be possible not to trim every value?
>=20
> Doing some code archaeology, I found that I explicitly added this trim(=
)=20
> myself 10 years ago. So there must be a reason for it. :)
> I'm afraid it's not that simple.
>=20
Coding is never simple and I appreciate your work.
But is the 10 years old reason still relevant?

I don't know when the hook system was implemented, but I didn't expect=20
that the data from the backends would be altered before it reaches the=20
hook, which is designed for doing such operations.
It took me quite some time find this, because I first thought there is a =

problem with my hook or the original data from the backend.

At least I think this trim function should be mentioned in the hooks=20
documentation, so that it is clear, that the data arriving at the hook=20
might already be trimmed.

--=20
Philipp F=C3=A4ustlin



--------------ms010501060502040609080406
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms010501060502040609080406--

--===============0554818489880998826==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
turba mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: [email protected]
--===============0554818489880998826==--