[Bug 138519] verisign not Validated signture

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
         
http://bugs.kde.org/show_bug.cgi?id=138519         




------- Additional Comments From zbiggy o2 pl  2007-06-18 06:01 -------
The problem still exist in KMail 1.9.7/KDE 3.4.7.

There is problem with S/MIME signed e-mails KMail 1.9.7, Kleopatra 0.40:
"issuer certificate is not found (OU=Class 1 Public Primary Certification 
Authority,O=VeriSign, Inc.,C=US)" - signed mail is displayed in yellow colour,
with text: "Not enough information to check signature. [Details]
Status: No status information available."

I saved the signed mail gone to windows and checked e-mail in outlook.
All was fine message is signed and valid. Then checked certificate path - it  
was full. So exported all certificates from path to files.

Gone to Linux. Thunderbird 2.0.0.0 complained about missing certificates. So 
imported all of them. Thunderbird said that has the top one because it is 
already built in Thunderbird so it was not imported. Then I opened saved e-mail 
and signature was verified - the certificate path was full.

Next tried KMail. I imported all certificates using Kleopatra. The situation 
was the same like with Thunderbird (KMail said that has the top one is already 
built in so it was not imported). The rest of certificates appeared in 
Kleopatra window as local certificates. Then I chosen check for both 
certificates - all was valid.
Then I reopened KMail - the signed mail is still yellow. The certificate path 
is broken - the top certificate (the built in one): "issuer certificate is not 
found (OU=Class 1 Public Primary Certification Authority,O=VeriSign, 
Inc.,C=US)" is not found.

Please fix connection between the top (built in) certificate and those 
subcertificates which are imported later. I think when the connection will be 
fixed the path will be full and my signed mail will become green and valid.

I checked Thunderbird and KMail. The difference is only in broken certificate 
path between built in/top/master certificate and the first first imported/lower/sub one in KMail. All more imported/lower/further certificates are correctly connected together both in KMail and Thunderbird.

I also imported certificates to Konqueror. It asked me to make them available 
to KMail too - I clicked YES. All certificates were imported except the 
master/top one - it was already present in Konqueror's list. Nothing 
helped/changed - my signed mail is still yellow.