Re: M2Crypto and CAcert.org certificates

--Apple-Mail-1--1534867
Content-Type: text/plain;
	charset=ISO-8859-1;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: quoted-printable

> Jeremy Morel wrote:
>> I am trying to use M2Crypto to authentify mails signed with a =20
>> certificate
>> delivered by CACert.org. I understand they do not use traditional =20
>> public
>> key/private key signing, but rather give you a certificate you use =20=

>> to sign
>> your mails with embed the public key. Toying with M2Crypto, I was =20
>> able to
>
> Can you send a link to where they explain this stuff?

Unfortunately, I can't. This explaination was given to me by a friend. =20=

But I guess you could arrive to the same conclusion by reading the CA =20=

website : http://www.cacert.org/
The main clue about that is that they do not deliver public/private =20
key. They just give you a certificate and that's all.

>
>
>> My code derives from the example available at
>
> That is from the old M2Crypto location. M2Crypto homepage is now here:
> http://chandlerproject.org/Projects/MeTooCrypto and the new location =20=

> for
> the document you were reading is
> http://svn.osafoundation.org/m2crypto/trunk/doc/howto.smime.html
>
> I have fixed one bug in the examples, in the Sign and Encrypt section.
>
>> certif =3D X509.load_cert('root.crt')
>
> You are not using certif for anything.

I know, I'm sorry. I tried to remove unused stuff from my previous =20
attemps but some of it was still here.

>
>
>> signers =3D p7.get0_signers(stack)
>> for signer in signers:
>>    pubkey =3D signer.get_pubkey()
>>    print signer
>
> That signer is an X509 object...
>
>
>> # Load the signer's cert.
>> x509 =3D X509.X509()
>> x509.set_pubkey(pubkey)
>
> ... so why are you creating a new X509 object here, why not use =20
> signer?

"It seemed like a good idea at the time"

>
>
> If it does not work with that modification, could you send me an email
> signed with CAcert certificate and point me to a place where I can
> download their root cert?

Unfortunately, it still doesn't work. I have the "no content" error.
Root certificate can be found at http://www.cacert.org/index.php?id=3D3 =20=

and this email should be signed with my certificate.

Thanks,

J=E9r=E9my Morel=

--Apple-Mail-1--1534867
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIF0zCCBc8w
ggS3oAMCAQICEQCrOX8fO0Ko82vZjdEFiIpwMA0GCSqGSIb3DQEBBQUAMIGuMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNF
UlRSVVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UE
AxMtVVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5kIEVtYWlsMB4XDTA4MDYy
ODAwMDAwMFoXDTA5MDYyODIzNTk1OVowgaoxPjA8BgNVBAsTNVg1MDkgRW1haWwgTm92aWNlIFRC
UyAtIGh0dHA6Ly93d3cudGJzLXg1MDkuY29tL2NsMSAuMSgwJgYDVQQLEx9DbGFzcyAxIC0gUEVS
U09OQSBOT1QgVkFMSURBVEVEMSUwIwYJKoZIhvcNAQkBFhZtb3JlbC5qZXJlbXlAZ21haWwuY29t
MRcwFQYDVQQDDA5NT1JFTCBKw6lyw6lteTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALSeF622jHij8zPTVSy2BtT3rLgPRIlWQsVKJpedfjxSbrh2ae7na/QbkhNk2dBpVG/lRViaZQn4
LB+wLilKKOMlqps8HA9DCD/h/upxLcXtxmee1xDYBJmgpmCkuKcnztAVWA77ClhEVcHmjFda5c/S
zCT2dI3BQQzfhE7ez69kfMfVQpFKX+LgaMy5ws0K91dwpp+ygXYJszi4YgZ2GYtADwNvSXjglqfp
+shBXHD1QYuzbsUdQMp9nluVJXQ2RHfA4SEv9AQcyk3h7RD/NzudgEA3cFMuyHCW+lq93Z++4Xb2
7vD5XTmxfdRWmDKmiBi5gMzryJkMZoaApmRT7w0CAwEAAaOCAegwggHkMB8GA1UdIwQYMBaAFImC
Z33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBTzwLEs9insAXmG/eJMMml7VivW+TAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDBDARBglghkgBhvhCAQEE
BAMCBSAwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAwUwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9z
ZWN1cmUuY29tb2RvLm5ldC9DUFMwgaUGA1UdHwSBnTCBmjBMoEqgSIZGaHR0cDovL2NybC5jb21v
ZG9jYS5jb20vVVROLVVTRVJGaXJzdC1DbGllbnRBdXRoZW50aWNhdGlvbmFuZEVtYWlsLmNybDBK
oEigRoZEaHR0cDovL2NybC5jb21vZG8ubmV0L1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGlj
YXRpb25hbmRFbWFpbC5jcmwwbAYIKwYBBQUHAQEEYDBeMDYGCCsGAQUFBzAChipodHRwOi8vY3J0
LmNvbW9kb2NhLmNvbS9VVE5BQUFDbGllbnRDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmNvbW9kb2NhLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAFnTr9L6lT/Mc5Zw5NIDKqvI8wdx8I8dP
PQ9CbYuGbjaSUbE5n/KqMPEAZfwHQ0gHomiHKFU1LVK9FeNovigEGhddwByCSCK5HARJgMCFW2+8
vBzJs7S4+ZgbD86yLHyCLSJSv+Jnrq4z/EASidF+Al/QW+uNm277/UIQeSGdwkrBV33SfovUbR6v
8QONrzFvwYLSiA+q4OlrLQcOdRxu4SXjL10Dg3dicI+5pWv3LeJH+NOGMeumB79w7Qvkm40G/jbD
S4vqAwpb4jLDb9El9GyC1uiEC18+SoE8uJ1Nz2qcoEjmAW3AKXJUyZK4KfmLFIkSTFwKijLQyo1E
k5j/yzGCA/8wggP7AgEBMIHEMIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcT
DlNhbHQgTGFrZSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxITAfBgNVBAsT
GGh0dHA6Ly93d3cudXNlcnRydXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJGaXJzdC1DbGllbnQg
QXV0aGVudGljYXRpb24gYW5kIEVtYWlsAhEAqzl/HztCqPNr2Y3RBYiKcDAJBgUrDgMCGgUAoIIC
DzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wODEwMjkwNzQ0NDRa
MCMGCSqGSIb3DQEJBDEWBBRSZcTrS1wVduYLbXg7SOTYmaH9iDCB1QYJKwYBBAGCNxAEMYHHMIHE
MIGuMQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBDaXR5MR4w
HAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxITAfBgNVBAsTGGh0dHA6Ly93d3cudXNlcnRy
dXN0LmNvbTE2MDQGA1UEAxMtVVROLVVTRVJGaXJzdC1DbGllbnQgQXV0aGVudGljYXRpb24gYW5k
IEVtYWlsAhEAqzl/HztCqPNr2Y3RBYiKcDCB1wYLKoZIhvcNAQkQAgsxgceggcQwga4xCzAJBgNV
BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRo
ZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYw
NAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwCEQCr
OX8fO0Ko82vZjdEFiIpwMA0GCSqGSIb3DQEBAQUABIIBAHZKDyHPYvdOjh2xLrOnU7YqJuMx1U38
zJjnf4OGXMv9/JhCMRrUQpYFTkX1aMBdLpW5TUz7k9bOnGwtA3KxsxCFkzk3WfufSGa1YwvKoOqG
lB6+S+J0+0dgzAUyxj5OPTnBiwnWN30dt4fBdSXQSa3YDu3QV7WQSFjQqCv6ADbrSbWbYsdxJewj
NXP10mwMUGEYg8YDFTq5Bc19tPY6mraURNljSmrlJl6hlum9NPph4ckYJagV32OixDcW8kjUoF9T
bZH+jD4h41x5Ixq28k09rcVVdDeBAx3VrUNcPqYRrpcQ6no2RTPi/0ZuHAsgDcfh30rbqzNENz4u
GRxwV1MAAAAAAAA=

--Apple-Mail-1--1534867--