RE: Signed Receipts using Outlook Express

--=====================_368866922==_
Content-Type: text/plain; charset="us-ascii"; format=flowed

John,

The signed-receipt in examples-06 in correctly encoded.

The signed-receipt that I am talking about was generated using Outlook 
Express 5.0/Win2000 Professional and the encoding is incorrect. Please see 
the attached file.

Could you tell me which Microsoft product that was used for inter-op testing.

Thanks,

  Vamsi

At 03:38 PM 4/6/01 -0400, Pawling, John wrote:
>Vamsi,
>
>The sample signed receipt in the Examples-06 document is correctly ASN.1
>encoded as specified in RFC 2634 (ESS).
>
>RFC 2630 (CMS) defines EncapsulatedContentInfo as follows:
>   EncapsulatedContentInfo ::= SEQUENCE {
>       eContentType ContentType,
>       eContent [0] EXPLICIT OCTET STRING OPTIONAL }
>
>RFC 2634 (ESS), Section 2.4, bullet 9 states: "The ASN.1 DER encoded Receipt
>content MUST be directly encoded within the signedData encapContentInfo
>eContent OCTET STRING defined in [CMS]."
>
>In March 2000, we performed signed receipt interop testing with Microsoft.
>We discovered that they were incorrectly ASN.1 encoding signed receipts.
>Their original signed receipt was composed of a signedData encapsulating a
>Receipt content, but the eContent OCTET STRING tag and length fields were
>missing.  After they fixed their code to correctly ASN.1 encode the receipt
>structure inside of the signedData encapContentInfo eContent OCTET STRING,
>then we were able to successfully use the S/MIME Freeware Library to ASN.1
>decode and verify their signed receipts.
>
>===========================================
>John Pawling, [email protected]
>Getronics Government Solutions, LLC
>===========================================
>
>
>-----Original Message-----
>From: Vamsi Motukuru [mailto:[email protected]]
>Sent: Friday, April 06, 2001 3:16 PM
>To: [email protected]
>Subject: Signed Receipts using Outlook Express
>
>
>
>
>While looking at the S/MIME ESS signed-receipt message generated using
>Outlook Express 5.0 on Windows 2000, I noticed that in the
>' EncapsulatedContentInfo'  field of the CMS 'Signed-Data' ASN.1 structure,
>the
>     eContent [0] EXPLICIT OCTET STRING
>is instead encoded as a
>     eContent [0] EXPLICIT SEQUENCE
>
>Is this a known issue or am I mistaken ?
>
>Thanks in advance,
>
>Vamsi Motukuru

_______________________________________




--=====================_368866922==_
Content-Type: application/pkcs7-mime; name="rcpt.p7m"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="rcpt.p7m"
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--=====================_368866922==_--