outgoing smime signature broken

gerd

Hi Forum,

if i send a signed mail with kopano webapp an the smime plugin, the signature is broken.

I tried the following combinations:
webapp -> Thunderbird = Thunderbird reports Signature broken
Thunderbird -> Webapp = Webapp reports good signature
Webapp -> webapp = Webapp reports broken signature
Thunderbird -> Thunderbirs = TB reports good signature

Can someone give me hint how to debug further?

Yours,
Gerd

gerd

I cannot get smime signatures to work correctly. S-Mime Encryption works fine, but every outgoing signature is broken.

Thunderbird says “Die Nachricht enthält eine digitale Unterschrift, aber die Unterschrift ist ungültig. Die Unterschift stimmt nicht korrekt mit dem Nachrichteninhalt überein. Die Nachricht scheint verändert worden zu sein, nachdem der Absender sie unterschrieben hat.”

which is german for (more or less) “The message contains a digital signature, but the signature is not valid. The signature does not correspond to the message content. The Message seems to have been changed after the sender has signed it”

I used the recent smime plugin smime-2.4.0.4 as well as an older 2.3 version.

All certificates are correct and trusted on sender an receivers system.

So my question is:

Does it work for anyone else to verify a signature that was made with kopano-webapp?

Yours,
Gerd

caheba

@gerd
Hi gerd,
same issue on my side: sending from Outlook via Kopano to external causes a broken signature.
I am seeing the same issue, when sending mails to team members (distribution list) but not when
sending an E-Mail to myself (inside the company).
Sending signed E-Mails from outside (other domain) to my account works fine: E-Mails are shown as signed with
no change of content.

gerd

Hi Kopano-Community!

Problem still persists. Therefore again my question:

Is there anyone who can create valid smime signed Mails with webapp and the smime plugin?

Yours, Gerd

gerd

I just found out, that if i switch from of HTML to TEXT in the mail settings of webapp, signatures are verified correctly.

Yeah!
Gerd

gerd

Another result from my testings:

The Signature on “Signed Only” E-mail only stays intact if webapp is set to plaintext (not html) AND the lines are shorter than 907 characters.

If the lines are longer some component in the chain seems to break lines after the smime plugin has made its signature. This of course makes the signature invalid for the receiver.

The mail in the Sent-Folder of webapp does not show the broken lines. Therefore Webapp itself verifies its own signature correctly in the sent-folder.

So long
Gerd