Re: attachments in S/MIME encrypted messages

[Simon Josefsson <jas@extundo.com>]

david.goldberg6@verizon.net (David S. Goldberg) writes:

>> Ah.  So there is a MULE bug somewhere.  I always enable that stuff,
>> which probably explains why I couldn't reproduce it.  I'll try to
>> compile without it sometime, thanks.
>
> Maybe, but I had the same problem with a MULE-enabled XEmacs 21.1.14

But without --with-file-coding enabled, right?  When I built without
--with-file-coding I also got CRLFs.

>> You need a recent OpenSSL, but even with that sometimes the -email
>> switch to OpenSSL doesn't get the email address.  Maybe it is when the
>> email address is encoded in the CN instead of stored in a
>> subjectAltName extension.
>
> I'm running openssl 0.9.6c but most, if not all the messages in
> question all are generated by Netscape.  Messages that are only signed
> verify OK, but perhaps netscape does something different when it's
> encrypted.  I'll try to debug it.

Just run OpenSSL on the certificates in the S/MIME blob:

openssl smime -pk7out < mail > foo
openssl pkcs7 -print_certs -text < foo > bar
openssl x509 -email -noout < bar

try it with different messages and see when the last command doesn't
output the email address from the cert.