From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/60454 Path: news.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: smime-cert-by-ldap-1 problem Date: Thu, 16 Jun 2005 14:40:15 +0200 Message-ID: References: <877jgwfz01.fsf@seamus.arnested.dk> <87zmtqoenw.fsf@seamus.arnested.dk> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Trace: sea.gmane.org 1118925381 1636 80.91.229.2 (16 Jun 2005 12:36:21 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 16 Jun 2005 12:36:21 +0000 (UTC) Cc: ding@gnus.org Original-X-From: ding-owner+M8981=ding+2Daccount=gmane.org@lists.math.uh.edu Thu Jun 16 14:36:19 2005 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by ciao.gmane.org with esmtp (Exim 4.43) id 1Ditad-0006uT-6f for ding-account@gmane.org; Thu, 16 Jun 2005 14:35:23 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1Ditfj-0003rr-01 for ding-account@gmane.org; Thu, 16 Jun 2005 07:40:39 -0500 Original-Received: from util2.math.uh.edu ([129.7.128.23]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1Ditff-0003rj-00 for ding@lists.math.uh.edu; Thu, 16 Jun 2005 07:40:35 -0500 Original-Received: from quimby.gnus.org ([80.91.224.244]) by util2.math.uh.edu with esmtp (Exim 4.30) id 1DitfY-0004x9-Af for ding@lists.math.uh.edu; Thu, 16 Jun 2005 07:40:28 -0500 Original-Received: from 178.230.13.217.in-addr.dgcsystems.net ([217.13.230.178] helo=yxa.extundo.com) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1DitfU-0000xV-00 for ; Thu, 16 Jun 2005 14:40:24 +0200 Original-Received: from latte.josefsson.org (c494102a.s-bi.bostream.se [217.215.27.65]) (authenticated bits=0) by yxa.extundo.com (8.13.4/8.13.4/Debian-3) with ESMTP id j5GCeJOR027782 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 16 Jun 2005 14:40:20 +0200 Original-To: Arne =?iso-8859-1?Q?J=F8rgensen?= OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:21:050616:ding@gnus.org::FP4U4EmzzfmqYtDZ:0Usk X-Hashcash: 1:21:050616:arne@arnested.dk::vd16q47bpKQrfL9L:2ogf In-Reply-To: <87zmtqoenw.fsf@seamus.arnested.dk> (Arne =?iso-8859-1?Q?J=F8?= =?iso-8859-1?Q?rgensen's?= message of "Thu, 16 Jun 2005 11:05:07 +0200") User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux) X-Spam-Status: No, score=0.1 required=5.0 tests=FORGED_RCVD_HELO autolearn=failed version=3.0.3 X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on yxa-iv X-Virus-Scanned: ClamAV version 0.84, clamav-milter version 0.84e on yxa.extundo.com X-Virus-Status: Clean X-MIME-Autoconverted: from 8bit to quoted-printable by yxa.extundo.com id j5GCeJOR027782 X-Spam-Score: -4.9 (----) Precedence: bulk Original-Sender: ding-owner@lists.math.uh.edu Xref: news.gmane.org gmane.emacs.gnus.general:60454 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:60454 Arne J=F8rgensen writes: > Another solution is to look for a magic string ("MII") at the > beginning of the certificate. I have not been able to find any > authoritative documentation stating that a certificate must begin with > "MII" (in base64 encoding), but googling for "x509 certificate MII" is > not against it. I suspect only degenerative x.509 certs don't start in this way... I applied your second patch. Was that you think is best?