Debian Bug report logs - #328655
mutt: S/MIME signature verification fails on encrypted and signed messages

version graph

Package: mutt; Maintainer for mutt is Mutt maintainers <mutt@packages.debian.org>; Source for mutt is src:mutt (PTS, buildd, popcon).

Reported by: florian kriener <debian-bugs@leflo.de>

Date: Fri, 16 Sep 2005 16:03:05 UTC

Severity: normal

Tags: moreinfo

Found in versions mutt/1.5.10-1, mutt/1.5.11+cvs20060126-1

Fixed in version mutt/1.5.19-4

Done: Antonio Radici <antonio@dyne.org>

Bug is archived. No further changes may be made.

Forwarded to http://bugs.mutt.org/2082

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to florian kriener <debian-bugs@leflo.de>:
New Bug report received and forwarded. Copy sent to Adeodato Simó <asp16@alu.ua.es>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: florian kriener <debian-bugs@leflo.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Fri, 16 Sep 2005 17:48:49 +0200
Package: mutt
Version: 1.5.10-1
Severity: important


Everytime I try to open a encrypted and signed message I get the
following error:

[-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST) --]
Error reading S/MIME message
18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
[-- End of OpenSSL output --]

This error does not effect the display of the body of the message, it
only lets mutt say "S/MIME signature coud NOT be verired."

I use the default smime_* commands from debians /etc/Muttrc.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages mutt depends on:
ii  libc6                        2.3.5-6     GNU C Library: Shared libraries an
ii  libdb4.3                     4.3.28-3    Berkeley v4.3 Database Libraries [
ii  libgnutls11                  1.0.16-13.1 GNU TLS library - runtime library
ii  libidn11                     0.5.18-1    GNU libidn library, implementation
ii  libncursesw5                 5.4-9       Shared libraries for terminal hand
ii  libsasl2                     2.1.19-1.6  Authentication abstraction library
ii  postfix [mail-transport-agen 2.2.4-1     A high-performance mail transport 

Versions of packages mutt recommends:
ii  locales                       2.3.5-6    GNU C Library: National Language (
ii  mime-support                  3.35-1     MIME files 'mime.types' & 'mailcap

-- no debconf information



Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to 328655@bugs.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <asp16@alu.ua.es>. (full text, mbox, link).


Message #10 received at 328655@bugs.debian.org (full text, mbox, reply):

From: Adeodato Simó <asp16@alu.ua.es>
To: florian kriener <debian-bugs@leflo.de>, 328655@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Re: Bug#328655: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Mon, 19 Sep 2005 01:43:04 +0200
tag 328655 moreinfo
thanks

* florian kriener [Fri, 16 Sep 2005 17:48:49 +0200]:

> Package: mutt
> Version: 1.5.10-1
> Severity: important

Hi,

> Everytime I try to open a encrypted and signed message I get the
> following error:

> [-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST) --]
> Error reading S/MIME message
> 18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
> [-- End of OpenSSL output --]

> This error does not effect the display of the body of the message, it
> only lets mutt say "S/MIME signature coud NOT be verired."

> I use the default smime_* commands from debians /etc/Muttrc.

  Can you do a quick test and check whether it still happens with this
  1.5.11 package?:
    
    http://people.debian.org/~adeodato/tmp/2005-09-19/mutt-1.5.11-pre/mutt_1.5.11-1~pre1_i386.deb

  If it is, I'll forward your report upstream.

  Thanks,

-- 
Adeodato Simó
    EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
 
The surest way to corrupt a youth is to instruct him to hold in higher
esteem those who think alike than those who think differently.
                -- F. Nietzsche




Tags added: moreinfo Request was from Adeodato Simó <asp16@alu.ua.es> to control@bugs.debian.org. (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to florian kriener <debian-bugs@leflo.de>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <asp16@alu.ua.es>. (full text, mbox, link).


Message #17 received at 328655@bugs.debian.org (full text, mbox, reply):

From: florian kriener <debian-bugs@leflo.de>
To: 328655@bugs.debian.org, Adeodato Simó <asp16@alu.ua.es>
Subject: Re: Bug#328655: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Mon, 19 Sep 2005 01:58:26 +0200
[Message part 1 (text/plain, inline)]
Hello,

On Mon, Sep 19, 2005 at 01:43:04AM +0200, Adeodato Simó wrote:
> > Everytime I try to open a encrypted and signed message I get the
> > following error:
> 
> > [-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST) --]
> > Error reading S/MIME message
> > 18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
> > [-- End of OpenSSL output --]
> 
> > This error does not effect the display of the body of the message, it
> > only lets mutt say "S/MIME signature coud NOT be verired."
> 
> > I use the default smime_* commands from debians /etc/Muttrc.
> 
>   Can you do a quick test and check whether it still happens with this
>   1.5.11 package?:
>     
>     http://people.debian.org/~adeodato/tmp/2005-09-19/mutt-1.5.11-pre/mutt_1.5.11-1~pre1_i386.deb


Yes it definitely does not work even with your pre version. I tried
different certificates and different email-addresses and it did not
work, the error is the same.

Thank you for forwarding this bug,
Florian Kriener.

-- 
BOFH excuse #396:

Mail server hit by UniSpammer.
[smime.p7s (application/x-pkcs7-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to debian-bugs@leflo.de,bug-any@bugs.mutt.org:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <asp16@alu.ua.es>. (full text, mbox, link).


Message #22 received at 328655@bugs.debian.org (full text, mbox, reply):

From: New Mutt PR <cb@df7cb.de>
To: Mutt Developers <mutt-dev@mutt.org>,cb@df7cb.de,328655@bugs.debian.org
Subject: mutt/2082: S/MIME signature verification fails on encrypted and signed messages
Date: Thu, 22 Sep 2005 04:12:59 +0200
>Number:         2082
>Notify-List:    328655@bugs.debian.org
>Category:       mutt
>Synopsis:       S/MIME signature verification fails on encrypted and signed messages
>Confidential:   no
>Severity:       normal
>Priority:       medium
>Responsible:    mutt-dev
>State:          open
>Keywords:       
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Sep 22 04:12:59 +0200 2005
>Originator:     florian kriener
>Release:        1.5.11
>Organization:
>Environment:
>Description:
Everytime I try to open a encrypted and signed message I get the
following error:

[-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST) --]
Error reading S/MIME message
18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
[-- End of OpenSSL output --]

This error does not effect the display of the body of the message, it
only lets mutt say "S/MIME signature coud NOT be verired."

I use the default smime_* commands from debians /etc/Muttrc [which can be found at: http://people.debian.org/~adeodato/tmp/2005-09-22/extra/smime-paths.rc --dato].
>How-To-Repeat:
>Fix:
Unknown
>Add-To-Audit-Trail:

>Unformatted:



Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to 328655@bugs.debian.org, Adeodato Simó <asp16@alu.ua.es>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <asp16@alu.ua.es>. (full text, mbox, link).


Message #27 received at 328655@bugs.debian.org (full text, mbox, reply):

From: Adeodato Simó <asp16@alu.ua.es>
To: florian kriener <debian-bugs@leflo.de>, 328655@bugs.debian.org
Cc: control@bugs.debian.org
Subject: Re: Bug#328655: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Thu, 22 Sep 2005 04:13:24 +0200
forwarded 328655 http://bugs.mutt.org/2082
tag 328655 - moreinfo
thanks

* florian kriener [Mon, 19 Sep 2005 01:58:26 +0200]:

> Hello,

> On Mon, Sep 19, 2005 at 01:43:04AM +0200, Adeodato Simó wrote:
> > > Everytime I try to open a encrypted and signed message I get the
> > > following error:

> > > [-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST) --]
> > > Error reading S/MIME message
> > > 18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough data:a_d2i_fp.c:240:
> > > [-- End of OpenSSL output --]

> > > This error does not effect the display of the body of the message, it
> > > only lets mutt say "S/MIME signature coud NOT be verired."

> > > I use the default smime_* commands from debians /etc/Muttrc.

> >   Can you do a quick test and check whether it still happens with this
> >   1.5.11 package?:

> >     http://people.debian.org/~adeodato/tmp/2005-09-19/mutt-1.5.11-pre/mutt_1.5.11-1~pre1_i386.deb


> Yes it definitely does not work even with your pre version. I tried
> different certificates and different email-addresses and it did not
> work, the error is the same.

  Okay, thanks for checking.

> Thank you for forwarding this bug,

  Done now.

  Cheers,

-- 
Adeodato Simó
    EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
    Listening to: Fangoria - Teatro del dolor
 
When it is not necessary to make a decision, it is necessary not to make
a decision.




Noted your statement that Bug has been forwarded to http://bugs.mutt.org/2082. Request was from Adeodato Simó <asp16@alu.ua.es> to control@bugs.debian.org. (full text, mbox, link).


Tags removed: moreinfo Request was from Adeodato Simó <asp16@alu.ua.es> to control@bugs.debian.org. (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to Holger von Rhein <lortas@freenet.de>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>. (full text, mbox, link).


Message #36 received at 328655@bugs.debian.org (full text, mbox, reply):

From: Holger von Rhein <lortas@freenet.de>
To: Debian Bug Tracking System <328655@bugs.debian.org>
Subject: mutt: Verification failure; PKCS7_verify:wrong content type:pk7_smime.c:173:
Date: Fri, 24 Feb 2006 15:15:41 +0100
Package: mutt
Version: 1.5.11+cvs20060126-1
Followup-For: Bug #328655

Some mail clients set the content-header to:

Content-Type: application/x-pkcs7-mime;
	name="smime.p7m"
Content-Transfer-Encoding: base64
Content-Description: smime.p7m
Content-Disposition: attachment;
	filename="smime.p7m"

If I try to open a mail with this content-header I get:

[-- OpenSSL output follows (current time: Fr 24 Feb 2006 15:06:55 CET) --]
Verification failure
3685:error:21075071:PKCS7 routines:PKCS7_verify:wrong content type:pk7_smime.c:173:
[-- End of OpenSSL output --]

[-- The following data is S/MIME signed --]

[-- End of S/MIME signed data. --]

If I replace
  "Content-Description: smime.p7m"
by
  "Content-Description: S/MIME Encrypted Message"
all work well, and mutt can decrypt and verify the mail.


bye
Holger



-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.3
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15)

Versions of packages mutt depends on:
ii  exim [mail-transport-agent]   3.36-18    An MTA (Mail Transport Agent)
ii  libc6                         2.3.5-13   GNU C Library: Shared libraries an
ii  libdb4.3                      4.3.29-4   Berkeley v4.3 Database Libraries [
ii  libgnutls11                   1.0.16-14  GNU TLS library - runtime library
ii  libidn11                      0.5.18-1   GNU libidn library, implementation
ii  libncursesw5                  5.5-1      Shared libraries for terminal hand
ii  libsasl2                      2.1.19-1.9 Authentication abstraction library

Versions of packages mutt recommends:
ii  locales                       2.3.5-13   GNU C Library: National Language (
ii  mime-support                  3.35-1     MIME files 'mime.types' & 'mailcap

-- no debconf information



Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Acknowledgement sent to Michael Stone <mstone@debian.org>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>. (full text, mbox, link).


Message #41 received at 328655@bugs.debian.org (full text, mbox, reply):

From: Michael Stone <mstone@debian.org>
To: 328655@bugs.debian.org
Subject: mutt smime handling bug
Date: Fri, 10 Mar 2006 10:59:17 -0500
The mutt source code contains this:

     if (!ascii_strcasecmp ((t+len), "p7m"))
#if 0
      return SMIMEENCRYPT;
#else
     /* Not sure if this is the correct thing to do, but
        it's required for compatibility with Outlook */
      return (SMIMESIGN|SMIMEOPAQUE);
#endif
     else if (!ascii_strcasecmp ((t+len), "p7s"))
       return (SMIMESIGN|SMIMEOPAQUE);

This is definately *not* the right thing to do. See RFC 2633, section 
3.2.1--a .p7m extension should be interpreted as enveloped data. I 
suggest changing the #if 0 to #if 1. It may break compatibility with 
some version of outlook, but it will restore compatibility for RFC 
compliant encrypted messages.

-- 
Michael Stone



Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#328655; Package mutt. (full text, mbox, link).


Message #44 received at 328655@bugs.debian.org (full text, mbox, reply):

From: Mutt <fleas@mutt.org>
Cc: mutt-dev@mutt.org
Subject: Re: [Mutt] #2082: S/MIME signature verification fails on encrypted and signed messages
Date: Mon, 02 Apr 2007 03:08:46 -0000
#2082: S/MIME signature verification fails on encrypted and signed messages

Changes (by brendan):

  * component:  mutt => crypto

Old description:

> {{{
> Everytime I try to open a encrypted and signed message I get the
> following error:
>
> [-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST)
> --]
> Error reading S/MIME message
> 18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough
> data:a_d2i_fp.c:240:
> [-- End of OpenSSL output --]
>
> This error does not effect the display of the body of the message, it
> only lets mutt say "S/MIME signature coud NOT be verired."
>
> I use the default smime_* commands from debians /etc/Muttrc [which can be
> found at: http://people.debian.org/~adeodato/tmp/2005-09-22/extra/smime-
> paths.rc --dato].
> >How-To-Repeat:
> >Fix:
> Unknown
> }}}

New description:

 Everytime I try to open a encrypted and signed message I get the
 following error:
 {{{
 [-- OpenSSL output follows (current time: Fr 16 Sep 2005 17:38:55 CEST)
 --]
 Error reading S/MIME message
 18891:error:0D06B08E:asn1 encoding routines:ASN1_d2i_bio:not enough
 data:a_d2i_fp.c:240:
 [-- End of OpenSSL output --]
 }}}
 This error does not effect the display of the body of the message, it
 only lets mutt say "S/MIME signature coud NOT be verired."

 I use the default smime_* commands from debians /etc/Muttrc [which can be
 found at: http://people.debian.org/~adeodato/tmp/2005-09-22/extra/smime-
 paths.rc --dato].

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/2082#comment:1>




Severity set to `normal' from `important' Request was from Antonio Radici <antonio@dyne.org> to control@bugs.debian.org. (Fri, 12 Jun 2009 23:12:02 GMT) (full text, mbox, link).


Tags added: moreinfo Request was from Antonio Radici <antonio@dyne.org> to control@bugs.debian.org. (Fri, 12 Jun 2009 23:12:03 GMT) (full text, mbox, link).


Message sent on to florian kriener <debian-bugs@leflo.de>:
Bug#328655. (Fri, 12 Jun 2009 23:12:05 GMT) (full text, mbox, link).


Message #51 received at 328655-submitter@bugs.debian.org (full text, mbox, reply):

From: Antonio Radici <antonio@dyne.org>
To: 328655-submitter@bugs.debian.org
Cc: control@bugs.debian.org
Subject: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Sat, 13 Jun 2009 00:09:37 +0100
tag 328655 +moreinfo
thanks

Hi there,
are you still seeing this problem against the latest unstable version? (1.5.19-4)

Cheers
ANtonio




Information stored :
Bug#328655; Package mutt. (Sat, 13 Jun 2009 01:06:02 GMT) (full text, mbox, link).


Acknowledgement sent to Florian Kriener <florian@kriener.org>:
Extra info received and filed, but not forwarded. (Sat, 13 Jun 2009 01:06:02 GMT) (full text, mbox, link).


Message #56 received at 328655-quiet@bugs.debian.org (full text, mbox, reply):

From: Florian Kriener <florian@kriener.org>
To: antonio@dyne.org, 328655-quiet@bugs.debian.org
Subject: Re: Bug#328655: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Sat, 13 Jun 2009 03:01:20 +0200
[Message part 1 (text/plain, inline)]
Hey,

I'm very sorry, but I have to tell you that I'm no longer using Mutt, as much 
as I liked it I found out by surprise that I am a X-GUI lover. So please 
excuse that I cannot give you an anwser to your question.

Love and Peace,  :-)
Flo.

On Saturday 13 June 2009 01:09:37 Antonio Radici wrote:
> tag 328655 +moreinfo
> thanks
>
> Hi there,
> are you still seeing this problem against the latest unstable version?
> (1.5.19-4)
>
> Cheers
> ANtonio

-- 
Florian Kriener

August-Bebel-Straße 46
04275 Leipzig

Tel:   +49 341-3047701
Mobil: +49 176-20070874

[signature.asc (application/pgp-signature, inline)]

Bug marked as fixed in version 1.5.19-4. Request was from Antonio Radici <antonio@dyne.org> to control@bugs.debian.org. (Sat, 13 Jun 2009 11:18:18 GMT) (full text, mbox, link).


Reply sent to antonio@dyne.org:
You have taken responsibility. (Sat, 13 Jun 2009 11:18:23 GMT) (full text, mbox, link).


Notification sent to florian kriener <debian-bugs@leflo.de>:
Bug acknowledged by developer. (Sat, 13 Jun 2009 11:18:26 GMT) (full text, mbox, link).


Message #63 received at 328655-done@bugs.debian.org (full text, mbox, reply):

From: Antonio Radici <antonio@dyne.org>
To: 328655-done@bugs.debian.org
Subject: mutt: S/MIME signature verification fails on encrypted and signed messages
Date: Sat, 13 Jun 2009 12:16:28 +0100
Closing, based on the latest correspondences this bug should be fixed in 1.5.19-4

Cheers
Antonio




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 21 Jul 2009 07:29:06 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Tue Jul 2 23:11:40 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.