s/mime Config questions

Moderator: crythias

Locked
skoesters
Znuny newbie
Posts: 16
Joined: 30 Jul 2024, 14:51
Znuny Version: 6.5.10
Real Name: Sebastian

s/mime Config questions

Post by skoesters »

Hi,

we have one customer that sends s/mime Mails. Because of that those tickets are uncomfortable to view in our current otrs installation.

Since we are now moving from otrs to Znuny (6.5.10 LTS running on Alma Linux 9) i configured s/mime in Znuny. I am at a point where the GUI tells me that at least everthing is configured without issues.

I now asked the customer to send a Test mail.

What i now see inside the ticket (and where i have no idea how to deal with that and also was not able to find anything) is this:

"Signed:OpenSSL: Verification failure ;invalid digest;signature failure;signature failure"

My hope is, that i can get some hints here.

Thank you and best regards
Sebastian
Johannes
Moderator
Posts: 425
Joined: 30 Jan 2008, 02:26
Znuny Version: All of them ^^
Real Name: Hannes
Company: Znuny|OTTERHUB

Re: s/mime Config questions

Post by Johannes »

Hi,

I think this is related to a not know SMIME Certificate Issuer.
The systems works in a way that, before decrypting, it tries to verify the certificate itself.
It is, for a example, a self signed certificate, you need to upload the complete certificate chain - which is needed
to verify the "end user certificate".

The error message says: can not validate, wont do anything else.

hope this helps.

Regards
skoesters
Znuny newbie
Posts: 16
Joined: 30 Jul 2024, 14:51
Znuny Version: 6.5.10
Real Name: Sebastian

Re: s/mime Config questions

Post by skoesters »

Thank you! what i noticed now is, that a Mail from User A of that company can be viewed without issues (OpenSSL: Verification successful), while the Mail from User B from the same company does not work (Signed:OpenSSL: Verification failure ;invalid digest;signature failure;signature failure).

Does that in that case mean, that there is something wrong on their end or that those two users are not configured the same on their end?
Locked