Digitally Signing an email

Gateway
1

I am trying to sign outbound emails with my corporate comodo (level 3)
certificate to any recipient of my system emails. I've imported the
certificates from the pk12 file Comodo generated, and I've associated it
with my global settings but every email client receives only a smime.p7s
file instead of a securely signed icon which I would expect. I've turned
sign only on encrypt and encryption mode is set to no encryption, and I've
imported all the intermediates and roots from the CipherMail website. I've
tried using individual users but with the same result. Please help, I am
pulling my hair out trying to get this to work.

2

Hi,

You said "every email client receives only a smime.p7s file". A clear
digitally signed message is a message with a smime.p7s attachment. You
need an S/MIME capable email client to show the signature status. Are
you sure you have tested it with an S/MIME capable email client like for
example Outlook or Thunderbird and not just with webmail or a mobile
email client without S/MIME support?

Kind regards,

Martijn Brinkers

···

On 10/29/2015 11:21 PM, Autopilot Admin wrote:

I am trying to sign outbound emails with my corporate comodo (level 3)
certificate to any recipient of my system emails. I've imported the
certificates from the pk12 file Comodo generated, and I've associated it
with my global settings but every email client receives only a smime.p7s
file instead of a securely signed icon which I would expect. I've turned
sign only on encrypt and encryption mode is set to no encryption, and I've
imported all the intermediates and roots from the CipherMail website. I've
tried using individual users but with the same result. Please help, I am
pulling my hair out trying to get this to work.

--
CipherMail email encryption

Open source email encryption gateway with support for S/MIME, OpenPGP
and PDF messaging.

Twitter: http://twitter.com/CipherMail

3

Yes, I have tested it in both Outlook 2013 and Thunderbird. I've made sure
the clients work by having another system which uses a digital signature
(which I've never received email from) send me email, and the appropriate
icon is displayed in both clients. I am avoiding web mail for testing.

···

On Fri, Oct 30, 2015 at 12:55 AM, Martijn Brinkers <martijn(a)ciphermail.com> wrote:

On 10/29/2015 11:21 PM, Autopilot Admin wrote:
> I am trying to sign outbound emails with my corporate comodo (level 3)
> certificate to any recipient of my system emails. I've imported the
> certificates from the pk12 file Comodo generated, and I've associated it
> with my global settings but every email client receives only a smime.p7s
> file instead of a securely signed icon which I would expect. I've turned
> sign only on encrypt and encryption mode is set to no encryption, and
I've
> imported all the intermediates and roots from the CipherMail website.
I've
> tried using individual users but with the same result. Please help, I am
> pulling my hair out trying to get this to work.

Hi,

You said "every email client receives only a smime.p7s file". A clear
digitally signed message is a message with a smime.p7s attachment. You
need an S/MIME capable email client to show the signature status. Are
you sure you have tested it with an S/MIME capable email client like for
example Outlook or Thunderbird and not just with webmail or a mobile
email client without S/MIME support?

Kind regards,

Martijn Brinkers

--
CipherMail email encryption

Open source email encryption gateway with support for S/MIME, OpenPGP
and PDF messaging.

https://www.ciphermail.com

Twitter: http://twitter.com/CipherMail
_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
https://lists.djigzo.com/lists/listinfo/users

4

Can you send me digitally signed message directly (i.e., off-list) so I
can see what the message looks like

Kind regards,

Martijn

···

On 10/30/2015 11:13 AM, Autopilot Admin wrote:

Yes, I have tested it in both Outlook 2013 and Thunderbird. I've made sure
the clients work by having another system which uses a digital signature
(which I've never received email from) send me email, and the appropriate
icon is displayed in both clients. I am avoiding web mail for testing.

On Fri, Oct 30, 2015 at 12:55 AM, Martijn Brinkers <martijn(a)ciphermail.com> > wrote:

On 10/29/2015 11:21 PM, Autopilot Admin wrote:

I am trying to sign outbound emails with my corporate comodo (level 3)
certificate to any recipient of my system emails. I've imported the
certificates from the pk12 file Comodo generated, and I've associated it
with my global settings but every email client receives only a smime.p7s
file instead of a securely signed icon which I would expect. I've turned
sign only on encrypt and encryption mode is set to no encryption, and

I've

imported all the intermediates and roots from the CipherMail website.

I've

tried using individual users but with the same result. Please help, I am
pulling my hair out trying to get this to work.

Hi,

You said "every email client receives only a smime.p7s file". A clear
digitally signed message is a message with a smime.p7s attachment. You
need an S/MIME capable email client to show the signature status. Are
you sure you have tested it with an S/MIME capable email client like for
example Outlook or Thunderbird and not just with webmail or a mobile
email client without S/MIME support?

Kind regards,

Martijn Brinkers

--
CipherMail email encryption

Open source email encryption gateway with support for S/MIME, OpenPGP
and PDF messaging.

https://www.ciphermail.com

Twitter: http://twitter.com/CipherMail
_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
https://lists.djigzo.com/lists/listinfo/users

_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
https://lists.djigzo.com/lists/listinfo/users

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail

5

For the record, it turned out that the message was sent via the external
mandril SMTP service which resulted in changes to the message and
therefore the message was no longer a valid digitally signed message.

Kind regards,

Martijn Brinkers

···

On 10/30/2015 11:20 AM, Martijn Brinkers wrote:

Can you send me digitally signed message directly (i.e., off-list) so I
can see what the message looks like

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail