Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 166003 - Evolution 2.8.2.1 never trusts own s/mime certificate
Summary: Evolution 2.8.2.1 never trusts own s/mime certificate
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] GNOME (show other bugs)
Hardware: AMD64 Linux
: High major (vote)
Assignee: Gentoo Linux Gnome Desktop Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-02-08 21:43 UTC by Dirk Salewski
Modified: 2007-04-03 20:07 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Salewski 2007-02-08 21:43:59 UTC
On trying to sign a message with evolution 2.8.2.1 You get the following error message: 

++++++++++++++++++++++++++++++++++++++++
Unable to create the message.

Unable to add the SMIMEEncKeyPrefs attribute, you should need to select a different mail options. 
++++++++++++++++++++++++++++++++++++++++

Looking into Edit > Options > Certificates you see that your own certificate has only "Encrypt" activated as possible use, not "sign, encrypt". 

Upgrading to Evolution 2.8.2.1-r1 partly solves the problem - signing at least works now, but my own certificate is still being shown as useful for encrypting only. 

This may be related to the bug described by SuSE Linux here: https://lists.uni-koeln.de/pipermail/sec-info/Week-of-Mon-20041129/004255.html

Reproducible: Always




In my opinion this is quite a serious bug, since evolution is meant to be used in corporate environments, too. Depending on the company digital signing might be essential (e.g. banks, insurance companies and the like). Therefor I set the Severity to major.
Comment 1 Daniel Gryniewicz (RETIRED) gentoo-dev 2007-02-08 21:51:14 UTC
How is the cert generated?  I can sign with several certs, so it's not a general problem.  The link is not in english, so it doesn't help me at all.
Comment 2 Dirk Salewski 2007-02-09 20:22:05 UTC
(In reply to comment #1)
> The link is not in english, so it doesn't help me at all.

Only the first part is german - scroll down and you will see the english text. 

The cert has been issued by TC Trustcenter GmbH (GmbH is german style of Ltd.) and I can use it for signing and encrypting email. The english website is here: http://www.trustcenter.de/en/index.htm

For you don't have that problem I will rebuild evolution 2.8.2.1 now (downgrading from 2.8.2.1-r1), to see whether it was only a broken dependency (but i doubt that, since revdep-rebuild didn't say so). I'll post the results asap.
Comment 3 Peter Volkov (RETIRED) gentoo-dev 2007-04-01 16:43:49 UTC
Dirk, any progress here? I can not reproduce this bug also...
Comment 4 Dirk Salewski 2007-04-03 20:07:31 UTC
(In reply to comment #3)
No, sorry, I did a (long scheduled) reinstall of gentoo and can't reproduce the bug now. Must have been some busted link to OpenSSL or something.