SMIME digital signatures in HTML formatted emails show tampering

[iulistadmin]

HTML-formatted emails distributed through Sympa may display an error stating that the message has been tampered with since it was signed. The original signing certificate is intact in the email, and viewing the certificate shows that the certificate matches the original sender, but the warning gives recipients pause. Plain text and rich text emails do not appear to be affected. The issue has been replicated in multiple clients. Our installation is Sympa 6.1.11 on RHEL 6 using Postfix MTA. We have asked the user community for assistance, but we received no response.

[ikedas]

Hi,

Possiblly Sympa 6.2.x may not break signed messages.
https://sourcesup.renater.fr/tracker/index.php?func=detail&aid=8416&group_id=23&atid=167
https://sourcesup.renater.fr/tracker/index.php?func=detail&aid=10573&group_id=23&atid=167

Please check it.

If you encounter the problem with recent version of Sympa, please show us some samples of messages.

(Update: 28 May added a link in PGP/MIME case)

[iulistadmin]

Thank you. We weren’t aware this was corrected in the newer release. We do want to upgrade, and this gives us even more reason to do so. From: IKEDA Soji <[email protected]> Reply-To: sympa-community/sympa <[email protected]> Date: Saturday, May 27, 2017 at 8:27 PM To: sympa-community/sympa <[email protected]> Cc: IU List Administrator <[email protected]>, Author <[email protected]> Subject: Re: [sympa-community/sympa] SMIME digital signatures in HTML formatted emails show tampering (#16) Hi, Possiblly Sympa 6.2.x may not break S/MIME messages. https://sourcesup.renater.fr/tracker/index.php?func=detail&aid=8416&group_id=23&atid=167 Please check it. If you encounter the problem with recent version of Sympa, please show us some samples of messages. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[ikedas]

No more report. This issue is closed by now.