Package: thunderbird
Version: 1:68.5.0-1+b1
Severity: normal
Tags: security
A pkcs7 s/mime signature is not recognized by the client. I compared what is
the difference between a recognized and an unrecognized signature.
correctly recognized:
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=SHA1; boundary="----=_NextPart_000_0000_01D6040E.23370570"
MIME-Version: 1.0
...
------=_NextPart_000_0000_01D6040E.23370570
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
----------------------------------------------------------------------------------------------------------
not recognized:
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
boundary="--=_V1R2=_=q1202.27865.7237_1"
MIME-Version: 1.0
...
----=_V1R2=_=q1202.27865.7237_1
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
----------------------------------------------------------------------------------------------------------
The source code of the email does not differ anywhere else. In the past, he
still displayed the smime.p7s attachment for such undetected signatures, which
he no longer does. By the way, the manufacturer of the outlook plugin "cv act s
/ mail" for signing writes that he did everything correctly and the email
client (thunderbird) has to be checked.
the error occurs with a Thunderbird 68.5.0 under debian Linux (Bullseye).
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.5.0-1-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages thunderbird depends on:
ii debianutils 4.9.1
ii fontconfig 2.13.1-2+b1
ii libatk1.0-0 2.36.0-2
ii libc6 2.30-4
ii libcairo-gobject2 1.16.0-4
ii libcairo2 1.16.0-4
ii libdbus-1-3 1.12.16-2
ii libdbus-glib-1-2 0.110-5
ii libevent-2.1-7 2.1.11-stable-1
ii libffi7 3.3-4
ii libfontconfig1 2.13.1-2+b1
ii libfreetype6 2.10.1-2
ii libgcc-s1 10-20200411-1
ii libgdk-pixbuf2.0-0 2.40.0+dfsg-4
ii libglib2.0-0 2.64.1-1
ii libgtk-3-0 3.24.18-1
ii libgtk2.0-0 2.24.32-4
ii libicu63 63.2-3
ii libjsoncpp1 1.7.4-3.1
ii libnspr4 2:4.25-1
ii libnss3 2:3.49.1-1
ii libpango-1.0-0 1.42.4-8
ii libsqlite3-0 3.31.1-4
ii libstartup-notification0 0.12-6
ii libstdc++6 10-20200411-1
ii libvpx6 1.8.2-dmo1
ii libx11-6 2:1.6.9-2
ii libx11-xcb1 2:1.6.9-2
ii libxcb-shm0 1.14-2
ii libxcb1 1.14-2
ii libxext6 2:1.3.3-1+b2
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1+b3
ii psmisc 23.3-1
ii x11-utils 7.7+5
ii zlib1g 1:1.2.11.dfsg-2
Versions of packages thunderbird recommends:
ii hunspell-de-at [hunspell-dictionary] 20161207-7
ii hunspell-de-ch [hunspell-dictionary] 20161207-7
ii hunspell-de-de [hunspell-dictionary] 20161207-7
ii lightning 1:68.5.0-1
Versions of packages thunderbird suggests:
pn apparmor <none>
ii fonts-lyx 2.3.4.2-2
ii libgssapi-krb5-2 1.17-7
-- no debconf information