Please grab a copy of the signing milter's output by freezing the
message in the mail queue:
# postconf header_checks=static:hold
# postfix reload
You can extract the message from the queue file with
# postcat -bhq queueid | smime-verifier...
If the S/Mime signature is invalid at this point then the message
is invalid as comes out of the signing milter.
If the S/Mime signature is valid, save a copy of the queue file and
let the message be delivered:
# postsuper -H queueid
# postfix flush
See if the S/Mime signature is still valid. If it is not, use diff
to compare the message with the output that that got earlier with
postcat.
Wietse
