The mail are signed without -b parameter and it fails validation.
test.eml is just before its sent into signing-milter, and test2.eml is right after. Both were extracted out of the queue.
-----Ursprungligt meddelande----- From: Wietse Venema
Sent: Wednesday, March 04, 2015 10:19 PM To: Postfix usersSubject: Re: Have tested lots of solutions now with signing-milter. What is the problem?
Please grab a copy of the signing milter's output by freezing the message in the mail queue: # postconf header_checks=static:hold # postfix reload You can extract the message from the queue file with # postcat -bhq queueid | smime-verifier... If the S/Mime signature is invalid at this point then the message is invalid as comes out of the signing milter. If the S/Mime signature is valid, save a copy of the queue file and let the message be delivered: # postsuper -H queueid # postfix flush See if the S/Mime signature is still valid. If it is not, use diff to compare the message with the output that that got earlier with postcat.Wietse
--- Begin Message ---test
--- End Message ---
--- Begin Message ---test
smime.p7s
Description: S/MIME cryptographic signature
--- End Message ---
smime.p7s
Description: S/MIME cryptographic signature