How many other milters are there after the signing milter?
If there are none, then your signing milter is defective
(produces an incorrect signature).
I've got to run for the train, and I will be offline for the
rest of the day.
Wietse
Sebastian Nielsen:
> Done. Here is a mail right before signing, and then a mail right after
> signing.
> The mail are signed without -b parameter and it fails validation.
>
> test.eml is just before its sent into signing-milter, and test2.eml is right
> after. Both were extracted out of the queue.
>
> -----Ursprungligt meddelande-----
> From: Wietse Venema
> Sent: Wednesday, March 04, 2015 10:19 PM
> To: Postfix users
> Subject: Re: Have tested lots of solutions now with signing-milter. What is
> the problem?
>
> Please grab a copy of the signing milter's output by freezing the
> message in the mail queue:
>
> # postconf header_checks=static:hold
> # postfix reload
>
> You can extract the message from the queue file with
>
> # postcat -bhq queueid | smime-verifier...
>
> If the S/Mime signature is invalid at this point then the message
> is invalid as comes out of the signing milter.
>
> If the S/Mime signature is valid, save a copy of the queue file and
> let the message be delivered:
>
> # postsuper -H queueid
> # postfix flush
>
> See if the S/Mime signature is still valid. If it is not, use diff
> to compare the message with the output that that got earlier with
> postcat.
>
> Wietse
[ Attachment, skipping... ]
[ Attachment, skipping... ]
