ukoeppe wrote:
>
> Hi, I got a problem with ie5 which makes me a little nervous. I can encrypt
> and sign messages and send them to someone with an IE5 (verisign key on the
> other side), my own key and cert are homemade with openssl. No problem.
>
Well IE5 doesn't handle email so I presume you mean something like
Outlook or Outlook express.
> But if the other party answers with an encrypted and signed message using
> IE5 and I decrypt the message with openssl I just get some undecipherable
> code as output (no error message). If the message in IE5 was only encrypted
> and NOT signed, I can decrypt it on my side with no problem at all.
>
What do you mean by "undecipherable code"?
Is it just binary gibberish or does it look like a base64 encoded
messsage?
If its base64 then you should be able to pass it through smime -verify
to extract the original content.
If this is the case then you friend has the 'opaque signing' option set.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]