Re: Sign mails with a S/Mime certificate from an EID card...
Hi, ,- - [ Le lundi 5 mars 2007 vers 1:00 Roelof Otten écrivait: ] - - | > Being supported by windows doesn't mean it's a public format. Windows > supports lots of proprietary formats. Is it supported by mac or Linux? Yes, it's fully supported by Mac and Linux. But when i say that the reader is "standard", i mean that the use of the reader should be fully transparent for any application using the standards API of Windows. The problem does not come from the reader itself, it come from the fact that the certificate does not certify an email address. You can use any other certificate with no email address defined, you will suffer the same problem with TB!. | `- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Best regards... _ (_' L'informatique est ma passion, vous la simplifier, mon métier ! ,_)téphane Bouvard [antarex AT freenet DOT be] http://www.antarex.be Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hello Stephane, This is gettin OT. Sunday, March 4, 2007, 4:18:06 PM, you wrote: SBM> In Belgium, it's the only legaly accepted way to send official emails to SBM> any official service, an email signed with an EID is equivalent of a SBM> signed snail mail. Most of this "signed snail mail" doesn't constitute any kind of proof either. I was obliged to have a card reader from day one, when actually only some civil servants had an EID. Euphemistically speaking, I'm not impressed by the EID. -- Best Wishes, Mark using The Bat! 3.98.3 Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hallo Stephane, On Sun, 4 Mar 2007 16:18:06 +0100GMT (4-3-2007, 16:18 +0100, where I live), you wrote: SB> Hi, SB> ,- - [ Le samedi 3 mars 2007 vers 10:07 Roelof Otten écrivait: ] - - SB> | >> Consider it to be a feature helping TB!-users from doing stupid things! [moderator on] Please keep your quotes straight. That quote didn't come from the message you were replying to, nor was it written by me. [moderator off] -- Groetjes, Roelof Error 99: Dead mouse in hard drive. http://www.voormijalleen.nl/ The Bat! 3.98.2 Windows XP 5.1 Build 2600 Service Pack 2 1 pop3 account, server on LAN OTFE enabled P4 3GHz 2 GB RAM pgpYnG19cbH7p.pgp Description: PGP signature Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hallo Stephane, On Sun, 4 Mar 2007 16:18:06 +0100GMT (4-3-2007, 16:18 +0100, where I live), you wrote: >> read with a special card reader. SB> With a standard electronic card reader, it's not a proprietary SB> one, it's a reader recognised by Windows, integrated with the CryptoAPI of windows. Being supported by windows doesn't mean it's a public format. Windows supports lots of proprietary formats. Is it supported by mac or Linux? -- Groetjes, Roelof Win95 -Microsoft. Lose$95 -Usenet Oracle. http://www.voormijalleen.nl/ The Bat! 3.98.2 Windows XP 5.1 Build 2600 Service Pack 2 1 pop3 account, server on LAN OTFE enabled P4 3GHz 2 GB RAM pgpKB7mFuL9AZ.pgp Description: PGP signature Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hi, ,- - [ Le samedi 3 mars 2007 vers 10:07 Roelof Otten écrivait: ] - - | HDB>> Did you import that S/MIME (X.509) certificate into The Bat? > If I understood it correctly, they've got a hardware card, that can be An identity card is hardware, of course :) But i do not see how to import the certificate into TheBat!... the certificate is imported in the certificate repository of Windows, and TB! is configured to use the Windows CryptoAPI... > read with a special card reader. With a standard electronic card reader, it's not a proprietary one, it's a reader recognised by Windows, integrated with the CryptoAPI of windows. Those card include a certificate wich can be imported in windows, and should be available for any program using the CryptoAPI : this certificate is visible into the certificate manager of Windows as "personnal certificate". Even TheBat! recognize this API : in the S/Mime settings, when MS CryptoAPI is selected, i can choose "Belgium Identity Card CSP" as crypto service provider. The only problem is that those certificate does not mention any email address, and TheBat does not allow to select a certificate manually : TheBat! only allow to select a certificate mentionning the same email address as the one used to send the mail... and as the EID certificate does not mention any email, TheBat! does not find the cetrificate as valid. > Consider it to be a feature helping TB!-users from doing stupid things! In Belgium, it's the only legaly accepted way to send official emails to any official service, an email signed with an EID is equivalent of a signed snail mail. | `- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- Best regards... _ (_' L'informatique est ma passion, vous la simplifier, mon métier ! ,_)téphane Bouvard [antarex AT freenet DOT be] http://www.antarex.be Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hello Roelof, Saturday, March 3, 2007, 10:07:01 AM, you wrote: RO> If I understood it correctly, they've got a hardware card, that can be RO> read with a special card reader. That's how I understood it in the RO> past. And AAFAIK TB doesn't support that. Consider it to be a feature helping TB!-users from doing stupid things! -- Best Wishes, Mark using The Bat! 3.98.3 Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: Sign mails with a S/Mime certificate from an EID card...
Hello Henk, HMdB> Did you import that S/MIME (X.509) certificate into The Bat? I Thunderbird it works and there I have to "Load a secutity devic" in fact a dll-file. But I don't see that possibility in The Bat -- Best regards, Patrick Using The Bat! v3.98.1 on Windows XP 5.1 Build 2600 Service Pack 2 Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: Sign mails with a S/Mime certificate from an EID card...
Hello Roelof, RO> If I understood it correctly, they've got a hardware card, that can be RO> read with a special card reader. That's how I understood it in the RO> past. And AAFAIK TB doesn't support that. Thanks for clearing this out. -- Best regards, Patrick Using The Bat! v3.98.1 on Windows XP 5.1 Build 2600 Service Pack 2 Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hallo Henk, On Sat, 3 Mar 2007 05:10:07 +0100GMT (3-3-2007, 5:10 +0100, where I live), you wrote: SBM>>> I've allready asked long time ago, in Belgium we have Electronic SBM>>> Identity Cards, those cards include a certificate allowing normally to sign emails... PN>> I have the same question, PN>> see my email to the list on 25/02/2007 PN>> subject : Unable to sign with pkcs#11 or what am I doing wrong ? PN>> but there is still no reaction HDB> Did you import that S/MIME (X.509) certificate into The Bat? If I understood it correctly, they've got a hardware card, that can be read with a special card reader. That's how I understood it in the past. And AAFAIK TB doesn't support that. -- Groetjes, Roelof FIDO: Fading Into Discreet Obsolescence http://www.voormijalleen.nl/ The Bat! 3.96.15 Windows XP 5.1 Build 2600 Service Pack 2 1 pop3 account, server on LAN OTFE enabled P4 3GHz 2 GB RAM pgptGUq14JoED.pgp Description: PGP signature Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
On Sat, 3 Mar 2007 00:13:59 +0100GMT (3-3-2007, 0:13 +0200, where I live), Patrick Nijs wrote: SBM>> I've allready asked long time ago, in Belgium we have Electronic SBM>> Identity Cards, those cards include a certificate allowing normally to sign emails... PN> I have the same question, PN> see my email to the list on 25/02/2007 PN> subject : Unable to sign with pkcs#11 or what am I doing wrong ? PN> but there is still no reaction Did you import that S/MIME (X.509) certificate into The Bat? -- grtz, Henk M. de Bruijn __ The Bat! E-Mail System version 3.98.3 Pro on Windows XP SP2/OTFE enabled PGPkey at: http://www.biglumber.com/x/web?qs=0X11EECBEEB464DD0F Gossamer Spider Web of Trust http://www.gswot.org An innovative and progressive OpenPGP Web of Trust smime.p7s Description: S/MIME Cryptographic Signature Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Sign mails with a S/Mime certificate from an EID card...
Hello Stephane, SBM> I've allready asked long time ago, in Belgium we have Electronic SBM> Identity Cards, those cards include a certificate allowing normally to sign emails... I have the same question, see my email to the list on 25/02/2007 subject : Unable to sign with pkcs#11 or what am I doing wrong ? but there is still no reaction -- Best regards, Patrick Using The Bat! v3.98.1 on Windows XP 5.1 Build 2600 Service Pack 2 Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
Sign mails with a S/Mime certificate from an EID card...
Hi, I've allready asked long time ago, in Belgium we have Electronic Identity Cards, those cards include a certificate allowing normally to sign emails... The problem : this certificate only certify my name, of course, and not a specific email address, as it's an official and legal personnal certificate... when i try to sign an email using TheBat!, TB search a certificate for my email address, and of course is unable to find my certificate as this is without any email address specified... Is there any possibility to tell TB that i still want to sign my emails using this certificate ? It do now a couple of years that EID cards where legaly implemented, can we expect an update someday to support this kind of security in TB ? It's really annoing that to send a legal email i need to use Outlook :( -- Best regards... _ (_' L'informatique est ma passion, vous la simplifier, mon métier ! ,_)téphane Bouvard [antarex AT freenet DOT be] http://www.antarex.be Current version is 3.98 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
