Skip to Content.
Sympa Menu

en - RE: [sympa-users] signed messages being rejected

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: "Dave S." <address@concealed>
  • To: "address@concealed" <address@concealed>
  • Subject: RE: [sympa-users] signed messages being rejected
  • Date: Thu, 23 Dec 2010 10:11:49 -0800

Hi, ty ty for replying. We have 6.1.3, the latest. I was able to get the .rpm
to install after going through all the perl dependencies.

I am actually a little farther along with the issue. Everything signed is
going through now, now that I have the proper cert and proper ca-bundle file
(was doing a bunch of command line testing), however nothing encrypted is
working. I am getting some errs after the encrypted message is rejected,
related to trying to find a cert under a sympa list. I created the dir and am
currently trying to procure the proper cert for the sympa user. Also when we
get a message from the list (crypt), we get some emails sent as 'crypt-owner'
using the cert for 'crypt', which doesn't match and Outlook flags the message
as insecure. I haven't yet tried to analyze which message come from
'crypt-owner'. In the logs it doesn't seem to be looking for a 'crypt-owner
cert and sends the message with the 'crypt' cert. One minor problem, after
adding a 2nd user for testing, another sysadmin, he pointed out the link for
the public cert for the list does not work. When I try to get it myself, the
logs complain it's not a DER format. If I convert it to a DER format, the
signed messages get rejected and it's apparently the same cert used there. I
ended up emailing him the proper cert so he could test.

Anyway, back to the encrypted message issue. When sending an encrypted
message, and with debug at 3, here are the messages I'm getting now. Before
and after the "Unable to send message to list crypt", I get no clues why it
might have been rejected. Before the message, everything seems good and
checks out;

Dec 22 19:22:44 lists-test sympa[20563]: debug Message::new() message
/address@concealed has been
decrypted
...
Dec 22 19:22:44 lists-test sympa[20563]: debug tools::smime_sign_check()
S/MIME signed message, signature checked and sender match signer(address@concealed)
...
Dec 22 19:22:44 lists-test sympa[20563]: debug Message::new() message
/address@concealed is signed,
signature is checked

Dec 22 19:22:44 lists-test sympa[20563]: notice main::DoFile() Processing
/address@concealed ; sender: Dave
S. <address@concealed>#012 ; message-id:
<address@concealed>#012
Dec 22 19:22:44 lists-test sympa[20563]: info main::DoMessage() Processing
message for crypt with priority 5,
<address@concealed>#012
Dec 22 19:22:44 lists-test sympa[20563]: err main::DoMessage()
sympa::DoMessage(): Unable to send message to list crypt


Dec 22 19:22:45 lists-test bulk[20569]: debug2 mail::reaper() Reaper unwaited
pids : #012Open = 0
Dec 22 19:22:45 lists-test bulk[20569]: debug2 List::init_list_cache()
List::init_list_cache()
...(does some maint stuff here, nothing related to message processing)

Dec 22 19:22:45 lists-test sympa[20563]: notice Moving bad file
address@concealed to bad/


Regards





Archive powered by MHonArc 2.6.19+.

Top of Page