The mailing list for listmasters using Sympa

[Julie Lin <address@concealed>]

Hi

I have a valid and verified cert with correct chain, but am still failing to
sign a message

Here is sympa config
## Path to OpenSSL
## Sympa knowns S/MIME if openssl is installed
openssl /usr/bin/openssl

## The directory path use by OpenSSL for trusted CA certificates
#capath /home/sympa/etc/ssl.crt
capath  /etc/ssl/certs

##  This parameter sets the all-in-one file where you can assemble the
Certifica
tes of Certification Authorities (CA)
#cafile /usr/local/apache/conf/ssl.crt/ca-bundle.crt
cafile  /home/sympa/default/sympa.crt

[root@default]# openssl verify sympa.crt
sympa.crt: OK

however, I get these sympa errors when trying to sign.... why?

Verification failure
140256725759816:error:21075075:PKCS7 routines:PKCS7_verify:certificate
verify error:pk7_smime.c:342:Verify error:self signed certificate in
certificate chain
0 semi-random bytes loaded
unable to load signing key file
unable to write 'random state'
140370687039304:error:06065064:digital envelope
routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:535:
140370687039304:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12
cipherfinal error:p12_decr.c:97:
140370687039304:error:2306A075:PKCS12
routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:p12_decr.c:123:
140370687039304:error:0907B00D:PEM routines:PEM_READ_BIO_PRIVATEKEY:ASN1
lib:pem_pkey.c:132:
0 semi-random bytes loaded
unable to load signing key file
unable to write 'random state'
139798577686344:error:06065064:digital envelope
routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:535:
139798577686344:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12
cipherfinal error:p12_decr.c:97:
139798577686344:error:2306A075:PKCS12
routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:p12_decr.c:123:
139798577686344:error:0907B00D:PEM routines:PEM_READ_BIO_PRIVATEKEY:ASN1
lib:pem_pkey.c:132:
Verification failure
140068653176648:error:21075075:PKCS7 routines:PKCS7_verify:certificate
verify error:pk7_smime.c:342:Verify error:self signed c

Attachment: smime.p7s
Description: S/MIME cryptographic signature