<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hello,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>OS and RT4 Info:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'>Debian GNU/Linux 7 (wheezy)<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>Apache/2.2.22 (Debian)<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>PHP 5.5.26-1~dotdeb+7.4<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>Request Tracker 4.2.11<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am attempting to configure S/MIME support in my RT4 instance, and I have every piece working other than the verification of signatures on incoming email. Signing outbound emails is working perfectly, and signatures are processed on incoming mail as well. However, all signatures are being shown as untrusted, with a message such as this: “SMIME: The signature is good, signed by "Zoey Schutt" , trust is none”.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Similarly, the keys and certificates I have loaded to sign outgoing messages are showing as issued by blank, such as this one:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><table class=MsoNormalTable border=0 cellpadding=0><tr><td colspan=2 style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=center style='text-align:center'><b><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>SMIME key '"Zoey Schutt" <webmaster@braincoral.io> (issued by )'<o:p></o:p></span></b></p></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=center style='text-align:center'><b><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>Fingerprint:<o:p></o:p></span></b></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>76c140826f39d9d66ae4dc40328c0f23c177d0ca<o:p></o:p></span></p></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=center style='text-align:center'><b><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>Created:<o:p></o:p></span></b></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>Mon Jul 06 2015<o:p></o:p></span></p></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=center style='text-align:center'><b><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>Expire:<o:p></o:p></span></b></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>Thu Jul 06 2017<o:p></o:p></span></p></td></tr><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=center style='text-align:center'><b><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>User:<o:p></o:p></span></b></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'>"Zoey Schutt" <webmaster@braincoral.io><o:p></o:p></span></p></td></tr></table><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>All of the keys I have been using to test this are valid and certified by StartCom Class 2. My configuration is as such:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'>Set(@MailPlugins, 'Auth::MailFrom', 'Auth::Crypt');<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>Set(%SMIME,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Enable => 1,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> OpenSSL => 'openssl',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Keyring => q{var/data/smime},<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> CAPath => '/opt/rt4/var/data/smime-roots',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> AcceptUntrustedCAs => 1,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Passphrase => {<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> 'webmaster@braincoral.io' => 'REMOVED',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> 'support@braincoral.io' => 'REMOVED',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> '' => 'fallback',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> },<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>);<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>Set(%Crypt,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Incoming => ['SMIME', 'GnuPG'],<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Outgoing => 'SMIME',<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'> RejectOnUnencrypted => 0,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> RejectOnMissingPrivateKey => 1,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> RejectOnBadData => 1,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'> AllowEncryptDataInDB => 0,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'> Dashboards => {<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Encrypt => 0,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> Sign => 0,<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'> },<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>);<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><p class=MsoNormal>I have attached a list of the contents of var/data/smime-roots to a text file on this email. The contents are just a copy of the /etc/ssl/certs directory of my server, with c_rehash run on it. I have tried the configuration with a trailing slash and without on CAPath, and neither have worked.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any assistance would be greatly appreciated!<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Zoey Schutt<o:p></o:p></p><p class=MsoNormal>Braincoral Technology<o:p></o:p></p></div></body></html>