S/MIME singing only works if mailbody is empty or has just one word
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 1k
- Forks
- 348
- Avg merge
- 12h 28m
- Merged PRs (30d)
- 91
Description
Steps to reproduce
- install a S/MIME Certificate
- add Cert to the Mail-Account
- Send a Mail "S/MIME signed" with no Text in the body => Works fine
- Send a Mail "S/MIME signed" with Text in the body => Singing invalid (view Sent-Folder)
See test results of "Test Signing 1" with empty mail body and "Test Signign 2" with filled mail body:
Expected behavior
Mails with Attachments and/or Text in Mailbody should be signed properly.
Actual behavior
For signed emails with attachments and/or text in the mail body, the signature verification fails.
Mail app version
mail: 3.7.2
Mailserver or service
No response
Operating system
archlinux arm
PHP engine version
PHP 8.3
Web server
Nginx
Database
MariaDB
Additional info
Hint: Mail encryption works as espected.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the failure with S/MIME-signed messages containing body text and attachments, comparing them with an empty message. Trace the signing and verification flow used by the Mail app. Done means signed messages with text and/or attachments verify successfully, while the existing empty-body case continues to work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100