Jean-Marc Desperrier wrote: > Michael Ströder wrote: >> I switched back to use SHA-1 and the very same >> e-mails are now correctly validated in Seamonkey 1.1.18 and 2.0. > > So they were not before ?
Yes, the S/MIME signatures with SHA-256 were not correctly validated by Seamonkey (and Outlook). But I was not sure whether there might have been also some another problem. > So you already know the answer ? Yes, now I know the answer: Setting signature hash algorithm to SHA-1 without changing anything else during generating the S/MIME message solved the issue of Seamonkey (and Outlook) indicating the signature being invalid. > And should open a bug :-) Against which component? Is it rather a matter of Seamonkey using an old libnss without SHA-256 support? Ciao, Michael. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto