Configuring S/MIME

[Gerard]

I finally got alpine built on my FBSD-6.3 machine with 's/mime'
support. I seem to be having a configuration problem though. I followed
the instruction (I think) but I still receive an error message:

[Couldn't find the certificate needed to sign.]

This is a Thawte email certificate. I placed my key in
the .alpine-smime/private directory with the '.key' suffix; i.e.;

gerard-i/lr6ldA/***@public.gmane.org

I placed the two certificates that accompanied my certificate from
Thawte in the 'ca' directory. I removed the '.pem' suffix and replaced
it with '.crt' for both of them.

Is there anything else I should be doing to get this to work?

Thanks!

[Steven W. Orr]

I don't have a clue how to help you, but one trick that's helpful is to
run strace alpine. That way you get to see all the system calls and which
ones failed. *Usually* looking for open calls that fail can be
illuminating.





I finally got alpine built on my FBSD-6.3 machine with 's/mime'
support. I seem to be having a configuration problem though. I followed
the instruction (I think) but I still receive an error message:

[Couldn't find the certificate needed to sign.]

This is a Thawte email certificate. I placed my key in
the .alpine-smime/private directory with the '.key' suffix; i.e.;

gerard-i/lr6ldA/***@public.gmane.org

I placed the two certificates that accompanied my certificate from
Thawte in the 'ca' directory. I removed the '.pem' suffix and replaced
it with '.crt' for both of them.

Is there anything else I should be doing to get this to work?

Thanks!
--
Gerard
gerard-i/lr6ldA/***@public.gmane.org

[Andrew Daviel]

Post by Gerard
I finally got alpine built on my FBSD-6.3 machine with 's/mime'
support. I seem to be having a configuration problem though. I followed
[Couldn't find the certificate needed to sign.]
This is a Thawte email certificate. I placed my key in
the .alpine-smime/private directory with the '.key' suffix; i.e.;
I placed the two certificates that accompanied my certificate from
Thawte in the 'ca' directory. I removed the '.pem' suffix and replaced
it with '.crt' for both of them.

I just got this to work on Alpine 2.0, from alpine-2.00-1.fc9.x86_64.rpm
under Fedora Core 9. YMMV.

A PEM certificate for the signing authority CA in /etc/pki/tls/certs/
with its hash softlinked to it. I had to extract it individually from the
bundle, then do
# cd /etc/pki/tls/certs/
# ln -sf example.pem `openssl x509 -noout -hash -in example.pem`.0

A user key file in .alpine-smime/private, mode 600
A user crt file in .alpine-smime/private, mode 644

A user crt file in .alpine-smime/public, mode 644 - that may have been
placed there by Alpine when I read some mail to myself

openssl x509 -noout -issuer_hash -in user-***@public.gmane.org
shows the issuer hash which should match the hash of the CA in
/etc/pki/tls/certs/


vote for https://bugzilla.mozilla.org/show_bug.cgi?id=275630

[GESBBB]

Post by Andrew Daviel

Post by Gerard
I finally got alpine built on my FBSD-6.3 machine with 's/mime'
support. I seem to be having a configuration problem though. I followed
[Couldn't find the certificate needed to sign.]
This is a Thawte email certificate. I placed my key in
the .alpine-smime/private directory with the '.key' suffix; i.e.;
I placed the two certificates that accompanied my certificate from
Thawte in the 'ca' directory. I removed the '.pem' suffix and replaced
it with '.crt' for both of them.

I just got this to work on Alpine 2.0, from alpine-2.00-1.fc9.x86_64.rpm
under Fedora Core 9. YMMV.
A PEM certificate for the signing authority CA in /etc/pki/tls/certs/
with its hash softlinked to it. I had to extract it individually from the
bundle, then do
# cd /etc/pki/tls/certs/
# ln -sf example.pem `openssl x509 -noout -hash -in example.pem`.0
A user key file in .alpine-smime/private, mode 600
A user crt file in .alpine-smime/private, mode 644
A user crt file in .alpine-smime/public, mode 644 - that may have been
placed there by Alpine when I read some mail to myself
shows the issuer hash which should match the hash of the CA in
/etc/pki/tls/certs/

...

Thanks; however, I got this to work quite some time ago. I don't believe I did it exactly the way you described though. I would have to go back over my installation and check. In any event, since Alpine does not work with the Yahoo mail system, it has become impractical for me to continue to  employ its use. In fact, it has been several months since I have.