Menu ▾ ▴

#365 I cannot sign with GPG inline and S/MIME at the same time

wont-fix
nobody
None
1.7.2
Minor
31.2.0
1.4.16
Linux
---
nobody
2014-11-15
2014-11-15
Fernando Acero Martin
No

Dear all:

I am a Linux Ubuntu 14.04 LTS user and I was signing all my emails with GPG inline and S/MIME (using a CACERT key) at the same time and without problems. I was using this procedure for years with Linux Mandriva and Kubuntu and it was very convenient for me. Everybody could considered the confidence of my GPG public key using a third part of confidence (CACERT or Spanish CA FNMT) and without the necessity of an signing meeting for face to face identity confirmation.

But since yesterday and after an upgrade from Ubuntu of the enigmail package, if I select S/MIME my GPG in line signature is no present. After this problem I removed this package form my system and installed the package from the enigmail project web page with identical behavior. I cannot use at the same time GPG in line signature, with a S/MIME signature.

I understand that PGP/MIME and S/MIME are incompatible by concept, but a concurrent or dual signature with GPG in line first and then with S/MIME, could be very interesting for confidence purposes as I said before or for security, because a signature (S/MIME) is made over the other one (GPG in line).

If I force the configuration:

Enigmail/Message will be signed (Force signing)
Enigmail/Inline PGP wil be used (Force inline PGP)
S/MIME/ Sign digitally this message (This message is in Spanish)

I got an error window with this message in Spanish:

"Ha activado PGP/MIME y S/MIME al mismo tiempo. Desafortunadamente no es posible soportar ambos protocolos al mismo tiempo. Por favor seleccione si desea usar PGP/MIME o S/MIME."

In English;

"You have activated PGP/MIME and S/MIME at the same time. Unfortunately is no possible to support both protocols at the same time. al mismo tiempo. Please select if you want to use PGP/MIME or S/MIME."

However I had selected Inline PGP option as I used before without problems.

I also noticed that my user interface for enigmail is in English (my Thunderbird is Spanish). If I try to install the Spanish enigmail version from Babelzilla http://beta.babelzilla.org/projects/p/Enigmail/language/es-ES/, I got that this version is incompatible with my Thunderbird version.

Please let me know if you need another information of if you need more testing with my configuration.

PD: Please I want apologize about uncontrolled proliferation of messages on this thread, but I don't know how delete unwanted messages and when I have tried to fix this I have finished creating another one.

Best regards.

6 Attachments
enigcmd.txt
enigdbug.txt
enigenv.txt
enigerr.txt
eniginp.txt
enigout.txt

Discussion

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15

    This is an example of an message with GPG in line and S/MIME signatures at the same time. In this case S/MIME signature is made with a certificate form the Spanish CA "Fábrica Nacional de Moneda y Timbre". This message was the last created with the former enigmail version. As you can see, there is no information about the enigmail version used into the message header, and there are two signatures, a GPG in line and another one S/MIME.

    Best regards

    From - Mon Nov 03 21:47:40 2014
    X-Mozilla-Status: 0001
    X-Mozilla-Status2: 00800000
    X-Mozilla-Keys:
    Message-ID: 5457E9EA.9060608@gmail.com
    Date: Mon, 03 Nov 2014 21:47:38 +0100
    From: =?UTF-8?B?RmVybmFuZG8gQWNlcm8gTWFydMOtbg==?= facemar@gmail.com
    User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.2.0
    MIME-Version: 1.0
    To: Fernando Acero Martin facemar@gmail.com
    Subject: Hackear de forma remota un ordenador sin Internet es posible
    Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms070303090505000302070802"

    This is a cryptographically signed message in MIME format.

    --------------ms070303090505000302070802
    Content-Type: text/plain; charset=utf-8
    Content-Transfer-Encoding: quoted-printable

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    http://www.adslzone.net/2014/11/03/hackear-de-forma-remota-un-ordenador-s=
    in-internet-es-posible/

    iQIcBAEBCgAGBQJUV+noAAoJEMQuviy+c1qZrUYP/1WGT1caWp7d0ESVfRBz/GYy
    tIaPfa/OILadjhHdY8uM6MKr00uf86kVOPONqvBojnCWhWfPCAJWKiFQuTqTY1Yz
    Ln0VVxtiVvnJs70Yo/AFNi1RIJMR/4GPsKXblBGmy1JGpu+m55jOLEkvghQKqDSO
    r/neIg8j0xNszbhHDfKAMwX6752aDVZhSMciXpLTTWRiV23rPXt/I6VlYrVbB71F
    S9j5CZdqM8LxAjszQDR3FnWpAP6Z5Tv6D0+5N90SryX89csolv8HD07Yb8VEjGIp
    JzawKHNKhD6wF3GZYkjZdvSzl2rlumywQ9e49buhZEaV0vvRqRjFey9RgjBC0ieV
    EAsVTimIPnbjtnBZlxAA+v8Cv2KDMY2jg22R/RumLkMyBojUQ6TKvFCet44zESkt
    Pwlkxdpt9tI0+Xyygjej4mWILf1xs1rZsbfUTD1Rmgahtu2ZX2XyR3l1tO3MmJCD
    2TifDBzZC5IiWF6VQP0ieAGCxQfwPYjd03cTG6WfAVP8OiTmgBA8kiCWdQxjYO6l
    7FBr+KOLgWka4edkUEGDwpSCZMmvP2ZzFtVkZoMV9nDQSXOS21UAujsHjr3DYRDj
    i7JTn4bZ8NF/ABoq9zMqb5NwTo2gcGTBB07WlUV+XDZroKqmr/mK0z7ebxmkmkQN
    Cg6FGBbFDV7D6coKfI9N
    =3DoMoD
    -----END PGP SIGNATURE-----

    --------------ms070303090505000302070802
    Content-Type: application/pkcs7-signature; name="smime.p7s"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment; filename="smime.p7s"
    Content-Description: Firma criptográfica S/MIME

    MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIFzjCC
    BcowggUzoAMCAQICBD0Fm14wDQYJKoZIhvcNAQEFBQAwNjELMAkGA1UEBhMCRVMxDTALBgNV
    BAoTBEZOTVQxGDAWBgNVBAsTD0ZOTVQgQ2xhc2UgMiBDQTAeFw0xNDAxMDcyMDI3NDdaFw0x
    NzAxMDcyMDI3NDdaMIGJMQswCQYDVQQGEwJFUzENMAsGA1UEChMERk5NVDEYMBYGA1UECxMP
    Rk5NVCBDbGFzZSAyIENBMRIwEAYDVQQLEwk1MDAwNTEzNTIxPTA7BgNVBAMTNE5PTUJSRSBB
    Q0VSTyBNQVJUSU4gRkVSTkFORE8gQU5UT05JTyAtIE5JRiA1MTY0MTQ3OVEwggEiMA0GCSqG
    SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmplSUSzJG0bFYGyJStqqiIGMo6a/CrRSidj6pq06X
    +TFxzPpvwkgfoDg3lPwSosN5yT7HhAIejK03CZCPZm+G+mpsyl/S3aKyvC71br0KPeT/s3tk
    DMNouUw2Wl7Bws1TqiuInpOGJIrRzQ2LzWvJs2J29TsfKvo1HP5rksuu0lD9KYBRNfs5UOPm
    0qu2SYyCqIfr1o7jfFRaYL54RNjTdZMdd9sxcVVN83VjAchg3Djh8hahVh/4kp0u5q7Zr4RE
    9Ks1OKCAN/zhyHduzqrsyMuV6NsLz0foubRGfLFx+8wV+27czUBly/zB7HqsaGTYSJZBRSKU
    MugRCb0WrV2rAgMBAAGjggMLMIIDBzCBiQYDVR0RBIGBMH+BEWZhY2VtYXJAZ21haWwuY29t
    pGowaDEYMBYGCSsGAQQBrGYBBBMJNTE2NDE0NzlRMRUwEwYJKwYBBAGsZgEDEwZNQVJUSU4x
    FDASBgkrBgEEAaxmAQITBUFDRVJPMR8wHQYJKwYBBAGsZgEBExBGRVJOQU5ETyBBTlRPTklP
    MAkGA1UdEwQCMAAwKwYDVR0QBCQwIoAPMjAxNDAxMDcyMDI3NDdagQ8yMDE3MDEwNzIwMjc0
    N1owCwYDVR0PBAQDAgWgMBEGCWCGSAGG+EIBAQQEAwIFoDAdBgNVHQ4EFgQUSDSVxHLWAQ/h
    fIsHtlL213IonrYwHwYDVR0jBBgwFoAUQJp2RJd0B8SsFMsejU86RXww12EwggExBgNVHSAE
    ggEoMIIBJDCCASAGCSsGAQQBrGYDBTCCAREwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuY2Vy
    dC5mbm10LmVzL2NvbnZlbmlvL2RwYy5wZGYwgdgGCCsGAQUFBwICMIHLGoHIQ2VydGlmaWNh
    ZG8gUmVjb25vY2lkbyBleHBlZGlkbyBzZWf6biBsZWdpc2xhY2nzbiB2aWdlbnRlLlVzbyBs
    aW1pdGFkbyBhIGxhIENvbXVuaWRhZCBFbGVjdHLzbmljYSBwb3IgdmFsb3IgbeF4aW1vIGRl
    IDEwMCBlIHNhbHZvIGV4Y2VwY2lvbmVzIGVuIERQQy5Db250YWN0byBGTk1UOkMvSm9yZ2Ug
    SnVhbiAxMDYtMjgwMDktTWFkcmlkLUVzcGHxYS4wHQYJKwYBBAGsZgEhBBAWDlBFUlNPTkEg
    RklTSUNBMC8GCCsGAQUFBwEDBCMwITAIBgYEAI5GAQEwFQYGBACORgECMAsTA0VVUgIBZAIB
    ADBcBgNVHR8EVTBTMFGgT6BNpEswSTELMAkGA1UEBhMCRVMxDTALBgNVBAoTBEZOTVQxGDAW
    BgNVBAsTD0ZOTVQgQ2xhc2UgMiBDQTERMA8GA1UEAxMIQ1JMMTM0NzkwDQYJKoZIhvcNAQEF
    BQADgYEADySvkT8naX2XBJQMfhIFLIOc1MZkaog5iT11gfMFsfQCN11dct/XEjuyjbn0J/hS
    65oTrS/F8qFFNPwVnI1Lk4Y5mYEQVJJrxIZZ7zwqR+Zcs5b7tvIjVofartAjZ6Ier1yhep24
    sGrnd+FW2xGNP5hUxWAt4gjPuuuXLaufD4kxggLUMIIC0AIBATA+MDYxCzAJBgNVBAYTAkVT
    MQ0wCwYDVQQKEwRGTk1UMRgwFgYDVQQLEw9GTk1UIENsYXNlIDIgQ0ECBD0Fm14wCQYFKw4D
    AhoFAKCCAWswGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTQx
    MTAzMjA0NzM4WjAjBgkqhkiG9w0BCQQxFgQUUmzeLLJKog7fI3d3O4KWpi/y2MIwTQYJKwYB
    BAGCNxAEMUAwPjA2MQswCQYDVQQGEwJFUzENMAsGA1UEChMERk5NVDEYMBYGA1UECxMPRk5N
    VCBDbGFzZSAyIENBAgQ9BZteME8GCyqGSIb3DQEJEAILMUCgPjA2MQswCQYDVQQGEwJFUzEN
    MAsGA1UEChMERk5NVDEYMBYGA1UECxMPRk5NVCBDbGFzZSAyIENBAgQ9BZteMGwGCSqGSIb3
    DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG
    9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwDQYJKoZI
    hvcNAQEBBQAEggEAcrRxK62mGRD71o0Lo8jpuXxC+ktcQ/kjFcjV5Z6QJncrvAuzQIPxy7jZ
    qk2SOA9twT3NX3BVDzd5r9Wqx2mNVpSCJGWPPuYs8AE8/zTvCSyiXXoPrcH5kSXDuyZkSAQe
    VEIcWFCN8IGsJDu/8GWOrRotfdkHWx1njaC9drnN4KZM0dHKHDxka70Ty9DvPViONEz6LdSd
    b+BbyL20T2Y2Ko4pRn8rpaCSmjHCk/bEZ0T3FGp2vyOCRJ1B25uoXF45ZdgD8/pnDNZWPRw5
    joSgZG0Flu/DbyIxvzShYW3GQdSuh9iw0v8og3kUqUppvoh7hFBKq6SbaC8ehweyZtOxggAA
    AAAAAA==
    --------------ms070303090505000302070802--

     

    Last edit: Fernando Acero Martin 2014-11-15

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
    • Description has changed:

    Diff:

    --- old
+++ new
@@ -6,8 +6,12 @@

 I understand that PGP/MIME and S/MIME are incompatible by concept, but a concurrent signature with GPG in line first and with S/MIME after, could be very interesting for confidence purposes as I said before or for security, because a signature (S/MIME) is made over the other one (GPG in line).

+If select 
+
 I also noticed that my user interface for enigmail is in English (my Thunderbird is Spanish). If I try to install the Spanish enigmail version from Babelzilla http://beta.babelzilla.org/projects/p/Enigmail/language/es-ES/, I got that this version is incompatible with my Thunderbird version.

 Please let me know if you need another information of if you need more testing with my configuration. 

+
+
 Best regards.
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
    • Description has changed:

    Diff:

    --- old
+++ new
@@ -1,17 +1,30 @@
 Dear all:

-I am a Linux Ubuntu 14.04 LTS user and I was signing all my emails with GPG inline and S/MIME (using a CACERT key) at the same time and without problems. I was using this procedure for years with Linux Mandriva and Kubuntu and it was very convenient for me. Everybody could considered the confidence of my GPG public key using a third part of confidence (CACERT) and without the necessity of an signing fest/party.
+I am a Linux Ubuntu 14.04 LTS user and I was signing all my emails with GPG inline and S/MIME (using a CACERT key) at the same time and without problems. I was using this procedure for years with Linux Mandriva and Kubuntu and it was very convenient for me. Everybody could considered the confidence of my GPG public key using a third part of confidence (CACERT or Spanish CA FNMT) and without the necessity of an signing meeting for face to face identity confirmation.

-But since yesterday and after an upgrade from Ubuntu of enigmail package, if I select S/MIME my GPG in line signature is no present. After this problem I removed this package form my system and installed the package from the enigmail project web page with identical behavior.
+But since yesterday and after an upgrade from Ubuntu of the enigmail package, if I select S/MIME my GPG in line signature is no present. After this problem I removed this package form my system and installed the package from the enigmail project web page with identical behavior. I cannot use at the same time GPG in line signature, with a S/MIME signature.  

-I understand that PGP/MIME and S/MIME are incompatible by concept, but a concurrent signature with GPG in line first and with S/MIME after, could be very interesting for confidence purposes as I said before or for security, because a signature (S/MIME) is made over the other one (GPG in line).
+I understand that PGP/MIME and S/MIME are incompatible by concept, but a concurrent or dual signature with GPG in line first and then with S/MIME, could be very interesting for confidence purposes as I said before or for security, because a signature (S/MIME) is made over the other one (GPG in line).

-If select 
+If I force the configuration: 
+
+Enigmail/Message will be signed (Force signing)
+Enigmail/Inline PGP wil be used (Force inline PGP)
+S/MIME/ Sign digitally this message (This message is in Spanish)
+
+I got an error window with this message in Spanish:
+
+"Ha activado PGP/MIME y S/MIME al mismo tiempo. Desafortunadamente no es posible soportar ambos protocolos al mismo tiempo. Por favor seleccione si desea usar PGP/MIME o S/MIME."
+
+In English;
+
+"You have activated PGP/MIME and S/MIME at the same time. Unfortunately is no possible to support both protocols at the same time.  al mismo tiempo. Please select if you want to use PGP/MIME or S/MIME."
+
+However I had selected Inline PGP option as I used before without problems.  

 I also noticed that my user interface for enigmail is in English (my Thunderbird is Spanish). If I try to install the Spanish enigmail version from Babelzilla http://beta.babelzilla.org/projects/p/Enigmail/language/es-ES/, I got that this version is incompatible with my Thunderbird version.

 Please let me know if you need another information of if you need more testing with my configuration. 


-
 Best regards.
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
     

  • Fernando Acero Martin

    Fernando Acero Martin - 2014-11-15
    • Description has changed:

    Diff:

    --- old
+++ new
@@ -26,5 +26,7 @@

 Please let me know if you need another information of if you need more testing with my configuration. 

+PD: Please I want apologize about uncontrolled proliferation of messages on this thread, but I don't know how delete unwanted messages and when I have tried to fix this I have finished creating another one. 
+

 Best regards.
     

  • Patrick Brunschwig

    Patrick Brunschwig - 2014-11-15
    • status: open --> wont-fix
     

  • Patrick Brunschwig

    Patrick Brunschwig - 2014-11-15

    This use-case is no longer supported, since several mail clients (especially on mobile devices) can't handle it properly.

     

  • Patrick Brunschwig

    Patrick Brunschwig - 2014-11-15

    Concerning Spanish, the downloads at Babelzilla are not usable in any way. The purpose of Babelzilla is not to offer localized versions of Enigmail; they just contain the translation. Spanish is contained in Enigmail; you should simply stick to the standard version of Enigmail.

     

Log in to post a comment.

MongoDB Logo MongoDB