MailMessage.CheckSignature Issue

Aspose.Email Product Family
1

Hello, wonder why MailMessage.CheckSignature is not X509Certificate2Collection and is array! Anyway, it seems to work for clear-signed email, but I’ve loaded a signed + encrypted email to see if both certificates are also saved and got exception on line: .CheckSignature()
CryptographicException: Invalid cryptographic message type.

The required certificates are all installed in My Store.
Since I just need to save the certificates (signing & encryption) of message and nothing else, should not use Decrypt as it will remove the encryption certificate (I guess), although using Decrypt before CheckSignature will cause no difference and still got the exception!

Sample project + sample eml to reproduce the issue:
WindowsApplication1.zip (29.8 KB)

2

We have opened the following new ticket(s) in our internal issue tracking system and will deliver their fixes according to the terms mentioned in Free Support Policies.

Issue ID(s): EMAILNET-40942

You can obtain Paid Support services if you need support on a priority basis, along with the direct access to our Paid Support management team.

3

Hello and good morning, just asking about the reply template, when mentioned will deliver their fixes means the bug is confirmed? or pending analysis?

Anyway a quick question: When looping through certificates of CheckSignature returned array, how to distinguish if the current certificate is signing or encryption certificate?
Thank you :slight_smile:

4

@australian.dev.nerds,

just asking about the reply template, when mentioned will deliver their fixes means the bug is confirmed? or pending analysis?

It depends on the issue. In this case, I reproduced the problem, but I didn’t dig deeper into its cause so as not to waste time. I created an investigation ticket to be further considered by the developer.

When looping through certificates of CheckSignature returned array, how to distinguish if the current certificate is signing or encryption certificate?

I forwarded this question to the developer as well.

Thank you.

1 Like
5

Thanks, please kindly attach this note if you don’t mind please:

  • How do you think about adding X509Certificate2Collection overload instead of the (not-a-perfect-choice) array for CheckSignature return type?
6

@australian.dev.nerds,

I have added your request to the ticket. Thanks.

7

Hello, is this case yet fixed? Being able to extract the signing/encryption certs from email seems wise.

8

@australian.dev.nerds,

The ticket is still open, so the fix is not ready yet. Thanks.

9

Hello,

  1. Since MailMessage.CheckSignature is array, might be wise to add a new:
    MailMessage.CheckSignatures as X509Certificate2Collection and mark CheckSignature as deprecated.

Exception thrown and inability to parse the signing + encryption certificate from MailMessage is already reported in this topic, but:

  1. MapiMessage.CheckSignature does not exist, can be added?

  2. Regardless of item 3 above, please advise how to save both signing and encryption certificates from a signed + encryted MSG/OFT using MapiMessage ?!
    If not possible, can be added?

These are very very foundamental features of Smime in email SDKs, indeed :slight_smile:

10

@australian.dev.nerds,

The ticket is planned for 23.5, I agree that this is a fundamental feature.
Also added aditional info above to the ticket.

1 Like
11

Hi @australian.dev.nerds

C# restrictions do not allow change the return type of method during overriding. Therefore, we don’t want to add a new method with a return type of X509Certificate2Collection, you can easily do it yourself using the standard constructor X509Certificate2Collection like this:
MailMessage eml = MailMessage.Load(fileName);
X509Certificate2Collection certificates = new X509Certificate2Collection(eml.CheckSignature());

Added, will be available in 23.5.

We couldn’t find a solution to get the encryption certificates, also I can’t investigate the problem with your encrypted file because I don’t have the private key to decrypt it. If you would like to resolve this issue, please provide a test project and test keys with which the issue can be reproduced.

12

Hello,

I understand, just though it’s more fit and wiser, and might be more secure, nothing else.

I have attached the private key + password + sample encrypted email here:
Aust.Dev.Nerd.zip (23.3 KB)

Just for ref, the other sdk I use have 2 methods for this:
a native win32 function:

a .net version:

Thanks for your help, appreciated :slight_smile:

13

@australian.dev.nerds,
thanks for the private key + password + sample encrypted email.