S/MIME signatures and from addresses
Reported by Mike | December 4th, 2015 @ 08:17 AM
I have set up MailMate to always sign mails. But I only want this for my job address. When I write a mail from my private address, MailMate tries to sign with my job certificate which ends in an error message.
Is there a way to connect a certificate to a specific address? Maybe I have overseen it?
Comments and changes to this ticket
-
benny December 7th, 2015 @ 11:50 AM
No, there is a bit for OpenPGP, but I'm not even sure that can be used to disable signing for a specific email address.
Are you sure MailMate tries to use your job certificate? If MailMate does not find a certificate for the current email address then it should at least report this (and not use the wrong one).
-
Mike December 7th, 2015 @ 11:55 AM
When I open the compositor to write a mail from my private account and try to send, I get following message:
Failed to find identity to sign for *******@*******.***.
The specified item could not be found in the keychain. Error code: -25300Then I deactivate the signing and I can send.
-
benny December 8th, 2015 @ 01:08 PM
- State changed from new to accepted
This is the expected behavior. MailMate cannot find a certificate to match the identity (email address). MailMate doesn't currently have a setting to exclude an email address when signing is enabled. The default behavior has to be that MailMate does not ignore this issue (otherwise some keychain problem or other issue might result in unintentionally sending unsigned or unencrypted messages).
As I noted, using OpenPGP it's possible (low level) to map an email address (sender identity) to a specific key. If I do the same for S/MIME (mapping to a specific certificate) and then add that an empty value means no certificate, would that satisfy your needs?
-
Mike December 8th, 2015 @ 05:25 PM
If I understand correctly, something like the should do it. (I use S/MIME.)
-
benny December 9th, 2015 @ 08:01 AM
Ok, I'll update this ticket when/if this is added. I don't think it should be hard, but I might be wrong :)
-
benny December 9th, 2015 @ 09:45 AM
- State changed from accepted to fixcommitted
In the next update, something like this should work to disable signing/encrypting when using a specific email address:
{ map = ( { address = "user@example.com"; serial = ""; }, ); }
-
Mike December 27th, 2015 @ 12:11 AM
Thank you. It's working. But it would be nice to be able to use wildcards/regexes and/or opt-in instead of opt-out. I have several addresses and aliases and only one is used with S/MIME, so it's troublesome to keep this list in sync with my in-use addresses.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Mac OS X email client.