Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Expired Recipient Certificates

#1656

Hi,

it seems MailMate selects wrong (expired) certificate for the recipient from the Keychain. It's hard for me to verify, because none of my mail clients actually shows which certificate it uses, but I had to delete all old recipient certificates from Keychain manually for it to choose the correct one which would be decryptable on the recipient's end in desktop Apple Mail.

Could you please make sure that MailMate ignores expired recipient certificates?

Thanks in advance.

Reported by hadmob · January 24th, 2017 @ 10:54 AM

State: new
Milestone: none
Assigned to: benny benny

Activity

  1. benny
    benny

    I've been working on S/MIME recently trying to fix various long standing issues. I've also added that MailMate should no longer allow using an expired certificate, but I haven't actually tested it yet. You are welcome to try it out in the latest test release (hold down ⌥ when clicking “Check Now” in the Software Update preferences pane). You should get r5335.

    Warning: I've done a lot of changes and therefore it's not unlikely I've also introduced new bugs.

    January 29th, 2017 @ 10:32 AM

  2. hadmob
    hadmob

    Thank you. Unfortunately, I removed all the expired certs completely, so I can't test it at the moment. I'll check when some more expire.

    January 29th, 2017 @ 12:04 PM

  3. benny
    benny
    • State changed from new to fixcommitted

    Ok, I'm going to mark this as a committed fix, but you'll just add a comment if it doesn't work as expected.

    MailMate should now favor non-expired certificates: Never used them for identities, only use them for recipients if they are explicitly trusted in the keychain, and in the latter case still prefer any non-expired alternative.

    January 30th, 2017 @ 02:09 PM

  4. benny
    benny
    • State changed from fixcommitted to fixreleased

    February 9th, 2017 @ 01:20 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.