Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We're currently using Mailman as a mailing list manager. Mailman modifies the content of mail messages. The problem is that some of our users are sending digitally signed messages and the modification makes the signature break. I've seen this behavior with Apple Mail, Outlook, and Thunderbird.

The problem seems to be this: S/MIME signed messages are implemented with a Content-Type: multipart/signed; MIME Content-Type. Mailman wraps this inside a Content-Type: multipart/mixed MIME Content-Type. None of the mail readers look inside the outer mixed for the inner signed.

We won't be able to get the clients fixed. Is there anyway to modify Mailman so that it doesn't have this behavior?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Mailman is probably configured to add a header or footer to every message. Check the msg-header and msg-footer parameters, which can be accessed on the [Non-digest options] page.

It's also important to ensure that pass_mime_types includes application/pkcs7-signature as one of the permitted types in the [Content filtering] section.

When Mailman is configured to add a header or footer, it modifies the message by creating a new MIME part and concatenating it with the root part from the original message. The reasoning for this behaviour is explained more fully on the Mailman wiki (wiki.list.org).

Although the original signed message is still intact, it seems that most mail clients only interpret the SMIME signature correctly if multipart/signed is the root MIME part. As a test, I removed the extra MIME parts inserted by mailman from one of my test messages and resent it, and the signature was correctly validated by my mail client.

share|improve this answer
1  
So it sounds like the answer is "no, not if you are adding a footer or header, because today's mail clients aren't smart enough to validate just the inside of a S/MIME message." Perhaps I should simply have mailman strip the signature? –  vy32 Apr 3 '13 at 13:33

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.