Signature cannot be verified error

[Sidhartha]

Hi,
We have a application which delivers SMIME mails to users. The user
will upload his public key to our application and we will use our
Entrust profile to sign and encrypt the mail. The application uses
javamail api to do this. Recently one of our users has complained that
he gets error while opening the mail.He uses entrust plugin with
outlook in his machine to verify the signature. The user confirms that
he has imported our root CA to his IE also. But when he opens his mail
he gets signature verification failed error. The decryption happens
properly and he can read the mail. Any idea why this error comes? Only
one user has reported this and others are able to read mail properly.
He uses Winxp with outlook 2003 and has imported his pfx to outlook.

Thanks
Sidhartha

 

[Brian Tillman [MVP - Outlook]]

We have a application which delivers SMIME mails to users. The user
will upload his public key to our application and we will use our
Entrust profile to sign and encrypt the mail. The application uses
javamail api to do this. Recently one of our users has complained that
he gets error while opening the mail.He uses entrust plugin with
outlook in his machine to verify the signature. The user confirms that
he has imported our root CA to his IE also. But when he opens his mail
he gets signature verification failed error. The decryption happens
properly and he can read the mail. Any idea why this error comes? Only
one user has reported this and others are able to read mail properly.
He uses Winxp with outlook 2003 and has imported his pfx to outlook.

What is the reason given for not being able to verify. if any? You loaded the
Trusted Root CA certificate, but did you load the Intermediate Root CA
certificate?

 

[Sidhartha]

What is the reason given for not being able to verify. if any?  You loaded the
Trusted Root CA certificate, but did you load the Intermediate Root CA
certificate?

Hi,
It shows the following error message when we click on the signed icon
on right hand side "Signature cannot be verified "(with root CA
issuers name ). Also says decryption successful. I suspect entrust
plugin is causing this error. No we did not distribute the
intermediate cert to anyone.

Thanks,
Sidhartha

 

[Brian Tillman [MVP - Outlook]]

It shows the following error message when we click on the signed icon
on right hand side "Signature cannot be verified "(with root CA
issuers name ). Also says decryption successful. I suspect entrust
plugin is causing this error. No we did not distribute the
intermediate cert to anyone.

Unless you also have the Intermediate Root CA cert installed, the
certificate's trust path cannot be validated.