Compatibility problems between KMail and Mozilla S/MIME signatures

[Matej Cepl]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I've got a inquiry from Nelson Bolyard (now from Sun taking care for
Netscape S/MIME stuff) concerning my bug# 236466
<https://bugzilla.mozilla.org/show_bug.cgi?id=236466> on Mozilla's bugzilla
(see attached). Apparently, I still cannot authenticate his message (with
gpgsm 1.9.15 on Debian/testing, kleopatra 0.40, dirmngr 0.9.2, and kmail
1.8.1), even though he uses Verisign as his CA and I have imported whole
ca-bundle from OpenSSL and Verising root certs
<https://www.verisign.com/repository/root.html>. See also output of gpgsm
- --list-keys nelson and screenshot of kleopatra's opinion about the Nelson's
cert.

Any hope to make this work, please?

Thanks,

Matej
- -- 
Matej Cepl, http://www.ceplovi.cz/matej/blog/
GPG Finger: 89EF 4BC6 288A BF43 1BAB  25C3 E09F EF25 D964 84AC
 
Las cosas claras y el chocolate espreso.
(Ideas should be clear and chocolate thick.)
    -- Spanish proverb
%
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDQhNm4J/vJdlkhKwRAv3PAKCEGxBIpXO6MDUAj3PvrQ66w6oD9gCfeFZQ
RwzZfddk0Y61mgZNXZMqg8Q=
=wCXg
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: message.gz
Type: application/x-gzip
Size: 6420 bytes
Desc: not available
Url : /pipermail/attachments/20051004/774dc67c/message.bin
-------------- next part --------------
/home/matej/.gnupg/pubring.kbx
------------------------------
Serial number: 73E7
       Issuer: /CN=Intranet Certificate Authority/OU=AOL Technologies/O=America Online Inc/L=Mountain View/ST=CA/C=US
      Subject: /CN=Nelson Bolyard/O=America Online Inc/C=US/EMail=misterssl at aol.com/UID=nelsonb
          aka: misterssl at aol.com
     validity: 2004-02-11 01:50:06 through 2004-08-07 23:59:00
     key type: 1024 bit RSA
    key usage: digitalSignature
ext key usage: clientAuth (suggested), emailProtection (suggested)
  fingerprint: 84:97:A6:0A:26:FB:9F:4F:90:6B:1A:77:CA:E4:F4:08:02:09:0A:5D

Serial number: 73E6
       Issuer: /CN=Intranet Certificate Authority/OU=AOL Technologies/O=America Online Inc/L=Mountain View/ST=CA/C=US
      Subject: /CN=Nelson Bolyard/O=America Online Inc/C=US/EMail=misterssl at aol.com/UID=nelsonb
          aka: misterssl at aol.com
     validity: 2004-02-11 01:50:06 through 2004-08-07 23:59:00
     key type: 1024 bit RSA
    key usage: keyEncipherment
ext key usage: clientAuth (suggested), emailProtection (suggested)
  fingerprint: 5E:1C:BA:5B:3F:E0:4E:91:67:C0:9F:0A:D3:2B:2A:BE:89:4F:71:67

Serial number: 00F921C9EADD4B937CE9528D56F23BDFC7
       Issuer: /CN=Comodo Class 3 Security Services CA/OU=(c)2002 Comodo Limited/OU=Terms and Conditions of use: http:\x2f\x2fwww.comodo.net\x2frepository/OU=Comodo Trust Network/O=Comodo Limited/C=GB
      Subject: /CN=Nelson Bolyard/OU=(c)2003 Comodo Limited/OU=Terms and Conditions of use: http:\x2f\x2fwww.comodo.net\x2frepository/OU=Comodo Trust Network - PERSONA NOT VALIDATED/EMail=misterssl at aol.com
          aka: misterssl at aol.com
     validity: 2004-08-09 00:00:00 through 2005-08-09 23:59:59
     key type: 1024 bit RSA
    key usage: digitalSignature keyEncipherment
ext key usage: emailProtection (suggested), 1.3.6.1.4.1.6449.1.3.5.2 (suggested)
     policies: 1.3.6.1.4.1.6449.1.2.1.1.1:N:
  fingerprint: F6:AA:E9:7C:F0:4C:54:97:58:ED:F9:B4:AD:A6:35:25:5F:27:3B:4E

Serial number: 248686BDA6C978AD0E3A31B349077D69
       Issuer: /CN=VeriSign Class 1 CA Individual Subscriber-Persona Not Validated/OU=www.verisign.com\x2frepository\x2fRPA Incorp. By Ref.,LIAB.LTD(c)98/OU=VeriSign Trust Network/O=VeriSign, Inc.
      Subject: /CN=Nelson B Bolyard/OU=Digital ID Class 1 - Netscape Full Service/OU=Persona Not Validated/OU=www.verisign.com\x2frepository\x2fRPA Incorp. by Ref.,LIAB.LTD(c)98/OU=VeriSign Trust Network/O=VeriSign, Inc./EMail=nelson at bolyard.com
     validity: 2005-04-03 00:00:00 through 2006-04-03 23:59:59
     key type: 2048 bit RSA
    key usage: digitalSignature keyEncipherment
ext key usage: emailProtection (suggested), clientAuth (suggested)
     policies: 2.16.840.1.113733.1.7.23.3:N:
  fingerprint: 81:FF:F8:12:3D:0D:70:86:E8:FE:DA:87:CC:DA:B8:8C:1D:39:BF:0C