The Wiert Corner - irregular stream of stuff: jpluimers

Stuff I found out myself:

• OpenSSL does not like to have a period (dot) at the end of a S/MIME message (like many .EML files have as SMTP basically requires a period to terminate an email message.
• Indy sometimes changes the ContentType of S/MIME messages; you can reproduce this using the CopyEml demos; preliminary fix is in IdMessageHelperUnit.pas.
  They should reorganize their site to make the most current version more findable; these links help me to track down what’s new:

• http://indy.fulgan.com/indy10.changelog.txt.
• http://www.indyproject.org/sockets/Blogs/ChangeLog.
• Installing Indy for Delphi XE – Stack Overflow.

Some links I found useful:

• Ruby interface to S/MIME: Maximum encryption length [SOLVED]; How to Decode/extract smime.p7m file contents of SMIME signed email using Ruby OpenSSL library – Stack Overflow.
• Wikipedia:
  • English: S/MIME – Wikipedia, the free encyclopedia.
  • German: S/MIME – Wikipedia.
    (the German article is more thorough)
  • English: PKCS – Wikipedia, the free encyclopedia.
    German: PKCS – Wikipedia.
• Interesting take on enhancing the “sign, then encrypt” way of security that most mail clients use: email – How to check if encrypted S/MIME message is also signed, without decrypting it – Stack Overflow.
• RFCs (the obsoletes tree is important for the historic perspective)
  • S/MIME:
    • RFC 5751 – Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Message Specification.
      Obsoletes:

• RFC 3851 – Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification.
  Obsoletes:

• RFC 2633 – S/MIME Version 3 Message Specification.

• RFC 5750 – Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Certificate Handling.
  Obsoletes:

• RFC 3850 – Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Certificate Handling.
  Obsoletes:

• RFC 2632 – S/MIME Version 3 Certificate Handling.

• RFC 3852 – Cryptographic Message Syntax (CMS).
  Obsoletes:

• RFC 3369 – Cryptographic Message Syntax.

• RFC 2630 – Cryptographic Message Syntax. (derived from PKCS7)
• RFC 3211 – Password-based Encryption for CMS.

• RFC 1113 – Privacy enhancement for Internet electronic mail: Part I – message encipherment and authentication procedures.
  Obsoletes:

• RFC 1040 – Privacy enhancement for Internet electronic mail: Part I: Message encipherment and authentication procedures.
  Obsoletes:

• RFC 989 – Privacy enhancement for Internet electronic mail: Part I: Message encipherment and authentication procedures.

• RFC 1114 – Privacy enhancement for Internet electronic mail: Part II – certificate-based key management.

• RFC 1806 – Communicating Presentation Information in Internet Messages: The Content-Disposition Header.

• RFC 822 – STANDARD FOR THE FORMAT OF ARPA INTERNET TEXT MESSAGES.

• RFC 2646 – The Text/Plain Format Parameter.

• RFC 2184 – MIME Parameter Value and Encoded Word Extensions: Character Sets, Languages, and Continuations.

• RFC 1590 – Media Type Registration Procedure.
• RFC 1522 – MIME (Multipurpose Internet Mail Extensions) Part Two: Message Header Extensions for Non-ASCII Text.
• RFC 1521 – MIME (Multipurpose Internet Mail Extensions) Part One: Mechanisms for Specifying and Describing the Format of Internet Message Bodies.

• RFC 2048 – Multipurpose Internet Mail Extensions (MIME) Part Four: Registration Procedures.
  Obsoletes: 1590, 1522, 1521.

• RFC 5336 – SMTP Extension for Internationalized Email Addresses.

• RFC 1893 – Enhanced Mail System Status Codes.

• RFC 2554 – SMTP Service Extension for Authentication.

• RFC 4288 – Media Type Specifications and Registration Procedures.

• RFC 2376 – XML Media Types.

• RFC 2298 – An Extensible Message Format for Message Disposition Notifications.

• RFC 5337 – Internationalized Delivery Status and Disposition Notifications.

• RFC 1894 – An Extensible Message Format for Delivery Status Notifications.

• RFC 1892 – The Multipart/Report Content Type for the Reporting of Mail System Administrative Messages.

–jeroen

Filed under: Delphi, Development, OpenSSL, Power User, Security, Software Development