One of our users has Outlook Express 6. He imported a new Thawte
personal email certificate. When he sends a digitally signed email, the
receivers (one with Outlook and one with Thunderbird) say that the
certificate is untrusted or invalid.

Saving the certificate attached to one of the emails as a file and
opening with the Microsoft Management Console shows something that
looks empty ("there are no items to show in this view").

I've looked at everything I know of to click in OE and all shows a
perfectly valid certificate sitting there attached to the email
account. Even odder, when the user views his OWN email in the OE Sent
folder, the certificate is valid, and when the certificate is viewed,
it shows all the parts of a valid Thawte certificate.

When I look at the sent email source, I see that the certificate
attached is only 708 characters, much smaller than normal certificates.

Got me stumped,

Kevin

Might want to review these articles:

How to Digitally Sign and Encrypt Messages in Outlook Express
http://support.microsoft.com/?kbid=168726
OE: How to Remove, Import, and Export Digital Certificates
http://support.microsoft.com/?kbid=179380
OE: Sent Message May Not Be Digitally Signed
http://support.microsoft.com/?kbid=185621
Unable to Use Personal Certificates in Outlook Express
http://support.microsoft.com/?kbid=190296
OLEXP: Outlook Express Hangs When Opening Encrypted Message
http://support.microsoft.com/?kbid=288137
--
Jim Pickering, MVP, Windows Mail Apps
https://mvp.support.microsoft.com/pr...8-1171988A62D6
Please deliver feedback to the newsgroup, so that others can be helped.


"kevin" wrote in message
ups.com...
One of our users has Outlook Express 6. He imported a new Thawte
personal email certificate. When he sends a digitally signed email, the
receivers (one with Outlook and one with Thunderbird) say that the
certificate is untrusted or invalid.

Saving the certificate attached to one of the emails as a file and
opening with the Microsoft Management Console shows something that
looks empty ("there are no items to show in this view").

I've looked at everything I know of to click in OE and all shows a
perfectly valid certificate sitting there attached to the email
account. Even odder, when the user views his OWN email in the OE Sent
folder, the certificate is valid, and when the certificate is viewed,
it shows all the parts of a valid Thawte certificate.

When I look at the sent email source, I see that the certificate
attached is only 708 characters, much smaller than normal certificates.

Got me stumped,

Kevin

From the first link:

--If you want to send your certificate (public key) with all messages,
click the "Include my --certificate with signed messages" check box to
select it. This allows the recipients of your --messages to easily
verify your message with your public key.

Doing this fixed the problem.

I would question the general value of having the software work in such
a way, where mail recipients are just told the certificate is invalid
or untrusted, without a clue as to why or what to do about it. I would
suggest that if what Outlook Express is doing is valid according to the
relevant standards, then mail clients ought to say "the digital
certificate was not included with this message".

Kevin

Jim Pickering wrote:
Might want to review these articles:

How to Digitally Sign and Encrypt Messages in Outlook Express
http://support.microsoft.com/?kbid=168726
OE: How to Remove, Import, and Export Digital Certificates
http://support.microsoft.com/?kbid=179380
OE: Sent Message May Not Be Digitally Signed
http://support.microsoft.com/?kbid=185621
Unable to Use Personal Certificates in Outlook Express
http://support.microsoft.com/?kbid=190296
OLEXP: Outlook Express Hangs When Opening Encrypted Message
http://support.microsoft.com/?kbid=288137
--
Jim Pickering, MVP, Windows Mail Apps
https://mvp.support.microsoft.com/pr...8-1171988A62D6
Please deliver feedback to the newsgroup, so that others can be helped.


"kevin" wrote in message
ups.com...
One of our users has Outlook Express 6. He imported a new Thawte
personal email certificate. When he sends a digitally signed email, the
receivers (one with Outlook and one with Thunderbird) say that the
certificate is untrusted or invalid.

Saving the certificate attached to one of the emails as a file and
opening with the Microsoft Management Console shows something that
looks empty ("there are no items to show in this view").

I've looked at everything I know of to click in OE and all shows a
perfectly valid certificate sitting there attached to the email
account. Even odder, when the user views his OWN email in the OE Sent
folder, the certificate is valid, and when the certificate is viewed,
it shows all the parts of a valid Thawte certificate.

When I look at the sent email source, I see that the certificate
attached is only 708 characters, much smaller than normal certificates.

Got me stumped,

Kevin

Glad to hear you fixed it. As for how the program operates, all I can say
is, I had no hand in writing it. I only try to support users who have
questions.

Thanks for the feedback.
--
Jim Pickering, MVP, Windows Mail Apps
https://mvp.support.microsoft.com/pr...8-1171988A62D6
Please deliver feedback to the newsgroup, so that others can be helped.






"kevin" wrote in message
ups.com...
From the first link:

--If you want to send your certificate (public key) with all messages,
click the "Include my --certificate with signed messages" check box to
select it. This allows the recipients of your --messages to easily
verify your message with your public key.

Doing this fixed the problem.

I would question the general value of having the software work in such
a way, where mail recipients are just told the certificate is invalid
or untrusted, without a clue as to why or what to do about it. I would
suggest that if what Outlook Express is doing is valid according to the
relevant standards, then mail clients ought to say "the digital
certificate was not included with this message".

Kevin

Jim Pickering wrote:
Might want to review these articles:

How to Digitally Sign and Encrypt Messages in Outlook Express
http://support.microsoft.com/?kbid=168726
OE: How to Remove, Import, and Export Digital Certificates
http://support.microsoft.com/?kbid=179380
OE: Sent Message May Not Be Digitally Signed
http://support.microsoft.com/?kbid=185621
Unable to Use Personal Certificates in Outlook Express
http://support.microsoft.com/?kbid=190296
OLEXP: Outlook Express Hangs When Opening Encrypted Message
http://support.microsoft.com/?kbid=288137
--
Jim Pickering, MVP, Windows Mail Apps
https://mvp.support.microsoft.com/pr...8-1171988A62D6
Please deliver feedback to the newsgroup, so that others can be helped.


"kevin" wrote in message
ups.com...
One of our users has Outlook Express 6. He imported a new Thawte
personal email certificate. When he sends a digitally signed email, the
receivers (one with Outlook and one with Thunderbird) say that the
certificate is untrusted or invalid.

Saving the certificate attached to one of the emails as a file and
opening with the Microsoft Management Console shows something that
looks empty ("there are no items to show in this view").

I've looked at everything I know of to click in OE and all shows a
perfectly valid certificate sitting there attached to the email
account. Even odder, when the user views his OWN email in the OE Sent
folder, the certificate is valid, and when the certificate is viewed,
it shows all the parts of a valid Thawte certificate.

When I look at the sent email source, I see that the certificate
attached is only 708 characters, much smaller than normal certificates.

Got me stumped,

Kevin