[MlMt] S/MIME and OpenPGP issues

[Sebastian Hagedorn]

Hi,

OpenPGP is working now, but I still haven’t solved the S/MIME issue. I noticed a thread from 2018 in the archives, where this was the last message from Benny Kjær Nielsen:

> On 24 Aug 2018, at 13:41, Alexandre Takacs wrote:
>
>> I get to the point I where I am being asked for my keychain pass to access the signing cert. But once said password is provided I get "errSecInternalComponent (error code -2070)".
>
> I some times see this error, but I'm not sure what can trigger it. Continuing to edit and hitting ⌘S usually clears it up. The error itself is unfortunately not very informative.
>
> You can enable the following and launch from a Terminal window to see how far MailMate is before it fails:
>
> 	defaults write com.freron.MailMate MmDebugSecurity -bool YES
> 	/Applications/MailMate.app/Contents/MacOS/MailMate
>
> It might also be a good idea to restart the machine. Although I cannot reliably reproduce it I have a feeling that the keychain system often gets into a “bad” state when I'm working with certificates.

That’s the same error message that I get. In my case hitting ⌘S does not work, and restarting my Mac hasn’t helped either. I removed one instance of my certificate from the keychain so that MailMate only finds one, but that didn’t resolve the issue either. I ran “log stream” from the Terminal to observe what is happening when that error pos up, but I don’t know what to do with the output:

2021-01-07 13:07:17.274425+0100  localhost MailMate[39607]: (Security) Created Activity ID: 0x8641c, Description: SecKeychainSearchCreateFromAttributes
2021-01-07 13:07:17.275346+0100  localhost MailMate[39607]: (Security) Created Activity ID: 0x8641d, Description: SecKeychainSearchCopyNext
2021-01-07 13:07:17.275713+0100  localhost MailMate[39607]: (Security) [com.apple.securityd:security_exception] CSSM Exception: -2147413737 CSSMERR_DL_DATASTORE_DOESNOT_EXIST
2021-01-07 13:07:17.275826+0100  localhost MailMate[39607]: (Security) [com.apple.securityd:integrity] dbBlobVersion() failed for a non-existent database
2021-01-07 13:07:17.276234+0100  localhost MailMate[39607]: (Security) [com.apple.securityd:security_exception] CSSM Exception: -2147413737 CSSMERR_DL_DATASTORE_DOESNOT_EXIST
…

Is there anything else I should try?
-- 
   .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:.
                .:.Regionales Rechenzentrum (RRZK).:.
  .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:.

On 5 Jan 2021, at 11:56, Sebastian Hagedorn wrote:

> When I try to use S/MIME, the composer window shows;
>
> S/MIME: Failed to generate the message
> Log	S/MIME sign/-
> Certificates found for all addresses
>
> Encoder created
> Signer added
> Requesting detached content
> Content updated
> errSecInternalComponent (Error code -2070.)
>
> I enabled debugging and launched MailMate from iTerm. There it says:
>
> Setting security level/protocol: sign/S/MIME (none/Unknown)
>  Protocol changed (resetting message): Unknown != S/MIME (none > sign)
> Searching for certificate for identity Hagedorn at uni-koeln.de
>  Looking for preferred certificate
>   Not found
>  Require system matched email address
>  Looking for candidate(s)
>  Found 2 candidate(s)
>   Found match (2379AD18EB0F7DADF38A62DF) with score 29
>   Found match (2379AD18EB0F7DADF38A62DF) with score 29
>   Found 2 valid candidates
> S/MIME sign/-
> Certificates found for all addresses
>
>  Encoder created
>  Signer added
>  Requesting detached content
>  Content updated
> errSecInternalComponent (Error code -2070.)
>
> Warning: Decoding empty text body for id -26
> Warning: Decoding empty text body for id -29
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 213 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20210107/7eb2ec66/attachment.sig>