On 2019-09-23, Lars Ingebrigtsen wrote: > Jens Lechtenboerger writes: > >> I use mml-smime-use to prefer EPG over OpenSSL. However, >> mm-view-pkcs7-verify ignores that variable and calls >> smime-verify-region (which uses OpenSSL). >> >> For signed e-mails with >> Content-Type: application/pkcs7-mime; name="smime.p7m"; >> smime-type=signed-data >> this results in the error message: "No CA configured" >> (And the e-mail is displayed in base64 encoded form; the text is not >> shown.) > > Could you send such a message to enable us to debug this? Attached you find the message from section 4.9 of RFC4134, with the CA certificate. Verify with: openssl smime -verify -CAfile carldssself.pem -in rfc4134-4.9.mail -signer signer.pem -out signedtext.txt Best wishes Jens