This forum is closed to new posts and
responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:
RE: Smartcard decrypt error ~Umberto Nongeroson 8.Oct.03 11:22 PM a Web browser Notes Client 6.0.2 CF1Windows 2000
I'm glad to hear that you've gotten to the point of making certificate importing and signing working with your token.
But I have problems when trying to decrypt a S/MIME email send from Outlook Express. I have checked and it did call the C_DecryptInit and C_Decrypt correctly.
[...debug info cut...]
I also single step through my code and the decryption was successful and return CKR_OK. But Notes display the "The encrypted data has been modified or the wrong key was used to decrypt it" error message. What could have gone wrong here?
The only time that I've seen that error with a smartcard was when the token returned CKR_OK from C_Decrypt, but didn't actually modify the output buffer and fill it in with the decrypted data. If that isn't the case, are you absolutely certain that Outlook is encrypting with a certificate that corresponds to the private key being used in the decryption?
Also, I have the following warning: File > Security > User Security > Mail > Internet-style Mail Options > Incoming Mail :
"WARNING: Your Internet encryption certificate was not found in the Domino directory. Notes users will have trouble sending you Internet-style encrypted mail"
But I don't think this is the problem since I'm able to successfully send encrypted mail from Outlook Express to Notes.
Correct -- that warning indicates a configuration problem that may prevent Notes users from sending S/MIME encrypted mail to that user, but it doesn't have any bearing on a web browser who already has the user's certificate.