Importing S/MIME into Outlook

[Jeff McKay]

I have encrypted S/MIME messages that I need to get into Outlook
programmatically.. It is my understanding that I don't have to do the
decryption myself, just import the message in the right way and Outlook will
get the certificate and do all that for me. (I am using extended MAPI with
C++). When I tried to do it with my existing code, signed message
attachments show up (file smime.p7s) fine, and I can click on it and Outlook
displays a certification.

However when I do the same thing with an encrypted attachment (file
smime.p7m), Outlook refuses to show the attachment name, even though I
can see it in there with Outlook Spy. Any idea what is going on here, and
how I can do this correctly?

[Michel Gallant]

There is a file association action for signed files:
.p7s --> rundll32.exe cryptext.dll,CryptExtOpenPKCS7 %1
which displays cert and certification path in little GUI.

Even though .p7m for enveloped data is defined as a file association,
there is no associated action defined as above (at least not in W2k).
Are you suggesting that Outlook has some extra ability to recognize
explicit attachments in this form? OE6 certainly doesn't appear to.

- Mitch Gallant
Security MVP

Post by Jeff McKay
I have encrypted S/MIME messages that I need to get into Outlook
programmatically.. It is my understanding that I don't have to do the
decryption myself, just import the message in the right way and Outlook will
get the certificate and do all that for me. (I am using extended MAPI with
C++). When I tried to do it with my existing code, signed message
attachments show up (file smime.p7s) fine, and I can click on it and Outlook
displays a certification.
However when I do the same thing with an encrypted attachment (file
smime.p7m), Outlook refuses to show the attachment name, even though I
can see it in there with Outlook Spy. Any idea what is going on here, and
how I can do this correctly?

[Jeff McKay]

My customer sent me a .pst file that he created by importing S/MIME into
Outlook Express, then moved over to Outlook. He can open these up with
Outlook and read them. Upon examination of the .pst file with Outlook Spy,
I can see that the encrypted mime.p7m is there. The message class is set
to "IPM.Notes.SMIME".

When I try to open these on my system, I get "your digital ID name cannot be
found in the underlying security system". When I try to do the same with
one
of my own messages (imported using our software) I get "there was an error
in the underlying security system". So I surmise that the message has some
sort
of Digital ID associated with it, but I cannot determine what property
stores this.