[ios][Mail][App] no way to change S/MIME signing hash algorithm (from SHA1 to higher SHA256, etc)

Recently I applied a Comodo free email certificate for my AppleID iCloud email address. Then I tried several days to re-create a well-chained p12 keypairs (private key + public/cert key-chain with issue key and CA root key in p7b). Then I installed it on iPhone profile, and assigned iCloud SMTP S/MIME signing identity.


However, send some signed emails from iOS Mail App, all these emails were identified by GMail App and web UI as:

"The signature uses an unsupported algorithm. The digital signature is not valid."


After some experiments to compare sending email from MS Outlook with Trusty E-mail options. I finally find the clues in mail headers, the S/MIME signing header shows:

micalg=SHA1 (by Mail App) and

micalg=SHA1|SHA128|SHA256|... (by Outlook with Trusty hash algorithm varied).


The GMail only considers micalg (hash algorithm) could be valid for those algorithms secured than SHA1. (less collision). I know that for SHA1's setting, it can be most compatible to may old IT infrastructures. But however, for a modern and flexible OS like iOS. Apple should provide more specific option in Settings/General/Profiles/ or Settings/Account/Mail/SMIME/Hash


Or maybe somebody else can suggest another email client on iOS, which can deliver more secured hash algorithm when signing S/MIME signature with certificate.

null-OTHER, All iOS devices

Posted on Jun 30, 2018 3:25 AM

Reply

Similar questions

There are no replies.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

[ios][Mail][App] no way to change S/MIME signing hash algorithm (from SHA1 to higher SHA256, etc)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.