S/MIME and SMIMEA
From Simson Garfinkel
Jump to navigationJump to search
(Instructions for a Mac)
- You need an email address that can receive Internet mail.
- Go to one of the well-known free S/MIME providers with Safari complete list.
- https://www.comodo.com/home/email-security/free-email-certificate.php
- https://www.startssl.com/?app=1 — You want to use the identity and email validation
- Fill out the CA's forms. (Make sure that their CA key is in your browser) and follow the procedure.
- Once you have cert, run the Apple KeyChain access program.
- Find your certificate and drag it to the desktop. It will drag as a file emailaddress.cer
- This file is in DER binary format. We want to use DANE Certificate Usage 1 (specify an end entity certificate), selector 0 (full certificate in binary structure), Matching type 0 (exact match on the selected content), and a field of hexadecimal numbers. Just hex code the certificate with "xxd -p <filename>"