iOS S/MIME signing/encryption incompatible with multiple From addresses

Originator:futuretap
Number:rdar://35507215 Date Originated:13-Nov.-2017 07:23 PM
Status:Open Resolved:
Product:iOS + SDK Product Version:11.1
Classification:Security Reproducible:Always
 
Summary:
S/MIME signing and encrypting seems to be incompatible with multiple From addresses. I can successfully sign and encrypt mails as long as there's only one From address defined in my mail account. As soon as I add another address, iOS Mail complains that it doesn't find a signing or encryption identity. Encryption is still possible in some weird cases but signing never works.

Steps to Reproduce:
- Create an IMAP + SMTP Mail account with S/MIME signing. 
- Verify that signing and encryption works correctly. 
- Add a second From address to the account.
- Reboot (just to be sure).

Expected Results:
Signing and encryption should still work as long as the From address matching the cert is selected.

Actual Results:
Signing doesn't work (missing signing identity error), no matter what From address is selected.

Version:
11.1

Notes:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!