Certificate Requests rejected because of missing SMIME extension

From: Sebastian Rieger (sebastian.rieger_at_gwdg.de)
Date: 11/25/04 

Date: Thu, 25 Nov 2004 10:26:17 +0100

Hi All,

we're using an Enterprise Subordinate Certification Authority. Things
worked fine, until yesterday, the policy module suddenly claimed the
incoming requests to miss the SMIME capability extension 0x80094805
(-2146875387)
The problem seems only to be caused if the request was send in by a
Mozilla / Firefox / Netscape User. Before yesterday the policy module
seemed to add the SMIME capability without complaining (as it is part of
issued certificates to Netscape users).
Yesterday the policy module suddenly started to reject the requests.
I looked through the Registry and found defaultSMIME Attribute for the
Policy Module set to the correct OIDs (which worked before) - why is it
working with requests via Xenroll, and not with Netscape? Our customers
are using Netscape / Firefox, so this is a real big problem right now...

Anyone able to help? Any advice appreciated!

Sebastian Rieger