search for: ecpubkey

...vmail vmail 4096 ??? 11 09:14 RSAkey [root at mail44 dovecot]# cd eckey2 [root at mail44 eckey2]# ls -la ????? 16 drwxr-xr-x 2 root root 4096 ??? 13 12:42 . drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem ----- ???????? ????????? ----- > ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> > ????: "dovecot" <dovecot at dovecot.org> > ????????????: ???????, 13 ?????? 2017 ? 14:18:55 > ????: Re: Plugin "mail_crypt" does not work > On 13.01.2017 12:21...

...args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = prime256v1 mail_crypt_global_private_key = </etc/dovecot/eckey/ecprivkey.pem mail_crypt_global_public_key = </etc/dovecot/eckey/ecpubkey.pem mail_crypt_save_version = 2 recipient_delimiter = + sieve = /etc/dovecot/sieves/default.sieve sieve_default = /etc/dovecot/sieves/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 8 } protocols = imap pop3 lmtp sieve service auth-worker...

...4 dovecot]# cd eckey2 >> [root at mail44 eckey2]# ls -la >> ????? 16 >> drwxr-xr-x 2 root root 4096 ??? 13 12:42 . >> drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. >> -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem >> -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem >> >> ----- ???????? ????????? ----- >>> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> >>> ????: "dovecot" <dovecot at dovecot.org> >>> ????????????: ???????, 13 ?????? 2017 ? 14:18:55 >>> ????: Re: Plugin "mail_c...

>> I've tried specifying an output file as well, per the script's command line options, >> but the output file is 0 bytes.? Does anyone have any suggestions?? I *think* I'm >> using it the way it's intended to be used, but maybe I'm not?! >> -Dave > > Hi! > Maybe the key you tried was not used to encrypt the file? > Aki Aki,

...gt; > [root at mail44 dovecot]# cd eckey2 > [root at mail44 eckey2]# ls -la > ????? 16 > drwxr-xr-x 2 root root 4096 ??? 13 12:42 . > drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. > -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem > -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem > > ----- ???????? ????????? ----- >> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> >> ????: "dovecot" <dovecot at dovecot.org> >> ????????????: ???????, 13 ?????? 2017 ? 14:18:55 >> ????: Re: Plugin "mail_crypt" does not work...

...es > > If you choose the curve prime256v1, generate and EC key with the command: > > openssl ecparam -name prime256v1 -genkey | openssl pkey -out > ecprivkey.pem > > Then generate a public key out of your private EC key > > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem > " > > -Dave I'm going on a limb and guess that there is something strange happening with ruby and openssl versions here. The main point of the script is to show how the data can be decrypted, and can be used for small-scale data recovery as well. Aki

...rom the page https://wiki2.dovecot.org/Plugins/. For reference here's my /etc/dovecot/conf.d/10-mail-crypt.conf file: ---- mail_plugins = $mail_plugins mail_crypt plugin { # mail_crypt_global_private_key = </etc/dovecot/ecprivkey.pem mail_crypt_global_public_key = </etc/dovecot/ecpubkey.pem mail_crypt_save_version = 2 } ---- I saw in a previous message on this mailing list that messages can be encrypted without the private key, so it's stored elsewhere. :-) After restarting dovecot and sending myself a message I found that the message was still unencrypted. Nothing in...

...;> [root at mail44 eckey2]# ls -la > >> ????? 16 > >> drwxr-xr-x 2 root root 4096 ??? 13 12:42 . > >> drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. > >> -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem > >> -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem > >> > >> ----- ???????? ????????? ----- > >>> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> > >>> ????: "dovecot" <dovecot at dovecot.org> > >>> ????????????: ???????, 13 ?????? 2017 ? 14:18:55 > >>>...

...s seem to get encrypted fine but the incoming ones don't. We tried everything including this config: mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 } also this one: plugin { mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 } but to no avail. There are no visible errors, Dovecot restarts fine and outgoing emails get encrypted. Any ideas? -- Kind Regards, Support Team SERVERIA.COM Ri...

> On 11 April 2019 00:49 David Salisbury via dovecot <dovecot at dovecot.org> wrote: > > > >>> > >> Yes. I gave it a try here, and it seems to work. Does it give any extra > >> information if you include -i flag? > >> > >> Aki > >> > > > > Yes, I had tried that, and it doesn't give much extra information, at

On 13.01.2017 12:21, Evgeniy Korneechev wrote: > mail_crypt_global_public_key = </etc/dovecot/eckey/ecpubkey.pem Is this world-wide readable file? Is LDA able to access this? Aki

...d: > openssl ecparam -list_curves If you choose the curve prime256v1, generate and EC key with the command: > openssl ecparam -name prime256v1 -genkey | openssl pkey -out ecprivkey.pem Then generate a public key out of your private EC key > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem " -Dave

...s seem to get encrypted fine but the incoming ones don't. We tried everything including this config: mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 } also this one: plugin { mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 } but to no avail. There are no visible errors, Dovecot restarts fine and outgoing emails get encrypted. Any ideas? -------------- next part -------------- An HTML at...

...ubscribe special_use = \Sent } mailbox "Sent Messages" { auto = create special_use = \Sent } prefix = INBOX. separator = . type = private } passdb { driver = plesk } plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 quota = maildir:User quota quota_grace = 0 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = rcvd=%i, sent=%o, top=%t/%p, retr=%r/%b, del=%d/%m, si...

I did some more digging around and found this is reproducible on multiple hosts running the same version of Dovecot/Pigeonhole/Postfix. The problem resurfaces on any host to an account with enabled Vacation/OOO response. The Vacation/OOO reply filter was created in Roundcubemail, but has been fine for years. One thing to note is in Dovecot 2.3.0 I did enable UTF8, but even if I disable UTF8