search for: mail_crypt_curve

...ndara <anu.udb at gmail.com> wrote: > > > The only change which I did is updating the "dovecot.conf" file. I added > below lines. > > mail_plugins = $mail_plugins mail_crypt > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > plugin { > mail_crypt_curve = <some curve you like> > mail_crypt_save_version = 2 > } > > > I realized that, mails are in plain text format even I added those > encryption as dovecot wiki. > > On Wed, Nov 7, 2018 at 1:52 PM Anushka Uditha Bandara <anu.udb at gmail.com> > wrote: >...

...below > > configurations on dovecot for mail encryption. Because dovecot wiki is > > little bit confusing to me. > > > > "mail_plugins = $mail_plugins mail_crypt > > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > > > plugin { > > mail_crypt_curve = <some curve you like> > > mail_crypt_save_version = 2 > > }" > > > > I am stuck in here. > > > > Thank you in advance, > > > > Anushka Bandara > > That should work, why are you stuck? > > Aki > -------------- next part --...

...change which I did is updating the "dovecot.conf" file. I added > > > below lines. > > > > > > mail_plugins = $mail_plugins mail_crypt > > > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > > > > > plugin { > > > mail_crypt_curve = <some curve you like> > > > mail_crypt_save_version = 2 > > > } > > > > > > > > > I realized that, mails are in plain text format even I added those > > > encryption as dovecot wiki. > > > > > > On Wed, Nov 7, 2018 at...

...ore = file:/var/mail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/mail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 quota = maildir:User quota quota_exceeded_message = Benutzer %u hat das Speichervolumen ?berschritten. / User %u has exhausted allowed storage space. sieve = file:/var/mail/sieve/%d/%n/scripts;active=/var/mail/sieve/%d/%n/active-script.sieve s...

...it is working fine. Now I am working for mail encryption. Is it enough to set below configurations on dovecot for mail encryption. Because dovecot wiki is little bit confusing to me. "mail_plugins = $mail_plugins mail_crypt mail_attribute_dict = file:%h/Maildir/dovecot-attributes plugin { mail_crypt_curve = <some curve you like> mail_crypt_save_version = 2 }" I am stuck in here. Thank you in advance, Anushka Bandara -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20181107/a70d99b8/attachment.html&gt...

...eve_mailbox1_causes = COPY > > imapsieve_mailbox1_name = Spam > > imapsieve_mailbox2_before = file:/var/mail/sieve/global/learn-ham.sieve > > imapsieve_mailbox2_causes = COPY > > imapsieve_mailbox2_from = Spam > > imapsieve_mailbox2_name = * > > mail_crypt_curve = prime256v1 > > mail_crypt_save_version = 2 > > quota = maildir:User quota > > quota_exceeded_message = Benutzer %u hat das Speichervolumen > ?berschritten. / User %u has exhausted allowed storage space. > > sieve = > file:/var/mail/sieve/%d/%n/scripts;act...

...t's working like a champ, but some of our administrative operations require access to Maildir messages in plaintext. I've found numerous threads detailing help with mail_crypt setup, but none of my research has yielded a method of decrypting the stored messages. Relevant plugin config: mail_crypt_curve = prime256v1 mail_crypt_global_private_key = <pirvkey> mail_crypt_global_public_key = <pubkey> mail_crypt_save_version = 2 Method I attempted for manual decryption is listed below: openssl pkeyutl -derive -inkey mailcrypt.key -peerkey mailcrypt.pub -out shared_secret.bin openssl...

The only change which I did is updating the "dovecot.conf" file. I added below lines. mail_plugins = $mail_plugins mail_crypt mail_attribute_dict = file:%h/Maildir/dovecot-attributes plugin { mail_crypt_curve = <some curve you like> mail_crypt_save_version = 2 } I realized that, mails are in plain text format even I added those encryption as dovecot wiki. On Wed, Nov 7, 2018 at 1:52 PM Anushka Uditha Bandara <anu.udb at gmail.com> wrote: > After I configuring this, I logged in to th...

...> > > > > The only change which I did is updating the "dovecot.conf" file. I added > > below lines. > > > > mail_plugins = $mail_plugins mail_crypt > > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > > > plugin { > > mail_crypt_curve = <some curve you like> > > mail_crypt_save_version = 2 > > } > > > > > > I realized that, mails are in plain text format even I added those > > encryption as dovecot wiki. > > > > On Wed, Nov 7, 2018 at 1:52 PM Anushka Uditha Bandara <anu....

Hi everyone, I'm trying to configure my email server to encrypt mails on a per user basis. I have the following in my conf: mail_plugins = $mail_plugins mail_crypt mail_attribute_dict = file:%h/Mail/dovecot-attributes plugin { mail_crypt_curve = secp521r1 mail_crypt_save_version = 2 mail_crypt_require_encrypted_user_key = yes mail_crypt_private_password = %N{password} } And I'm getting %password unknown variable error. I use pam to store the passwords. All I want is to be able to hash the user password and us...

...hing including this config: mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 } also this one: plugin { mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 } but to no avail. There are no visible errors, Dovecot restarts fine and outgoing emails get encrypted. Any ideas? -- Kind Regards, Support Team SERVERIA.COM Riga, LV-1063, Latvia US: +1 (213) 224-7938 LV: + (371) 22330032 Skype: bighostlv sup...

Hai, Do you have advice about Dovecot plugins for mail encryption: https://wiki2.dovecot.org/Plugins/MailCrypt https://0xacab.org/riseuplabs/trees I like NaCL based encryption but the MailCrypt plugin is better because it's maintained by Dovecot developers (is this correct?) Hard to understand MailCrypt docs so may I ask, may I provide per user encryption? I don't like global

...in the relevant folders. As per the documentation @ https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/ I believe this would be all the configuration I need: # Config mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_curve = secp521r1 # or some other preferred curve mail_crypt_save_version = 2 mail_crypt_require_encrypted_user_key = yes # necessary for encrypting keys with user password } # File: /etc/dovecot/dovecot-sql.conf.ext password_query = SELECT \ email as user, password, \ '%w'...

...er with use password too bad, I concatenate user plaintext password with random salt. And then string to SHA512() hash and use as decryption key (mail_crypt_private_password) for EC private key. For above I have plugin config > mail_plugins = $mail_plugins mail_crypt > plugin { > mail_crypt_curve = secp256k1 > mail_crypt_require_encrypted_user_key = yes > mail_crypt_save_version = 2 > } And for returning userdb_mail_crypt_private_password, I have sql query > password_query = SELECT username, password, \ > SHA2( CONCAT('%w',salt), 512 ) AS userdb_mail...

...> I have setup my dovecot with the following in a conf file: > >> > >> ============== > >> > >> mail_attribute_dict = file:%h/Maildir/dovecot-attributes > >> mail_plugins = $mail_plugins mail_crypt > >> plugin { > >> > >> mail_crypt_curve = secp521r1 > >> > >> mail_crypt_save_version = 2 > >> > >> } > >> > >> ============== > >> > >> This works nice, all emails are being encrypted and every user/folder has keys. > >> But as I understood from your co...

...nd maintained > by us. Turning on encryption is simple, but you'll have to consider > key management closely. > > The simple instructions are > > mail_plugins = $mail_plugins mail_crypt > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > plugin { > mail_crypt_curve = <some curve you like> > mail_crypt_save_version = 2 > } With no other settings, I understand this to auto-generate keys. It's putting them in mail_attribute_dict? How is that related to mail_crypt_private_key,, which is for what then? > This will turn on automatic key creat...

...eve_mailbox1_before = file:/etc/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/etc/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = INBOX mail_crypt_curve = secp521r1 mail_crypt_save_version = 0 mail_log_events = copy delete expunge flag_change mailbox_create mailbox_delete mailbox_rename undelete save mail_log_fields = uid box msgid size from subject mail_replica = tcps:mda1-1.example.com quota = count quota_clone_dict = proxy::quota quota_ru...

Hi Team, I have enabled LDAP authentication with webmail client and it works successfully. But I found an error with LDAP user's mail. Email is not loaded when I log with an LDAP user. Login phase is successful and mail box is the issue. I created a mail user without including LDAP and that user works fine. Issue comes only with LDAP users. *Anushka Bandara* Research Engineer Lanka Software

...crypt plugin in dovecot core is indeed developed and maintained by us. Turning on encryption is simple, but you'll have to consider key management closely. The simple instructions are mail_plugins = $mail_plugins mail_crypt mail_attribute_dict = file:%h/Maildir/dovecot-attributes plugin { mail_crypt_curve = <some curve you like> mail_crypt_save_version = 2 } This will turn on automatic key creation for folders and users. NOTE that the keys won't be encrypted in this scenario. To encrypt keys you have few choices. You can use a static password, static ECC key, per-user password, per-us...

...r mail encryption. Is it enough to set below > configurations on dovecot for mail encryption. Because dovecot wiki is > little bit confusing to me. > > "mail_plugins = $mail_plugins mail_crypt > mail_attribute_dict = file:%h/Maildir/dovecot-attributes > > plugin { > mail_crypt_curve = <some curve you like> > mail_crypt_save_version = 2 > }" > > I am stuck in here. > > Thank you in advance, > > Anushka Bandara That should work, why are you stuck? Aki