search for: mailcrypt

Hello there, is there a way to make the mailcrypt plugin use the user's password or at least store it in a hashed value? I'm using a passwd file for authentication. I feel uncomfortable saving the private password in plaintext in that file. Regards -------------- next part -------------- An HTML attachment was scrubbed... URL: <https:...

Hi - perhaps someone can help me. Starting from a good and well-functioning mailserver setup, I have installed MailCrypt as per the instructions (I think) to have the per-user passworded keys setup. dovecot.conf /Added:/ mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt dovecot-sql.conf.ext /commented this/ #password_query = SELECT email as user, password FROM virtua...

...it like that? Will dovecot create the keypair automatically or do I have to use doveadm? 4. Sep. 2019, 08:33 von aki.tuomi at open-xchange.com: > > > > On 4.9.2019 9.21, **** **** via dovecot wrote: > >> Hello there, >> >> is there a way to make the mailcrypt plugin use the user's password or at least store it in a hashed value? >> >> I'm using a passwd file for authentication. >> >> I feel uncomfortable saving the private password in plaintext in that file. >> >> Regards >> > &gt...

Hai, Do you have advice about Dovecot plugins for mail encryption: https://wiki2.dovecot.org/Plugins/MailCrypt https://0xacab.org/riseuplabs/trees I like NaCL based encryption but the MailCrypt plugin is better because it's maintained by Dovecot developers (is this correct?) Hard to understand MailCrypt docs so may I ask, may I provide per user encryption? I don't like global because I want e...

Hi everybody, I have a question about the Dovecot Mailcrypt Plugin. I'm trying to understand what the security of this plugin is based on. The encryption with private and public key and elliptic curves is basically a good thing. But the keys are in the file system together with the encrypted mails. The passwords for the private keys are in the user da...

Hi, I try to use the MailCrypt plugin with Floder encryption and encrypted user keys, using LDAP. I use Dovecot 2.2.27 (c0f36b0) I follow the wiki: https://wiki2.dovecot.org/Plugins/MailCrypt doveconf -n and dovecot-ldap.conf.ext attached to this message. I well configured slapd to let dovecot's dn query the userPassword (...

I try to use Mailcrypt encrypted user keys with conjustion with dbsync replication(Dovecot 2.3.6 in FreeBSD 12.0 enviroment) but was unsuccessful. If I provide a password in mail_crypt_private_password variable directly in Dovecot config all things works as expected plugin { mail_crypt_curve = prime256v1 ma...

I read the mailcrypt plugin document on the wiki and had couple questions. 1. If I want per-user encryption am I correct I should configure global keys with all related settings override in the userdb lookup? 2. If I do not want to encrypt some user accounts, is it enough to omit the mail_crypt_global_private_key...

On 4.9.2019 9.21, **** **** via dovecot wrote: > Hello there, > > is there a way to make the mailcrypt plugin use the user's password or > at least store it in a hashed value? > > I'm using a passwd file for authentication. > > I feel uncomfortable saving the private password in plaintext in that > file. > > Regards You can try in passdb return userdb_mail_crypt_pr...

...at? > > Will dovecot create the keypair automatically or do I have to use doveadm? > > > 4. Sep. 2019, 08:33 von aki.tuomi at open-xchange.com: > > > On 4.9.2019 9.21, **** **** via dovecot wrote: >> Hello there, >> >> is there a way to make the mailcrypt plugin use the user's >> password or at least store it in a hashed value? >> >> I'm using a passwd file for authentication. >> >> I feel uncomfortable saving the private password in plaintext in >> that file. >> >> Regards...

...;dovecot@dovecot.org</a>> wrote: </div> <div> <br> </div> <div> <br> </div> <div> Hi everybody, </div> <div> <br> </div> <div> I have a question about the Dovecot Mailcrypt Plugin. </div> <div> I'm trying to understand what the security of this plugin is based on. </div> <div> <br> </div> <div> The encryption with private and public key and elliptic curves is basically a good thing. But the ke...

...omi at open-xchange.com <mailto:aki.tuomi at open-xchange.com>>> : >> >>> >>> >>> >>> On 4.9.2019 9.21, **** **** via dovecot wrote: >>> >>>> Hello there, >>>> >>>> is there a way to make the mailcrypt plugin use the user's password or at least store it in a hashed value? >>>> >>>> I'm using a passwd file for authentication. >>>> >>>> I feel uncomfortable saving the private password in plaintext in that file....

Hello, I've got dovecot 2.3 going, and I've got a file 10-mailcrypt.conf which is loading mail_crypt, thinking that that plugin would propagate through all the services, sieve, lmtp, and mailbox message storage. I'm not seeing anything in the logs indicating that the encryption is happening. I am using a file format dbox specifically sdbox format, and in my ma...

>> I've tried specifying an output file as well, per the script's command line options, >> but the output file is 0 bytes.? Does anyone have any suggestions?? I *think* I'm >> using it the way it's intended to be used, but maybe I'm not?! >> -Dave > > Hi! > Maybe the key you tried was not used to encrypt the file? > Aki Aki,

...g the stored messages. Relevant plugin config: mail_crypt_curve = prime256v1 mail_crypt_global_private_key = <pirvkey> mail_crypt_global_public_key = <pubkey> mail_crypt_save_version = 2 Method I attempted for manual decryption is listed below: openssl pkeyutl -derive -inkey mailcrypt.key -peerkey mailcrypt.pub -out shared_secret.bin openssl enc -aes256 -base64 -k $(base64 shared_secret.bin) -d -in test.enc -out test.txt Openssl reports an error reading the input file, but it isn't permissions related. I started looking for the encryption/decryption method in the source bu...

...script and calls several OpenSSL functions. > >> > >> -Dave > > Hmm... can you show me how you made the keypair for encryption? Maybe there is some difference? > > > > Aki > > > > Aki, I just used the "EC key" instructions from the Dovecot MailCrypt wiki: > https://wiki.dovecot.org/Plugins/MailCrypt > > " > In order to generate an EC key, you must first choose a curve from the > output of this command: > > openssl ecparam -list_curves > > If you choose the curve prime256v1, generate and EC key with the comma...

...the logs show message being encrypted, then stored to disk? Thanks. Dave. On 6/17/19, Aki Tuomi <aki.tuomi at open-xchange.com> wrote: > > On 16.6.2019 23.04, David Mehler via dovecot wrote: >> Hello, >> >> I've got dovecot 2.3 going, and I've got a file 10-mailcrypt.conf >> which is loading mail_crypt, thinking that that plugin would propagate >> through all the services, sieve, lmtp, and mailbox message storage. >> I'm not seeing anything in the logs indicating that the encryption is >> happening. >> >> I am using a fil...

Hello all. I''m the tech writer at XenSource, Inc., and I''ve been asked to ride herd on getting the revised Xen 3.0 User''s Manual put together, reviewed, etc. We are targeting a review draft for 11/21 and it would be great if any significant additions or changes that any contributers might be making could get checked in before then so the review process can be as

Aki really thanks for reply,, I hope for continue the conversation, >> Do you have advice about Dovecot plugins for mail encryption: >> >> https://wiki2.dovecot.org/Plugins/MailCrypt >> https://0xacab.org/riseuplabs/trees >> >> I like NaCL based encryption but the MailCrypt plugin is better >> because it's maintained by Dovecot developers (is this correct?) >> >> Hard to understand MailCrypt docs so may I ask, may I provide per user >&...

> On 11 April 2019 00:49 David Salisbury via dovecot <dovecot at dovecot.org> wrote: > > > >>> > >> Yes. I gave it a try here, and it seems to work. Does it give any extra > >> information if you include -i flag? > >> > >> Aki > >> > > > > Yes, I had tried that, and it doesn't give much extra information, at