taskGNU Herds - Free Software Association - Tasks: task #8273, [Security]: encrypt emails when it...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

task #8273: [Security]: encrypt emails when it is possible

Submitter:  Davi Leal <davi>
Submitted:  Sat 14 Jun 2008 09:29:40 AM UTC
   
 
Should Start On:  Sat 14 Jun 2008 12:00:00 AM UTC Should be Finished on:  Sun 14 Jun 2009 12:00:00 AM UTC
Category:  Security Priority:  5 - Normal
Status:  None Privacy:  Public
Assigned to:  nicalvaro Percent Complete:  0%
Open/Closed:  Open Effort:  0.00

Mon 18 May 2009 05:11:00 AM UTC, comment #3: 

I am attaching an updated version of what I did mostly for the encryption topic. You should be able to do this provided you have the gnupg php extension installed. You do not need to place these scripts in the gnuherds app. I created a separate folder and apache configuration file for my testing.

Process goes ->
Download all 4 new files attached.
Set up your configuration on the server side, including the www-data public key.
Create your gpg public keys.
Upload it using newgpgkey.html . Send it.
You will see a 40 character fingerprint key. Copy that and paste to replace the fingerprint in $finger in retrieve_encryptedtest.php.
Run and retrieve the Hello World message from retrieve_encryptedtest.php

Walla. That is encryption.

(file #18159, file #18160)

 -Deleted Account- <nicalvaro>
Tue 14 Apr 2009 11:35:31 AM UTC, comment #2: 

Nicodemo Alvaro wrote:

> Where am I going to find the all messages that are created
> for e-mail that would be necessary to encrypt/sign?


You have to search for all the locations where the "mb_send_mail(...)" function is used, and encrypt the "$body" or "$message" content so that only the destination Email can read it.

The GNU Herds webapp could try to download the public GPG key from the key servers or use what the user has specified in a new fields which should be added to the data base. This last strategy is which I think Savannah is used, that is to say, Savannah keep a field with the public GPG key of the users.

The above function is used at least at:

  • crontabs/raise_Alerts.php
  • Layer-5__DB_operation/Skills.php
  • Layer-5__DB_operation/Entity.php
  • Layer-2__Business_logic/content/forms/Entity_form.php
  • Layer-2__Business_logic/content/forms/Lost_Password_form.php



1) Encrypt so that only the destination email can read it.

2) Sign by an "GNU Herds - Free Software Association
   <association@gnuherds.org>" key which we will upload
   to the global key servers.

 Davi Leal <davi>
Group administrator
Tue 14 Apr 2009 01:54:33 AM UTC, comment #1: 

Where am I going to find the all messages that are created for e-mail that would be necessary to encrypt/sign?

(file #17915, file #17916)

 -Deleted Account- <nicalvaro>
Sat 14 Jun 2008 09:29:40 AM UTC, original submission:  


 Davi Leal <davi>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #18161:  newgpgkey.html added by nicalvaro (326B - text/html)
file #18162:  retrieve_encryptedtest.php added by nicalvaro (678B - application/x-httpd-php)
file #18159:  Cryptography.php added by nicalvaro (3KiB - application/x-httpd-php)
file #18160:  importcontrol.php added by nicalvaro (519B - application/x-httpd-php)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nicalvaro (Updated the item)
  • -email is unavailable- added by davi (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 9 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-05-18 nicalvaro Attached File- Added newgpgkey.html, #18161
        Attached File- Added retrieve_encryptedtest.php, #18162
    2009-05-18 nicalvaro Attached File- Added Cryptography.php, #18159
        Attached File- Added importcontrol.php, #18160
    2009-05-18 nicalvaro Attached File#17916 Removed
    2009-05-18 nicalvaro Attached File#17915 Removed
    2009-04-14 nicalvaro Attached File- Added encrypttest-class.php, #17915
        Attached File- Added sample-gpg-tests.php, #17916
    2009-03-13 davi Assigned toNone nicalvaro

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-df36.
    Corresponding source code