taskGNU Herds - Free Software Association - Tasks: task #8273, [Security]: encrypt emails when it...


You are not allowed to post comments on this tracker with your current authentification level.

task #8273: [Security]: encrypt emails when it is possible

Submitted by:  Davi Leal <davi>
Submitted on:  Sat Jun 14 09:29:40 2008  
Should Start On: Sat Jun 14 00:00:00 2008Should be Finished on: Sun Jun 14 00:00:00 2009
Category: SecurityPriority: 5 - Normal
Status: NonePrivacy: Public
Percent Complete: 0%Assigned to: -Deleted Account- <nicalvaro>
Open/Closed: OpenEffort: 0.00

Mon May 18 05:11:00 2009, comment #3:

I am attaching an updated version of what I did mostly for the encryption topic. You should be able to do this provided you have the gnupg php extension installed. You do not need to place these scripts in the gnuherds app. I created a separate folder and apache configuration file for my testing.

Process goes ->
Download all 4 new files attached.
Set up your configuration on the server side, including the www-data public key.
Create your gpg public keys.
Upload it using newgpgkey.html . Send it.
You will see a 40 character fingerprint key. Copy that and paste to replace the fingerprint in $finger in retrieve_encryptedtest.php.
Run and retrieve the Hello World message from retrieve_encryptedtest.php

Walla. That is encryption.

(file #18159, file #18160)

-Deleted Account- <nicalvaro>In charge of this item.
Tue Apr 14 11:35:31 2009, comment #2:

Nicodemo Alvaro wrote:

> Where am I going to find the all messages that are created
> for e-mail that would be necessary to encrypt/sign?

You have to search for all the locations where the "mb_send_mail(...)" function is used, and encrypt the "$body" or "$message" content so that only the destination Email can read it.

The GNU Herds webapp could try to download the public GPG key from the key servers or use what the user has specified in a new fields which should be added to the data base. This last strategy is which I think Savannah is used, that is to say, Savannah keep a field with the public GPG key of the users.

The above function is used at least at:

  • crontabs/raise_Alerts.php
  • Layer-5__DB_operation/Skills.php
  • Layer-5__DB_operation/Entity.php
  • Layer-2__Business_logic/content/forms/Entity_form.php
  • Layer-2__Business_logic/content/forms/Lost_Password_form.php

1) Encrypt so that only the destination email can read it.

2) Sign by an "GNU Herds - Free Software Association
<association@gnuherds.org>" key which we will upload
to the global key servers.

Davi Leal <davi>
Project Administrator
Tue Apr 14 01:54:33 2009, comment #1:

Where am I going to find the all messages that are created for e-mail that would be necessary to encrypt/sign?

(file #17915, file #17916)

-Deleted Account- <nicalvaro>In charge of this item.
Sat Jun 14 09:29:40 2008, original submission:
Davi Leal <davi>
Project Administrator


Attached Files
file #18161:  newgpgkey.html added by nicalvaro (326B - text/html)
file #18162:  retrieve_encryptedtest.php added by nicalvaro (678B - application/x-httpd-php)
file #18159:  Cryptography.php added by nicalvaro (3kB - application/x-httpd-php)
file #18160:  importcontrol.php added by nicalvaro (519B - application/x-httpd-php)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by nicalvaro (Updated the item)
  • -unavailable- added by davi (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 9 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon May 18 05:11:52 2009nicalvaroAttached File-=>Added newgpgkey.html, #18161
      Attached File-=>Added retrieve_encryptedtest.php, #18162
    Mon May 18 05:11:00 2009nicalvaroAttached File-=>Added Cryptography.php, #18159
      Attached File-=>Added importcontrol.php, #18160
    Mon May 18 05:01:44 2009nicalvaroAttached File#17916=>Removed
    Mon May 18 05:01:27 2009nicalvaroAttached File#17915=>Removed
    Tue Apr 14 01:54:33 2009nicalvaroAttached File-=>Added encrypttest-class.php, #17915
      Attached File-=>Added sample-gpg-tests.php, #17916
    Fri Mar 13 18:47:13 2009daviAssigned toNone=>nicalvaro

    Back to the top

    Powered by Savane 3.1-cleanup1