BUG: The IV parameter must be as long as the blocksize at /pathto/encrypt.php

When attempting to view an encrypted email from the cache,
the contents 
are blank and there is an error in the logs:

[Fri Sep 21 16:23:03 2007] [error] [client 172.16.x.x] maia:
2007-09-21 
16:23:03 (EDT) - Warning - mcrypt_decrypt() [<a 
href='function.mcrypt-decrypt'>function.mcrypt-decrypt<
;/a>]: The IV 
parameter must be as long as the blocksize at 
/var/www/localhost/htdocs/maia/encrypt.php line [139]n,
referer: 
http://mydomain.com/maia/list-cache.php?cache_type=ham


My distribution is gentoo, amd64 architecture.  I am using
the following:
apache-2.2.4-r12
php-5.2.4_p20070914-r2
libmcrypt-2.5.7

Let me know what other information you need.
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sep 21, 2007, at 3:28 PM, Cory Coager wrote:

> When attempting to view an encrypted email from the
cache, the  
> contents
> are blank and there is an error in the logs:
>
> [Fri Sep 21 16:23:03 2007] [error] [client 172.16.x.x]
maia:  
> 2007-09-21
> 16:23:03 (EDT) - Warning - mcrypt_decrypt() [<a
>
href='function.mcrypt-decrypt'>function.mcrypt-decrypt<
;/a>]: The IV
> parameter must be as long as the blocksize at
> /var/www/localhost/htdocs/maia/encrypt.php line
[139]n, referer:
> http://mydomain.com/maia/list-cache.php?cache_type=ham

>
> My distribution is gentoo, amd64 architecture.  I am
using the  
> following:
> apache-2.2.4-r12
> php-5.2.4_p20070914-r2
> libmcrypt-2.5.7
>
> Let me know what other information you need.


Could be this problem?

http://w
ww.maiamailguard.org/maia/ticket/368




David Morton
Maia Mailguard http://www.maiamailguard
.com
mortondadgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFG+8lkUy30ODPkzl0RAonWAJ0UvAykAK85yAx9hDm1dr6fRZ4eiACf
ReWa
jFHDJOS6ZOFBFbu2Qs2510A=
=KfmX
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

David Morton wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On Sep 21, 2007, at 3:28 PM, Cory Coager wrote:
>
>> When attempting to view an encrypted email from the
cache, the contents
>> are blank and there is an error in the logs:
>>
>> [Fri Sep 21 16:23:03 2007] [error] [client
172.16.x.x] maia: 2007-09-21
>> 16:23:03 (EDT) - Warning - mcrypt_decrypt() [<a
>>
href='function.mcrypt-decrypt'>function.mcrypt-decrypt<
;/a>]: The IV
>> parameter must be as long as the blocksize at
>> /var/www/localhost/htdocs/maia/encrypt.php line
[139]n, referer:
>> http://mydomain.com/maia/list-cache.php?cache_type=ham

>>
>> My distribution is gentoo, amd64 architecture.  I
am using the 
>> following:
>> apache-2.2.4-r12
>> php-5.2.4_p20070914-r2
>> libmcrypt-2.5.7
>>
>> Let me know what other information you need.
>
>
> Could be this problem?
>
> http://w
ww.maiamailguard.org/maia/ticket/368
>
>
>
>
> David Morton
> Maia Mailguard http://www.maiamailguard
.com
> mortondadgrmm.net
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
>
>
iD8DBQFG+8lkUy30ODPkzl0RAonWAJ0UvAykAK85yAx9hDm1dr6fRZ4eiACf
ReWa
> jFHDJOS6ZOFBFbu2Qs2510A=
> =KfmX
> -----END PGP SIGNATURE-----

Yes and no.  I was using Crypt::CBC 2.22 so I downgraded to
2.15.  I 
regenerated a new key, restarted amavis, sent a new email
but I still 
get the same error message.  Could there be another
dependency breaking 
this?
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sep 27, 2007, at 10:40 AM, Cory Coager wrote:

>
> Yes and no.  I was using Crypt::CBC 2.22 so I
downgraded to 2.15.   
> I regenerated a new key, restarted amavis, sent a new
email but I  
> still get the same error message.  Could there be
another  
> dependency breaking this?

I'm not really familiar with that bit of code.

A good question is, do you really need it?   All it does is
encrypt  
the message in the database.  Anyone with access to the web
server  
can get the key...  the encryption feature is IMHO useless
unless you  
really know what you are doing and really need it.   For me,
it uses  
unneeded resources.


David Morton
Maia Mailguard http://www.maiamailguard
.com
mortondadgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFG+9XfUy30ODPkzl0RAvinAJ9En0KB1KS+XGwifTtIiRWAvjuJRwCg
lXIv
guAAMsvFehIRlEgH9xoLQUg=
=tgAb
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

David Morton wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On Sep 27, 2007, at 10:40 AM, Cory Coager wrote:
>
>>
>> Yes and no.  I was using Crypt::CBC 2.22 so I
downgraded to 2.15.  I 
>> regenerated a new key, restarted amavis, sent a new
email but I still 
>> get the same error message.  Could there be another
dependency 
>> breaking this?
>
> I'm not really familiar with that bit of code.
>
> A good question is, do you really need it?   All it
does is encrypt 
> the message in the database.  Anyone with access to the
web server can 
> get the key...  the encryption feature is IMHO useless
unless you 
> really know what you are doing and really need it.  
For me, it uses 
> unneeded resources.
>
>
> David Morton
> Maia Mailguard http://www.maiamailguard
.com
> mortondadgrmm.net
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
>
>
iD8DBQFG+9XfUy30ODPkzl0RAvinAJ9En0KB1KS+XGwifTtIiRWAvjuJRwCg
lXIv
> guAAMsvFehIRlEgH9xoLQUg=
> =tgAb
> -----END PGP SIGNATURE-----

All the text body messages are empty in the cache.  Also, if
you deliver 
a message from here, the email contents comes out as
gibberish text.

So I can disable the encryption then?  How do I do this? 
Just remove 
the encryption information from amavis and maia?
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sep 27, 2007, at 11:15 AM, Cory Coager wrote:

>
> All the text body messages are empty in the cache. 
Also, if you  
> deliver a message from here, the email contents comes
out as  
> gibberish text.
>
> So I can disable the encryption then?  How do I do
this?  Just  
> remove the encryption information from amavis and
maia?


yes, just remove the keys.   Then new messages will be
stored plain  
text.    The existing cached stuff is likely not recoverable
anyway.

Anyone who has a working encryption that wants to disable
it, it  
would suffice to remove the key config from amavisd-maia
config,  
which would stop new items from being encrypted, but the
rest of the  
system would handle both until the encrypted stuff is cycled
out.

David Morton
Maia Mailguard http://www.maiamailguard
.com
mortondadgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFG++IsUy30ODPkzl0RAt5LAJ9E5uUc+27RXyw0vJMio1upPP+UAgCg
nf6W
ZkY0LPY3V6hYFDqtXMvQV3o=
=J38x
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users