List Info

Thread: Re: encrypted mail does not show up




Re: encrypted mail does not show up
country flaguser name
Canada
2008-01-18 16:28:48
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marco Hahnen - ITSM wrote:

> I just tried to encrypt the mail in our database using
the blowfish feature. Incoming E-Mail gets encrypted
correctly in the database, but the webinterface can not
decrypt the mails. If I display the E-Mail in raw-mode, I
get the encrypted stuff... 
> The user running the webserver-process has access to
the blowfish.key (imho).

Which versions of Crypt::CBC and Crypt::Blowfish are you
using?  What
did the configtest.pl script report?

There were a few troublesome versions of Crypt::CBC as I
recall that
failed to properly insert the "RandomIV" header at
the beginning of the
encrypted data, so when the PHP-based Mcrypt routines looked
at the data
they couldn't identify it as encrypted.  If the
"raw" display of the
encrypted data does not begin with the string
"RandomIV", then this is
what has happened.

Updating to a newer Crypt::CBC is usually the solution
(unless the
author has once again broken it in the latest version). 
Note that items
that were already encrypted without the "RandomIV"
information will not
be recoverable (they lack the initialization vector needed
to decipher
them), even after you correct the problem.  New items should
encrypt and
decrypt properly, however.

- --
Robert LeBlanc <rjlrenaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFHkSggGmqOER2NHewRAtUJAJ48KjI31IDT/4DViCZS5UjpiFyJzgCe
LBu+
lbGHqtdqQ7yTFDENqAcctZQ=
=fota
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Re: encrypted mail does not show up
country flaguser name
Germany
2008-01-19 13:25:35
That's it!

CBC was version 2.12. I upgraded to 2.24 and now it works!
Perhaps you should add this requirement in the installation
manual.


With best regards

ITSM  -  Gesellschaft für
Informationstechnologie
und Services Meiß mbH

Marco Hahnen
marco.hahnenitsm.de

+49 (0) 2173 / 10 64 8-79   (Phone)
+49 (0) 2173 / 10 64 8-48   (Fax)
0800 / 800 4357                 (Hotline)

Postanschrift:
ITSM GmbH
Heinrich-von-Stephan-Str. 9
40764 Langenfeld

http://www.itsm.de
http://www.profree.de

Eingetragen beim Amtsgericht Düsseldorf (HRB 46382) -
Geschäftsführer Norbert Meiß und Beate Meiß
__________________________________________
Diese E-Mail enthält vertrauliche und/oder rechtlich
geschützte Informationen. Wenn Sie nicht der richtige
Adressat sind oder diese E-Mail irrtümlich erhalten haben,
informieren Sie bitte sofort den Absender, und vernichten
Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte
Weitergabe dieser Mail sind nicht gestattet.

This e-mail may contain confidential and/or privileged
information. If you are not the intended recipient (or have
received this e-mail in error) please notify the sender
immediately and destroy this e-mail. Any unauthorized
copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.

> -----Original Message-----
> From: maia-users-bouncesrenaissoft.com
[mailto:maia-users-
> bouncesrenaissoft.com] On Behalf Of Robert LeBlanc
> Sent: Freitag, 18. Januar 2008 23:29
> To: maia-usersrenaissoft.com
> Subject: Re: [Maia-users] encrypted mail does not show
up
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Marco Hahnen - ITSM wrote:
> 
> > I just tried to encrypt the mail in our database
using the blowfish
> feature. Incoming E-Mail gets encrypted correctly in
the database, but the
> webinterface can not decrypt the mails. If I display
the E-Mail in raw-
> mode, I get the encrypted stuff...
> > The user running the webserver-process has access
to the blowfish.key
> (imho).
> 
> Which versions of Crypt::CBC and Crypt::Blowfish are
you using?  What
> did the configtest.pl script report?
> 
> There were a few troublesome versions of Crypt::CBC as
I recall that
> failed to properly insert the "RandomIV"
header at the beginning of the
> encrypted data, so when the PHP-based Mcrypt routines
looked at the data
> they couldn't identify it as encrypted.  If the
"raw" display of the
> encrypted data does not begin with the string
"RandomIV", then this is
> what has happened.
> 
> Updating to a newer Crypt::CBC is usually the solution
(unless the
> author has once again broken it in the latest version).
 Note that items
> that were already encrypted without the
"RandomIV" information will not
> be recoverable (they lack the initialization vector
needed to decipher
> them), even after you correct the problem.  New items
should encrypt and
> decrypt properly, however.
> 
> - --
> Robert LeBlanc <rjlrenaissoft.com>
> Renaissoft, Inc.
> Maia Mailguard <http://www.maiamail
guard.com/>
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

> 
>
iD8DBQFHkSggGmqOER2NHewRAtUJAJ48KjI31IDT/4DViCZS5UjpiFyJzgCe
LBu+
> lbGHqtdqQ7yTFDENqAcctZQ=
> =fota
> -----END PGP SIGNATURE-----
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )