Re: [Djigzo users] Servers wont talk to me!

lt;mailto:users-boun...@lists.djigzo.com>>>>>>] On Behalf Of Paul Bronson >> via Users >> Sent: Monday, June 26, 2017 1:57 PM >> To: Martijn Brinkers <mart...@ciphermail.com<mailto:mart...@ciphermail.com >>> <mailto:mart...@ciphermail.com<mai

[Djigzo users] New release of the CipherMail gateway (3.2.7-5)

A new version of the CipherMail email encryption gateway has been released (3.2.7-5) Release notes: New * IsSMIMEDeepScan matcher added. The IsSMIMEDeepScan matcher can be used to detect whether the email is S/MIME and/or whether the email contains an attached message (message/rfc822) which

Re: [Djigzo users] Encrypting attachment

On 09-08-17 17:50, Paul Bronson via Users wrote: Using OTP, when someone encrypts a message outbound and it has a PDF attachment, it doesn't get attached. Is that expected behavior? Is the sender using Mac Mail? You might try to enable the advanced PDF options "Deep scan" From release notes

Re: [Djigzo users] TLS Not Enabled by Default?

On 08/06/2017 12:00 AM, Paul Bronson via Users wrote: > I noticed that the TLS option is commented out.. and I noticed the > ciphermail system doesn't use TLS? Why is this? Nothing stops you from enabling TLS. If you want the SMTP server to accept TLS, you need to configure a SSL/TLS certificate

Re: [Djigzo users] Does ciphermail support RSASSA-PSS?

On 05/09/2017 06:50 PM, Andre Bürger via Users wrote: > Does ciphermail support the signature scheme RSASSA-PSS (PKCS #1 v2.1)? > And if so, how is it configured? > > Since ciphermail version 2.5.0-04 there is support for S/MIME v3.2 as > described in rfc5751. This RFC denotes RSASSA-PSS as

Re: [Djigzo users] Pricing info for enterprise version

On 05/09/2017 06:59 PM, Sebastian Nielsen via Users wrote: > I recently sent a email with questions about pricing and availablity of the > Enterprise/SME version of Ciphermail ( i...@ciphermail.com > ) . > > > > Have not got a reply. How I do to reach out to

Re: [Djigzo users] rejected mail for []:25 loops back to myself

On 05/13/2017 11:24 AM, Gabi Munteanu via Users wrote: > Hi Martijn, > While the gateway works great after setting it up between a Centos 7 based > email server and a firewall (Direct delivery setup), unfortunately after > trying to set it up between an exchange server and firewall I'm running

Re: [Djigzo users] HTML Notifications

On 06/20/2017 02:19 AM, Paul Bronson via Users wrote: > hi, > > I'd like to add some HTML into mt OTP notifications. Is this possible? I > have tried inserted and it gives me a big exception into MPA. The email template should be a valid email with the correct encoding and can contain anything a

Re: [Djigzo users] Servers wont talk to me!

On 06/22/2017 10:32 PM, Paul Bronson via Users wrote: > Okay here is what I have.. Still not sure what's wrong. > > http://imgur.com/a/k0ysM > http://imgur.com/a/QuyaO > http://imgur.com/a/9pNyl > > I have the IP listed in my networks. > > So my setup goes like this: > > Incoming email >>

Re: [Djigzo users] DLP Encryption

s, I suggest you create several patterns, for example a file with all products names starting with A, a file with product names starting with B etc. But that is up to you. If you created the list you might share it with the group so others might benefit. Kind regards, Martijn Brinkers > On Tue, Jun

Re: [Djigzo users] Experience and Implementation Guide for RSASSA-PSS / BDEW EDI Energy

On 06/03/2017 01:06 AM, Wolfgang Krauss via Users wrote: > since the 1st of June RSASSA-PSS is mandatory to be used in the German > energy market for communication between market partners. What are your > operational and implementation experiences ? > > For S/MIME we are using AES128 / Encryption

Re: [Djigzo users] Experience and Implementation Guide for RSASSA-PSS / BDEW EDI Energy

On 06/06/2017 11:16 AM, Martijn Brinkers via Users wrote: > On 06/03/2017 01:06 AM, Wolfgang Krauss via Users wrote: >> since the 1st of June RSASSA-PSS is mandatory to be used in the German >> energy market for communication between market partners. What are your >> operation

Re: [Djigzo users] Encryption Issue

On 06/19/2017 04:11 AM, Paul Bronson via Users wrote: > Hi All, > > I setup a new Ciphermail server and am getting some errors. > > Everything works except for the fact that I have my internal mail server > relaying to the cipher mail server for PDF encryption but I am getting the > following

Re: [Djigzo users] Restoring a backup from an old system fails: backup file to large

On 05/06/2017 07:49 PM, Stefan Günther via Users wrote: > Hello, > > one of our clients is running a six year old Djigzo 2.3.1-7 (tar installation) > > The backup creates a nice 58 MB tar backup file. > > But when we try to import the backup on a 3.2.7-5, (virtual appliance) we get > the error

Re: [Djigzo users] HTML code in the body

On 05/03/2017 10:08 AM, Gabi Munteanu via Users wrote: > Hello, Once an email(rich text or html) is being decripted the html > code is also added to the body of the message along with the message > itself. Any idea if that can be avoided somehow without switching to > plain text format? Thanks !

Re: [Djigzo users] HTML code in the body

ijn Brinkers > On Sat, 6 May 2017 at 20:02, Martijn Brinkers via > Users<users@lists.djigzo.com> wrote: On 05/03/2017 10:08 AM, Gabi Munteanu > via Users wrote: >> Hello, Once an email(rich text or html) is being decripted the html >> code is also added to the bod

Re: [Djigzo users] Restoring a backup from an old system fails: backup file to large

On 05/06/2017 08:21 PM, Stefan Michael Guenther via Users wrote: > -Ursprüngliche Nachricht- >> Von:Martijn Brinkers via Users >> Gesendet: Sam 6 Mai 2017 19:53 >> An: users@lists.djigzo.com >> Betreff: Re: [Djigzo users] Restoring a backup from an old system

Re: [Djigzo users] HTML code in the body

d then reads it in Outlook. Best regards,Gabi And is the message PGP/MIME or PGP/INLINE encoded? Martijn > On Sat, 6 May 2017 at 20:15, Martijn Brinkers via > Users<users@lists.djigzo.com> wrote: On 05/06/2017 08:09 PM, Gabi > Munteanu via Users wrote: >> >> >> Ye

Re: [Djigzo users] HTML code in the body

r some domains (to PGP/MIME). Note: I'm talking about the setting "PGP encoding to external". This is for outgoing email to external recipients Kind regards, Martijn Brinkers > On Sat, 6 May 2017 at 20:32, Martijn Brinkers via > Users<users@lists.djigzo.com> wrote:

Re: [Djigzo users] HTML code in the body

P/MIME leaves the complete MIME structure intact. This is supported by most PGP clients. Only use PGP/INLINE if a mail client does not support PGP/MIME. Kind regards, Martijn Brinkers > On Sat, 6 May 2017 at 20:32, Martijn Brinkers via > Users<users@lists.djigzo.com> wrote: On 0

Re: [Djigzo users] backend tool to export keys available?

On 05-10-17 17:25, Olaf Schwarz via Users wrote: Hi all, is there a way to export all "keys" (pgp public keys and S/MIME public keys) from a ciphermail instance? So far I found a way to import keys via the backend (mitm.application.djigzo.tools.CertManager). This is already very helpful. But I

[Djigzo users] New release of the CipherMail gateway (3.3.1-0)

A new version of the CipherMail email encryption gateway has been released (3.3.1-0) Virtual Appliance downloads: https://www.ciphermail.com/downloads-virtual-appliance.html Distribution packages downloads: https://www.ciphermail.com/downloads-gateway-distributions.html Release notes: New

Re: [Djigzo users] backend tool to export keys available?

On 05-10-17 17:25, Olaf Schwarz via Users wrote: Hi all, is there a way to export all "keys" (pgp public keys and S/MIME public keys) from a ciphermail instance? So far I found a way to import keys via the backend (mitm.application.djigzo.tools.CertManager). This is already very helpful. But I

Re: [Djigzo users] convert mailvelope keys from .asc format to ciphermail .p12 format

He was using the Android App, not the gateway :) The Android App does not support PGP keys. He wanted to reuse the PGP key for S/MIME. Since PGP keys and S/MIME keys are completely different, this is not supported. Kind regards, Martijn On 28-09-17 13:08, Dino Edwards via Users wrote:

Re: [Djigzo users] Upgrade error

On 27-08-17 00:39, Arie Koppelaar via Users wrote: After upgrading from 3.1.1 to 3.2.7 a couple of things went wrong. - From the webinterface menu: Admin/MTA/config - The following error appeared: An unexpected application exception has occurred. Render queue error in

Re: [Djigzo users] Warning about JCE

On 12-12-17 21:21, ratatouille via Users wrote: > Hello! > > Since I rebootet the host I see a red warning after logging in. > > "The unlimited strength JCE policy files are not properly installed." > > Do I have to do so? Which version of Java are you using? Are you using Oracle (SUN) or

Re: [Djigzo users] There are no valid S/MIME encryption certificates for the recipient

On 21-11-17 20:42, de Longpre, Dale via Users wrote: As far as I can tell this just started to happen today. I thought no emails were being encrypted (all domain based or subject triggers) but it appears some are going through. All of the certificates for domain xyzzy.com come from the same

Re: [Djigzo users] There are no valid S/MIME encryption certificates for the recipient

On 21-11-17 21:10, de Longpre, Dale wrote: For my test address I have 3 certificates, they all show in a white background, they have different validity dates and are all in range. The key usage on them digitalSignature, extended emailProtection, clientAuth. A user that works has a couple like

Re: [Djigzo users] Archive for old djigzo/ciphermail versions?

On 07-11-17 08:43, Stefan Günther via Users wrote: is there an archive for older djigzo versions where I could download a 2.x.x virtual appliance? Not online but I can upload an older version. Which version do you need? Kind regards, Martijn -- CipherMail email encryption Email encryption

Re: [Djigzo users] Restore DB from an old Djigzo installation fails partially

On 06-11-17 21:56, Stefan Michael Guenther via Users wrote: Good evening, one of our clients decided to only use pg_dump to backup his Djigzo Installation, which was probably about 6 years old. During the last weekend the single(!) hard disk gave up. A restore of the database produced a

Re: [Djigzo users] ciphermail does not start

On 11-12-17 12:03, ratatouille wrote: > Hello! > > Martijn Brinkers schrieb am 10.12.17 um 15:53:55 Uhr: > >>> # ant --execdebug >>> exec "/usr/lib/jvm/java/bin/java" -classpath >>>

Re: [Djigzo users] ciphermail does not start

On 11-12-17 13:13, ratatouille wrote: > Hello! > >>> # sudo -u djigzo ant -f /usr/share/djigzo/build.xml >>> Buildfile: /usr/share/djigzo/build.xml >>> >>> create-symlinks: >>>[delete] Deleting directory >>> /usr/share/djigzo/james-2.3.1/apps/james/SAR-INF/lib >>> [mkdir] Created dir:

Re: [Djigzo users] ciphermail does not start

On 09-12-17 23:39, ratatouille wrote: > Hello! > > This is an openSUSE 13.2 with > > # java -version > java version "1.8.0_152" > Java(TM) SE Runtime Environment (build 1.8.0_152-b16) > Java HotSpot(TM) Server VM (build 25.152-b16, mixed mode) > > # rpm -ihv djigzo-3.3.1-0.SUSE.noarch.rpm >

Re: [Djigzo users] ciphermail does not start

On 10-12-17 14:09, ratatouille via Users wrote: > Hello! > > Martijn Brinkers schrieb am 10.12.17 um 11:18:32 Uhr: > >>> This is an openSUSE 13.2 with >>> >>> # java -version >>> java version "1.8.0_152" >>> Java(TM) SE Runtime Environment (build 1.8.0_152-b16) >>> Java

Re: [Djigzo users] ciphermail does not start

On which SUSE release did you installed it? Kind regards, Martijn Brinkers On 09-12-17 22:07, ratatouille via Users wrote: > Hello! > > Installed djigzo-3.3.1-0.SUSE.noarch.rpm but I get a > > # ./start-djigzo.sh > ./start-djigzo.sh: Zeile 3: ./wrapper/wrapper-djigzo: Datei oder Verzeichnis

Re: [Djigzo users] Is Ciphermail save against "Efail"?

On 14-05-18 12:53, Andi via Users wrote: Hello, today a new threat againts encrypted e-mail (PGP and S/MIME) is in the news: https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now From what i understand the basic problem is that it is

Re: [Djigzo users] PGP New Vulnerabilities

Hi, I have written a short blog article on EFAIL. https://www.ciphermail.com/blog/efail-who-is-vulnerable-pgp-smime-or-your-mail-client.html Kind regards, Martijn Brinkers On 14-05-18 14:40, CipherMail via Users wrote: Hi, This morning we were alerted about a new PGP vulnerability.

Re: [Djigzo users] PGP New Vulnerabilities

On 15-05-18 12:06, Andi via Users wrote: Zitat von Martijn Brinkers via Users <users@lists.djigzo.com>: Hi, I have written a short blog article on EFAIL. https://www.ciphermail.com/blog/efail-who-is-vulnerable-pgp-smime-or-your-mail-client.html Kind regards, Martijn Brinkers On

[Djigzo users] EFAIL: how to detect you are being attacked?

Hi, A short article on how to detect whether an EFAIL attack was used. https://www.ciphermail.com/blog/efail-how-to-detect-you-are-being-attacked.html Kind regards, Martijn Brinkers -- CipherMail email encryption Email encryption with support for S/MIME, OpenPGP, PDF encryption and secure

Re: [Djigzo users] Deployment of CipherMail

On 23-05-18 09:34, Ralf Kirmis via Users wrote: we are planning to deploy ciphermail and use exim as our MTA. Can you post some of your config snippets, for using exim with ciphermail? The CipherMail gateway can basically split up into three parts. The MTA (postfix), the encryption/decryption

Re: [Djigzo users] Deployment of CipherMail

On 23-05-18 19:44, lists via Users wrote: I'm on 4.1.0. I can add the following findings: The client certificate is issued by this root: CN=D-TRUST CA 2-1 2015, O=D-Trust GmbH, L=Berlin, C=DE http://www.d-trust.net/cgi-bin/D-TRUST_CA_2-1_2015.crt It is issued by: CN=COMODO RSA Certification

Re: [Djigzo users] Back-end is not running or not yet fully started up

The back-end log files are stored in /usr/share/djigzo/logs the file /var/log/djigzo.log is symlinked to the latest log file. Kind regards, Martijn Brinkers On 09-06-18 17:33, Dino Edwards via Users wrote: Hello, I'm getting this error when trying to login to the Ciphermail Web GUI. Where

[Djigzo users] New release of the CipherMail Email Encryption Gateway (4.1.2-1)

A new version of the CipherMail email encryption gateway has been released (4.1.2-1) Release notes: * EFAIL detection added (see https://ciphermail.com/blog/efail-detection-and-prevention.html for more info) * TLSv1 and TLSv1.1 are now disabled (only TLSv1.2 is supported). Only strong TLS

Re: [Djigzo users] Djigzo (Chipermail) sent PDF does not work

It's important that the global "locality" setting is set to External and for the domains you receive email on to internal. In most cases the MPA log should provide all the information as to why en email is not PDF encrypted. If you can not find out from the MPA log why the message was not PDF

Re: [Djigzo users] SPAM: Re: Move from virtual appliance v3 to v4

Material von ihrem Computer zu löschen. Herzlichen Dank! Besuchen Sie auch unser Begegnungsfest · 01. Juli 2018 · in Fichtenau - Unterdeufstetten-Ursprüngliche Nachricht- Von: Users Im Auftrag von Martijn Brinkers via Users Gesendet: Mittwoch, 13. Juni 2018 21:39 An: users

Re: [Djigzo users] SMS Provider

Additional SMS providers can be added by implementing the SMS provider interface. This however required some code developed with Java. The pro/enterprise comes with some additional SMS providers. Kind regards, Martijn Brinkers On 14-06-18 23:18, Sven Halle via Users wrote: Hello out there,

Re: [Djigzo users] SMS Account does not work

The Clickatell provider uses the old style http provider, not the new style rest api. Does clickatell provide you with the option of selecting the old style api? kind regards, Martijn Brinkers On 15-06-18 12:38, Sven Halle via Users wrote: Hi out there, i course of the is no possibility to

Re: [Djigzo users] logging SOAP-Events between WEB-GUI and Tomcat-Backend

On 03-07-18 10:15, Sven Kusig via Users wrote: > Hello, > > i try to find out, how can i generate a new PGP-Key and allocate it to a > user via script (SOAP-Interface). > Is it possible to change the Logging-Level so that i can see the > SOAP-Request, which are the Web-Gui used for this

Re: [Djigzo users] Export CRL List from internal CA via command line

On 01-05-18 18:59, gulchi via Users wrote: Hi Martijn, hi list, thank you for your help in advance. I use Ciphermails internal CA for creating SMIME certificates. Now I download the CRLs manually from Ciphermails Web Interface. Is there a way to create and download the crl with the command

Re: [Djigzo users] Rookie Question - G Suite

On 02-05-18 17:41, Greg Williams via Users wrote: Hi, How to I get Ciphermail to accept email from G Suite (this is where our emails are hosted) Our domain is setup both in domains and relay but I do not know how to get it to accept our outgoing emails without giving access to anyone who uses

Re: [Djigzo users] Set encryption scheme and signing algorith for certain senders

On 09-01-18 17:06, Andi via Users wrote: > > Zitat von Philipp Thielke via Users : > >> Hi Martijn, >> >> thanks for adding new encryption scheme and signing algorithm in 3.3.1-0. >> (RSAES-OAEP) >> >> As these are required for German energy market and beyond this not

Re: [Djigzo users] Message: There are no roots.

Hi Gabi, On 14-02-18 20:59, Gabi Munteanu via Users wrote: Hi,I'm having some issues while trying to send an email to a specific address, if sometimes fails to send the email and in the log I see this.13 Feb 2018 23:59:38 | WARN Error while building path for certificate. Certificate: Issuer:

Re: [Djigzo users] mail forwarding loop

On 20-02-18 18:41, Stefan Günther via Users wrote: after running a couple of days, the ciphermail system at a customers site complains about a mail forwarding loop. The customers says that they didn't change anything, which seems to be true according to the timestamp of the configuration files.

Re: [Djigzo users] PDF Files not Encrypting

On 22-02-18 22:16, Paul Bronson via Users wrote: Hi all, I was wondering if anyone uses Roundcube and has an issue where Ciphermail doesn't encrypt the PDF? I have tried enabling deep scan. Doesn't help. Here is screenshot. I do not have option to open/view the encrypted PDF:

Re: [Djigzo users] PDF Files not Encrypting

rypted PDF opened with firefox with attachments. On the left hand side you see the attachment pane. You need to click on the left hand icon to open the extra panes (at least in Firefox). Kind regards, Martijn Brinkers On Thu, Feb 22, 2018 at 4:45 PM, Martijn Brinkers via Users <users@lis

Re: [Djigzo users] PDF Files not Encrypting

x with attachments. On the left hand side you see the attachment pane. You need to click on the left hand icon to open the extra panes (at least in Firefox). Kind regards, Martijn Brinkers On Thu, Feb 22, 2018 at 4:45 PM, Martijn Brinkers via Users <users@lists

Re: [Djigzo users] mail forwarding loop

On 21-02-18 12:24, Stefan Günther wrote: -Ursprüngliche Nachricht- > Von:Martijn Brinkers via Users > Gesendet: Mittwoch 21 Februar 2018 09:07 > An: users@lists.djigzo.com > Betreff: Re: [Djigzo users] mail forwarding loop > > On 20-02-18 18:41, Stefan

Re: [Djigzo users] PDF Encryption "Generate password to originator" vs. SMS send

On 05-07-18 22:02, Yves Kretzschmar-Schwipper via Users wrote: > Hello, > > if I enable the option "Generate password to originator" in Settings - PDF > the password for new users is sent back to the originator as the name says > but even if I specify a mobile number in the Subject Line no SMS

Re: [Djigzo users] Upgrade from 2.8.6.2 to 3.3.1.0 fails: Could not load mailet (SenderDKIMVerify)

On 07-03-18 21:34, Stefan Günther via Users wrote: -Ursprüngliche Nachricht- Von:Martijn Brinkers via Users Gesendet: Mon 5 März 2018 13:08 An: users@lists.djigzo.com Betreff: Re: [Djigzo users] Upgrade from 2.8.6.2 to 3.3.1.0 fails: Could not load mailet

Re: [Djigzo users] Upgrade from 2.8.6.2 to 3.3.1.0 fails: Could not load mailet (SenderDKIMVerify)

On 09-03-18 16:18, Stefan Günther via Users wrote: On 07-03-18 21:34, Stefan Günther via Users wrote: -Ursprüngliche Nachricht- Von:Martijn Brinkers via Users Gesendet: Mon 5 März 2018 13:08 An: users@lists.djigzo.com Betreff: Re: [Djigzo users] Upgrade from

Re: [Djigzo users] DLP regex

Hi René On 11-04-18 18:51, René Sasse via Users wrote: first of all: thanks for this great gateway :-) I wonder how to deal with the regex-engine within the DLP. What I'm trying to achieve is, that mails to a specific domain will be blocked when a special word (classification: *whatever*) is

Re: [Djigzo users] DLP regex

On 13-04-18 14:01, René Sasse via Users wrote: Hi Martijn, Am 13.04.18 um 12:00 schrieb users-requ...@lists.djigzo.com: The DLP patterns are a sender only property. That means that only the DLP patterns configured for the sender are taking into account. The main reason this was designed to be

Re: [Djigzo users] Mail routing, when external & internal relay host are the same

On 22-03-18 18:23, Stefan Günther via Users wrote: we just installed Ciphermail as virtual machine on a Univention Corporate Server (UCS). The idea is that UCS grabs emails via fetchmail, sends them to the Ciphermail VM and finally stores them in the local Kopano installation. In the

Re: [Djigzo users] Question - PGP/MIME and PGP/INLINE

On 29-03-18 09:51, Robert.Wiegand--- via Users wrote: I have a question about incoming connections for my domain. If I activate PGP/INLINE is PGP/MIME still working? Or if there is a sender just sending PGP/INLINE I have to setup a second ciphermail server to support PGP/INLINE? PGP/MIME

Re: [Djigzo users] DLP features

What do you actually mean with "sensitive data"? a list of keywords? or some text? or... Kind regards, Martijn Brinkers On 18-03-18 13:30, Dino Edwards via Users wrote: Hi, I have a general question about the DLP functionality. Is there a way to import lists of sensitive data into it from

Re: [Djigzo users] Upgrade from 2.8.6.2 to 3.3.1.0 fails: Could not load mailet (SenderDKIMVerify)

On 02-03-18 19:47, Stefan Günther via Users wrote: Hello, yesterday I tried to update an "old" Ciphermail installation from version 2.8.6.2 to version 3.3.1.0 by installing the three packages as suggested in the documentation: dpkg -i djigzo_3.3.1-0_all.deb dpkg -i