Certificates for S/MIME

mcostan

Question for:
https://jira.kopano.io/browse/KSP-128

The last comment on that JIRA mentions that the problem is fixed on the PHP sourcecode.

But does it mean that the Kopano issue will be fixed before though?

marty

Our fix will use some new functions merged into the php code and we try to provide this new php code as a patch so our fix will work with older php versions.

mcostan

Thanks. Once the change is out I’ll be happy to test.

mcostan

@marty

Hi, I was wondering when you think the fix will be completed.

marty

Hi Marco,

For testing you can grab the php-kopano-smime package in the master directory:
E.g. for Ubuntu 16: https://download.kopano.io/supported/smime:/master/Ubuntu_16.04/amd64/php-kopano-smime_0.1-0%2B3.1_amd64.deb

And checkout branch “KSP-128-fix-ocsp-ca” in project SMIME: https://stash.kopano.io/projects/KWA/repos/smime/browse

Thanks :)

mcostan

Hi,

Sadly I do not have access to that directory…

Is the build also available in the community overnight builds?

Thanks.

marty

The source code is:
https://download.kopano.io/community/smime:/sourcecode/

There are install instructions in the readme :)

mcostan

great thanks, I’ll have a look.

mcostan

@marty

Question: I have downloaded the latest build from the community location and installed it as below.

root@mrc-ubz64:~# dpkg -l |grep -i smime
ii kopano-webapp-plugin-smime 2.2.0.150-0+81.1 all Kopano WebApp S/MIME plugin

When I upload the Comodo certificate, it asks me for a passcode (which I do not believe I have set) then says it cannot be decrypted.

What do I do?

Thanks for your help.

marty

Hi Marco,

The certificate is probably installed in your browser. Check advanced settings and the certificate manager.
Make a backup with a password and upload the pkcs12 file again.

mcostan

Hi,

I have started a new fresh browser, deleted all the history of everything, disabled everything and then went under S/MIME and tried uploading the certificate.

The certificate I try to upload is what I received from Comodo from the following web page:

https://www.comodo.com/home/email-security/free-email-certificate.php

You then receive an e-mail and you can download from their site the .cer file which I believe is the certificate.

But

S/MIME does not like it…

Am I doing something wrong (I am pretty sure I am).

marty

Hi Marco,

That’s the wrong format.
Comodo installs the correct certificate in your browser, after clicking the link you’ve received via email.

After that you should make a backup of this certificate.

mcostan

mmm… I am confused. When I click on the install certificate in the Comodo email it doesn’t install anything in the browser, in any case I’ll try…

Coffee_is_life

Hello @mcostan,

if you are using firefox this should be easy:

click on settings -> advanced -> certificates
select the one which is related to comodo (should be installed after clicking the link in mail)
and click export… this should be a .crt file.
use that :)

Coffee_is_life

mcostan

all good!

Thanks!

mcostan

@Coffee_is_life

Question: every time I click “sign” it asks me for my certificate password.

So the question is: is there any way that webapp can keep (at least per session) the password so that every time you click “sign” it doesn’t ask the password again?

Also is there any way to have the “sign” button ticked by default?

Thanks!

Coffee_is_life

@mcostan,

sorry but i got no answer for that this time

Coffee_is_life

marty

@mcostan

Have a look at:
https://jira.kopano.io/browse/KSP-1
https://jira.kopano.io/browse/KSP-3
https://jira.kopano.io/browse/KSP-4
https://jira.kopano.io/browse/KSP-133

mcostan

Thanks Martin, the JIRAs are spot on.