Certificates for S/MIME

mcostan

Good morning,

I am trying to buy a certificate for S/MIME.

I have seen these dones:

https://www.comodo.com/home/email-security/free-email-certificate.php

But I cannot import it in Webapp.

Would anyone be able to direct me to the appropriate place where I could buy an appropriate certificate for webapp?

Thanks.

marty

Hi Marco,

Could you post yourS/MIME plugin version.
I’m guessing you’re using the master version and we’re currently fixing:
https://jira.kopano.io/browse/KSP-128

I don’t think comodo has the ca-issuer url set.

If all of the above is true, please use the final version of the S/MIME plugin :)

mcostan

Hi,

Indeed I am using the master version of S/MIME.

It’s ok, I can wait for it to be fixed in Master.

But in essence what you are saying, if I understand correctly, is that the Comodo certificates are OK?

marty

@mcostan The bug you experienced is indeed from our side.

mcostan

thanks for confirming.

I cannot unfortunately see the JIRA but I will try again perhaps next week to download the latest version.

mcostan

Hi,

Unfortunately I cannot see the S/MIME JIRA, it appears to be locked.

Is there any way to know when it will be fixed in the main branch?

Thanks.

marty

You should be able to track it now.

mcostan

I can now thanks.

mcostan

@marty

Question for:
https://jira.kopano.io/browse/KSP-128

The last comment on that JIRA mentions that the problem is fixed on the PHP sourcecode.

But does it mean that the Kopano issue will be fixed before though?

marty

Our fix will use some new functions merged into the php code and we try to provide this new php code as a patch so our fix will work with older php versions.

mcostan

Thanks. Once the change is out I’ll be happy to test.

mcostan

@marty

Hi, I was wondering when you think the fix will be completed.

marty

Hi Marco,

For testing you can grab the php-kopano-smime package in the master directory:
E.g. for Ubuntu 16: https://download.kopano.io/supported/smime:/master/Ubuntu_16.04/amd64/php-kopano-smime_0.1-0%2B3.1_amd64.deb

And checkout branch “KSP-128-fix-ocsp-ca” in project SMIME: https://stash.kopano.io/projects/KWA/repos/smime/browse

Thanks :)

mcostan

Hi,

Sadly I do not have access to that directory…

Is the build also available in the community overnight builds?

Thanks.

marty

The source code is:
https://download.kopano.io/community/smime:/sourcecode/

There are install instructions in the readme :)

mcostan

great thanks, I’ll have a look.

mcostan

@marty

Question: I have downloaded the latest build from the community location and installed it as below.

root@mrc-ubz64:~# dpkg -l |grep -i smime
ii kopano-webapp-plugin-smime 2.2.0.150-0+81.1 all Kopano WebApp S/MIME plugin

When I upload the Comodo certificate, it asks me for a passcode (which I do not believe I have set) then says it cannot be decrypted.

What do I do?

Thanks for your help.

marty

Hi Marco,

The certificate is probably installed in your browser. Check advanced settings and the certificate manager.
Make a backup with a password and upload the pkcs12 file again.

mcostan

Hi,

I have started a new fresh browser, deleted all the history of everything, disabled everything and then went under S/MIME and tried uploading the certificate.

The certificate I try to upload is what I received from Comodo from the following web page:

https://www.comodo.com/home/email-security/free-email-certificate.php

You then receive an e-mail and you can download from their site the .cer file which I believe is the certificate.

But

S/MIME does not like it…

Am I doing something wrong (I am pretty sure I am).

marty

Hi Marco,

That’s the wrong format.
Comodo installs the correct certificate in your browser, after clicking the link you’ve received via email.

After that you should make a backup of this certificate.