Dev

dev@lists.roundcube.net

4296 discussions

Mailvelope default keyring identifier
by Kyle Francis 12 Jul '16

12 Jul '16

I noticed in app.js the default mailvelope keyring identifier is set to this.user_id, which is a long unique identifier. This produced an unexpected behavior for me. My use case was as such: I initially installed Mailvelope, exported my GPG keys from roundcube/enigma and loaded them into Mailvelope (no issues). Then I attempted to encrypt an outgoing email using the Mailvelope api plugin (vice the enigma plugin) and was told that Mailvelope was unable to find the requisite public keys for the intended recipient. Wait, what? I just imported those in the last step... In debugging app.js through the browser I saw that the keyring was in fact empty, yet the only keyring I saw through the plugin interface in Firefox was the default keyring that I had previously imported keys into. It wasn't until I used the mailvelope API to manually open the settings page for the new keyring that I was able to in face see the alternate keyring (and subsequently add keys to it). As it turns out, the default keyring identifier used by the Mailvelope plugin is in fact 'mailvelope'. Would it make more sense to default to that keyring instead of initializing a new one off of the user_id in Roundcube? Are there any conflicts that I'm not thinking of? I suggest this change since I wasn't even able to find the new roundcube keyring from the user interface in the first place. To me this seems "more intuitive", but then again my HCI course isn't until the fall semester ;) If this would be useful I would be more than happy to submit a PR. Kyle

2 1

Updating Crypt_GPG version
by Kyle Francis 11 Jul '16

11 Jul '16

I saw the changes for adding the option to exporting Private GPG keys from the Enigma plugin which is awesome. I was doing some testing with my SMIME work making sure I didn't break anything when I noticed that exporting private GPG keys fails for me because I don't have the latest version of Crypt_GPG which has the new exportPrivateKeys function. Since the vendor folder isn't included in the github repo, what would be the best way to update my local copy of Crypt_GPG? Can I just copy Crypt_GPG-1.4.2/{Crypt,data} to roundcubemail/vendor/pear-pear.php.net/Crypt_GPG? Kyle

2 2

Accessing Mailvelope Keyring
by Kyle Francis 11 Jul '16

11 Jul '16

I just started playing around with the Mailvelope support in v1.2 and I it looks quite nice. I wasn't aware that Mailvelope now supports adding attachements and that was a pleasant surprise. In attempting to implement the hybrid PGP decryption model (decrypting the session key in the client and passing the session key back to the server for full decryption) I was hoping to tap into the mailvelope keyring as I figure it will be more secure in terms of storage than attempting to write my own using openpgp.js. I see where mailvelope is loaded in app.js and "this" refers to an instance of rcube_webmail. However, from the plugin space (i.e. enigma.js) the "this" class is of type rcmail and notably "this" does not contain the previously initialized "mailvelope_keyring". Since my javascript fu is not as strong as my php fu, would anyone be able to point me in the right direction of how to access the mailvelope_keyring from inside the plugin space, specifically enigma.js? -Kyle

2 1

[1.3] Drop mail() support
by A.L.E.C 28 Jun '16

28 Jun '16

PHP mail() is just too simple for such a sophisticated app as Roundcube. I propose to drop mail() support and require smtp_server setting. Is there any reason to keep it? https://github.com/roundcube/roundcubemail/issues/5340 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Enigma decryption password prompt
by Kyle Francis 28 Jun '16

28 Jun '16

2 5

Patch for french translation
by Olivier Thauvin 20 Jun '16

20 Jun '16

Hi, There is a small but very anoying typo in the french translation. In a nutshell the current translation is: on = No off = Yes. I did a patch few month ago, can please apply it to definitivly solve this issue. Regards. -- Olivier Thauvin CNRS - LATMOS ♖ ♘ ♗ ♕ ♔ ♗ ♘ ♖

2 1

Security issue in centos_rhel_install.sh
by Alex H. 14 Jun '16

14 Jun '16

Hi, I just subscribed to tell you this issue I stumbled upon. In centos_rhel_install.sh [1] there is this line for generating the des key and then putting it in the config. The way it is made, the key might contain characters which break the sed expression putting the key in the config file, so that the configured key is broken: The line generating the key: deskey=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9-_#&!*%?' | fold -w 24 | head -n 1) Taking a look on this example key: 2S0?w1*6GXrxFSah!%&xjnaq It can contain a '&', which will break the sed expression: sed -i "s|^$\$config\['des_key'\] =$.*$|\1 \'${deskey}\';|" /var/www/html/roundcube/config/config.inc.php so that the example key will bring this result in the config: $config['des_key'] = '2S0?w1*6GXrxFSah!%$config['des_key'] = 'rcmail-!24ByteDESkey*Str';xjnaq'; instead of: $config['des_key'] = '2S0?w1*6GXrxFSah!%&xjnaq'; Some info about my environment: # cat /etc/centos-release CentOS release 6.8 (Final) # sed --version GNU sed version 4.2.1 Best regards, Alex H. [1] https://gist.github.com/rcubetrac/cc85589b837d58680a86e7b5cbb09a4f#file-cen…

1 0

Searching for messages...
by Michael Heydekamp 11 Jun '16

11 Jun '16

...still seems to be quite a strange thing in Roundcube. Just did a search for the term "Ibiza" in the subject: 1) First of all, some messages even when searching in just one specific folder are not found at all. Although the subject clearly contains this string, a message with the subject "Auftragsbestätigung Düsseldorf-Valencia-Ibiza 12JUN16" is not being found. Looking at the source of the message, it becomes quite clear, why: > Subject: =?UTF-8?Q?Auftragsbest=C3=A4tigung_D=C3=BCsseldorf-Valencia-Ibiz?= > =?UTF-8?Q?a_12JUN16?= See...? The subject is folded right before the last character of "Ibiza", and the search routine apparently doesn't unfold such headers. Not good. 2) OTOH, a search for the same string "Ibiza" across ALL folders does find messages which do not contain this string in the subject at all and therefore shouldn't be found: "Re: Anfrage Mexiko-Miami 02DEC16 und Montréal-New York 10DEC16" "Re: IBZ - Vigo" "✈ Aktuelle Flugzeugverfügbarkeiten" "Re: EMPTY LEG C650 (CITATION III ) Availability" "Re: ZRH - DUS" Just a few examples of HUNDREDS of (wrong) matches. What's the search routine looking for? Apparently not only for "Ibiza", but for what else? Indeed, those messages DO contain the string "Ibiza" in the body, but I didn't ask for a search in the subject AND the body. I still may have more issues with regards to searching messages which I did report last year already, but that should be it for today. Searching for messages is quite critical for me, as I'm using Roundcube not (only) for private purposes - as you may see above. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

3 7

[1.3] Modify search box
by A.L.E.C 10 Jun '16

10 Jun '16

https://github.com/roundcube/roundcubemail/issues/5312 This one is not so significant, but there is a couple of options. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

[1.3] Drop legacy browser support
by A.L.E.C 10 Jun '16

10 Jun '16

Hi! there's a couple of things that should be discussed/voted for Roundcube 1.3. So, please put your comment here or in the ticket in case you are against the proposed changes. This is about dropping IE7, IE8, and maybe IE9 support, including removal of legacy_browser plugin. https://github.com/roundcube/roundcubemail/issues/5167 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev