- Dev - Roundcube mailing lists

Re: [RCD] Roundcube iPhone app urgently needed
by Adventurer 07 Aug '17

07 Aug '17

The responses so far seem either irrelevant or insulting. Again, asking for iOS Roundcube-app or mobile-friendly Roundcube-login-website to access mail stored on one's host server (because all hosts I've seen lack mobile-friendly email interface for Roundcube) Again, setting POP/IMAP/SMTP servers on cell phones is storage + security risk for many users. Obviously webmail useful for phones, e.g. this why Gmail-app exists for iOS!

2 1

Roundcube iPhone app urgently needed
by Adventurer 07 Aug '17

07 Aug '17

PLEASE MAKE ROUNDCUBE iPHONE MOBILE APP ASAP Critically important because the workarounds are bad: 1. setting POP/IMAP/SMTP servers on cell phones is storage + security risk for many users 2. using forwarders to read email on a secondary mobile-webmail app (e.g. gmail app) is security concern + sometimes the forwarding fails 3. buying g-suite or other expensive service is prohibitively expensive Please escalate this feedback to your developers, extremely important to many Roundcube users Many Thanks! Jed

3 2

Re: [RCD] Roundcube iPhone app urgently needed
by Adventurer 07 Aug '17

07 Aug '17

Roundcube, when integrated on host website is not mobile-friendly on ANY phone browser

5 6

installation of Resend(bounce) for roundcube-1.3.0
by Spirk, Werner 04 Aug '17

04 Aug '17

hello, I installed the feature Resend(bounce) for roundcube-1.3.0 according as described under https://github.com/roundcube/roundcubemail/commit/1b2d3c0ac2ccd297ca2965a15… I didn't find the email address for the developer Aleksander Machniak so I ... First of all "bounce" below "forward as attachment" is shown greyed. So I cannot test this feature. So I tried to forward a message "HTTP 500-Error" came up. The logs/errors shows: [01-Aug-2017 10:24:32 Europe/Berlin] PHP Fatal error: Uncaught Error: Class 'rcmail_sendmail' not found in /srv/www/roundcube-1.3.0/program/steps/mail/compose.inc:65 Stack trace: #0 /srv/www/roundcube-1.3.0/index.php(303): include_once() #1 {main} thrown in /srv/www/roundcube-1.3.0/program/steps/mail/compose.inc on line 65 I don't know why program/include/rcmail_sendmail.php where class rcmail_sendmail is defined will not be integrated by index.php(303): include_once() Can anyone tell me what's going wrong and what I have to do? Thanks in advance Werner

1 1

MyRoundCube register plugin
by Bob Poljakov 24 Jul '17

24 Jul '17

Hi there, has anyone the register plugin developed by MyRoundCube? Any idea why this plugin was removed from the installable packages? Cheers: Bob

1 0

Feature request: selectable sent folder for different personalities
by Lukas 07 Jul '17

07 Jul '17

Hi Devs! I am not a dev and I apologize if I am eventually writing to the wrong list... if this is the case, please tell me where to send my email or who I should contact. My question: would it be possible to let the user select a certain folder for sent mail depending on the personality he is using to write? I mean a menu in the Personality Editor Window so that every personality may have its own sent mail folder. Thanks a lot Lukas (Italy)

2 1

Roundcube Webmail 1.3.0 released
by Thomas Bruederli 26 Jun '17

26 Jun '17

Dear subscribers We proudly announce the stable version 1.3.0 of Roundcube Webmail which is now available for download. With this milestone we introduce new features since the 1.2 version: - Widescreen layout aka Three Column View - Possibility to display QR code for contacts data - New identicon plugin [1] - Attach contact vCards to composed message - Support WEBP images and MathML preview - Preview, download and rename attachments when composing a message - Message/rfc822 attachment preview - Various Enigma (PGP) and Managesieve plugin improvements - “Flattened” the Larry theme giving it a fresher look Plus security and deployment improvements: - Improve randomness of password salts and random hashes - Fixed redundancy in sql caching system and compatibility with Galera Cluster And finally some code-cleanup: - Dropped support for legacy browsers (IE < 10; removed legacy_browser plugin) - Require PHP >= 5.4 - Removed PHP mail() support - Removed 3rd party javascript libraries from the repository - Require jQuery 3.x which has breaking changes to older versions IMPORTANT: The code-cleanup part brings major changes and possibly incompatibilities to your existing Roundcube installations. So please read the Changelog [2] carefully and thoroughly test your upgrade scenario. Please note that Roundcube 1.3 1. no longer runs on PHP 5.3 2. no longer supports IE < 10 and old versions of Firefox, Chrome and Safari 3. requires an SMTP server connection to send mails 4. uses jQuery 3.2 and will not work with current jQuery mobile plugin With the release of Roundcube 1.3.0, the previous stable release branches 1.2.x and 1.1.x will switch in to LTS low maintenance mode which means they will only receive important security updates but no longer any regular improvement updates. See the complete Changelog in our wiki [2] and download the new packages from https://roundcube.net/download. Roundcube 1.3.0 is considered stable and we recommend to update all productive installations of Roundcube. As usual, don’t forget to backup and test with your custom plugins. Best, Alec & Thomas [1] https://en.wikipedia.org/wiki/Identicon [2] https://github.com/roundcube/roundcubemail/wiki/Changelog

1 0

Re: [RCD] Menu ideas
by Thomas Bruederli 19 May '17

19 May '17

Hello Martin (cc-ing dev mailing list as this answer might be of a common interest) Roundcube skins define a number of named containers which can be used to add custom elements from plugins. Seek the skin templates for <roundcube:container ..> tags to locate them. For the compose screen, there's the 'composeoptions' container which is probably the one you want. The plugin API wiki describes how to add elements to such containers: https://github.com/roundcube/roundcubemail/wiki/Plugin-API#client-scripts-a… Using JavaScript, this could look like this: var menu = $('<select>')... rcmail.add_element(menu, 'composeoptions'); You can also add elements to containers with PHP when the view template is rendered: $menu = new html_select(array('name' => 'xxx')); $menu->add(array(/* add options here */)); $this->api->add_content( html::span('composeoption', html::label(null, $menu->show() . $this->gettext('menulabel'))), 'composeoptions' ); For further questions about Roundcube plugin development, please subscribe and post to the dev mailing list. This is our dedicated support channel for development stuff. Kind regards, Thomas On Wed, May 17, 2017 at 1:16 PM, Martin Landhage <martin.landhage(a)gmail.com> wrote: > This is what I'm trying to archive. > > Regards > Martin > > 2017-05-17 13:13 GMT+02:00 Martin Landhage <martin.landhage(a)gmail.com>: > >> Hello ! >> >> I have been struggling some time now to make a menu in compose area, but >> I have not been very successful. >> >> First I did a version that adds the menu in settings area that worked >> quite well. But the customer was not happy with that. >> >> Then I have been struggling with diffrent solutions and no one really >> worked for me. >> >> The best solution I have seen is for Enigma plugin. But it's only working >> in Classic skin and ONLY for Enigma. >> >> I have to use Roundcube 1.1.4. >> >> Any good ideas ? >> >> To unpack the file, add .tar.gz >> >> Regards >> Martin Landhage >> > >

1 0

RC 1.2.5 - HTML e-mails rendering issues
by Stefano Gironella 02 May '17

02 May '17

Hi, I've noticed a strange behaviour after upgrading from RC 1.2.3 to 1.2.5, HTML e-mails rendering seems to be a little broken. This is how a test massage looks in RC 1.2.3: And this is how same message looks in RC 1.2.5 and 1.2.4 too (note the missing formatting, colors, …): To reproduce this, I’ve used same configuration on both testing environments. Attached below, the e-mail template used in this example. Anyone else il facing the same issue or have an idea on how to fix this? Thanks Dott. Stefano Gironella Schema31 S.p.A. - Socio Unico FI - ROMA - PA ITALY Tel: +39. 06.98.358.472 Fax: +39. 055.71.880.466 Società del Gruppo Ovidio Tech s.r.l.

1 0

Release Candidate for version 1.3 available for download
by Thomas Bruederli 01 May '17

01 May '17

Dear subscribers We proudly announce that the feature-complete release candidate for the next major version 1.3 of Roundcube webmail is now available for final testing. After dropping support for older browsers and PHP versions and adding some new features like the widescreen layout, the release candidate finalizes that work and also fixes two security issues (updates for stable versions will follow) plus adds improvements to the Managesieve and Enigma plugins. We also slightly polished the Larry theme to make it look a little less 2010 :-) Although the default theme still doesn’t work on mobile devices, a fully responsive skin is currently being worked on. As a reminder: if you’re installing the dependent package or run Roundcube directly from source, you now need to install the removed 3rd party javascript modules by executing the following install script: $ bin/install-jsdeps.sh With the upcoming stable release of 1.3.0 the old 1.x series will only receive important security fixes. As usual, see the complete Changelog in our wiki [1] and download the new packages from https://roundcube.net/download. Please note that this is a release candidate and we recommend to test it on a separate environment. And don’t forget to backup your data before installing it. Kind regards, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog

3 3

Security updates 1.2.5, 1.1.9 and 1.0.11 released
by Thomas Bruederli 28 Apr '17

28 Apr '17

Dear subscribers We just published updates to all stable versions 1.x delivering important bug fixes and improvements which we picked from the upstream branch. The updates primarily fix a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin (CVE-2017-8114). More details about this vulnerability will be published soon by the reporter. Security-wise the update is therefore only relevant for those installations of Roundcube using the password plugin with either one of these drivers. See the full changelog for the according version in the release notes on the Github download pages: https://github.com/roundcube/roundcubemail/releases/tag/1.2.5 https://github.com/roundcube/roundcubemail/releases/tag/1.1.9 https://github.com/roundcube/roundcubemail/releases/tag/1.0.11 All versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. As usual, don’t forget to backup your data before updating! Kind regards, Thomas

1 0

Roundcube Webmail 1.0.10 released
by Thomas Bruederli 10 Apr '17

10 Apr '17

Dear subscribers We just recently published a security update to the LTS version 1.0. It contains some important fixes and improvements we backported from the master version. See the details in the release notes [1]. This release is considered stable and we recommend to update all productive installations of Roundcube 1.0.x with this version if you're unable to upgrade to a more recent series. Download it from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.0.10

3 4

Enigma: Inline-PGP not decrypted when embedded in HTML
by Joachim Fahrner 13 Mar '17

13 Mar '17

Hi, Thunderbird creates strange Inline-PGP messages when sending HTML. I got the following mail: User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <br> -----BEGIN PGP MESSAGE----- <br> Charset: utf-8 <br> Version: GnuPG v2.0.20 (MingW32) <br> <br> hQEMA/TVXfPpchmrAQgAmA2577rkRl7151xthejm/4p0GZyNAw+vhGSF8HmHGPJV <br> I9q5b+c/Ul3454AsqGfSrI0MDTnv2PO2MOkC0Th6WlW/9QvOo6IutRIbxiQgnzCP <br> 1pMCMJgj4jSpynla2Gpe41FRHxh6ZNlndZ60mq7a2xQLqjUPh9+K2BH/6tQko33N <br> ... 2e7t2IeG/8uMkV2iPWNcxA== <br> =KUPp <br> -----END PGP MESSAGE----- <br> <br> </body> </html> It seems this strange format is not handled by Enigma. Mailvelope can decrypt these messages without problems. Regards Jochen

2 1

Updates 1.2.4 and 1.1.8 released
by Thomas Bruederli 10 Mar '17

10 Mar '17

Dear subscribers We just published another update to both stable versions 1.2 and 1.1 delivering important bug fixes and improvements which we picked from the upstream branch. Included is a fix for a recently reported XSS vulnerability within CSS styles inside an SVG tag. See the full changelog for 1.2.4 in the wiki [1] and for version 1.1.8 in the release notes [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don't forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-123 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.1.8

1 0

Automatic encryption of the response
by Vladimir Gorpenko 28 Feb '17

28 Feb '17

Hi! I work with my plugin for s/mime encryption. Functions of encryption and decryption are independent. I would like to release the mode when the response to the encrypted letter is by default encrypted. How I can to transfer in RC information that the letter on which the response is written was encrypted from decryption plugin to encryption plugin? -- Best regards, Vladimir Gorpenko

1 0

Plugin feedback?
by Lukas Erlacher 28 Feb '17

28 Feb '17

Hello, I've been cobbling around with roundcube for a while now (I'm also the author of https://github.com/roundcube/roundcubemail/pull/5565, which sadly I haven't really followed through with). I've now started my first "real" roundcube plugin, here: https://github.com/duk3luk3/roundcube-maintenance-banner I'd be happy to hear any feedback, especially if I'm missing some "best practices". Thanks, Luke

1 1

Current 1.3-git completely broken/unusable (eben w/o any plugins)
by Michael Heydekamp 14 Feb '17

14 Feb '17

Hello, see subject. Just login/logout, you'll see it yourself instantly. Please test your stuff before committing it. Can't access anything, interface is broken, etc. pp. Urgent fix appreciated. Win10/64, FF (but same with Edge). Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

5 21

new helper script for more secure password changing with chpasswd
by Kay Marquardt 13 Feb '17

13 Feb '17

Hi all, I updated roundcube on my new server to 1.3-beta and it worked like a charm, thanks for it. on this new server I tested the password plugin and was not pleased to allow the webserver to call "sudo chpasswd". After some investigation and testing I ended up with a new helper script to call change password via ssh using the provided and excelent expect-passwd method. Additionally I rewrote the chpasswd driver to provide the old password in a compatible way and extended it to pass error messages back to roundcube. Are you interested in my changes and whats the best way to send them for review? From my config.php: // chpasswd Driver options // --------------------- // Command to use (see "Sudo setup" in README) // 2017-02-13: Remarks by Kay Marquardt kay(a)rrr.de // allowing sudo chpasswd directly IMHO opens a security hole! // any script on the webserver can change password for every user, incl. root // $config['password_chpasswd_cmd'] = 'sudo /usr/sbin/chpasswd 2>/dev/null'; // try to be more secure and use dovecot or pam methods // if this is not possible in your setup you can increase security by // sudo to a wrapper, where you can implement some security meassures // 1. a simple wraper is provided by this plugin: helpers/chpasswrapper.py // 2. move wrapper out of default location to a random place // 3. change permissons of wrapper to root:www 770 to avoid changes by user or webserver // 4. add some security meassures, i.e. limit userids where password can be changed // 5. allow webserver sudo for wrapper only (see README) // $config['password_chpasswd_cmd'] = 'sudo /<RANDOMPATH>/roundcube/wrapper/chpass-wrapper.py'; // IMHO the most flexible and secure method for users with interactive shell access is to use ssh with an expect script // I modifed the chpasss driver to provide the old password needed, additionally it pass the script response in case of error. // 1. I wrote a wrapper for the nice expect script provided by this plugin: helpers/chpass-wrapper-expect.py // 2. move wrapper out of default location to a random place // 3. change permissons of wrapper to root:www 770 to avoid changes by user or webserver // 4. I add some security meassures and password policy, see wrapper for details // 5. remove sudo rules you may have applied (see README) $config['password_chpasswd_cmd'] = '/srv/www/database/roundcube/wrapper/chpass-wrapper-expect.py -ssh -host rrr.de'; Kay

1 0

Directly delete messages in Junk
by cor＠xs4all.nl 26 Jan '17

26 Jan '17

Hi all, over the years ive been getting more and more ‘complaints’ that roundcube “isnt directly deleting messages in Junk”. People seem to expect that that option means that spam email is simply directly discarded. Instead, it basically means “dont move messages to trash folder”. Anyone else ever get these questions? Is there possibly a better text for this option? Regards, Cor

1 0

automatically expand address book
by cor＠xs4all.nl 25 Jan '17

25 Jan '17

Hi all, im probably overlooking something obvious but is there a way to automatically expand the address book in the left bar on the compose screen in 1.2? It’s kind of silly that you have to always expand it yourself. Regards, Cor

2 2

Re: [RCD] Join development of new Roundcube skin
by Michiel Beijen 18 Jan '17

18 Jan '17

Hi Georg, On Tue, Jan 17, 2017 at 9:11 AM, Georg Greve <greve(a)kolabsystems.com> wrote: > I assume you saw the message that Thomas posted to the backers on the forums > in October last year? End of year and beginning of new year are always > exceptionally busy times, but past FOSDEM we'll be able to look at > this with fresh eyes to put a new team on this. No, I did not see this, i only saw his update on the Indiegogo page here: https://www.indiegogo.com/projects/roundcube-next--2#/updates which is marked as '8 months ago' which would be May 2016. So do you have a link for this other message from October? > It will happen, and if you really can't wait for your stickers in the > meantime, we'd be happy to provide them - we just felt it made more sense > to do that together with some more concrete news. Of course I can wait for the stickers :D I was just a little disappointed in the lack of updates; since funding was reached in summer 2015 there have been only 2 updates on the indiegogo page. Plus there seem to me more people disappointed there, if I read the comments section: https://www.indiegogo.com/projects/roundcube-next--2#/comments Kindest regards, and looking forward for more updates on Roundcube Next in the upcoming period, -- Michiel

2 1

Join development of new Roundcube skin
by A.L.E.C 18 Jan '17

18 Jan '17

I started working on a new responsive skin for Roundcube. Any help appreciated. Especially we lack graphics and design experts, but there will be also a lot of copy/paste/cleanup and other simple tasks. There's a separate repository so you can send pull requests and discuss issues/features there. https://github.com/roundcube/elastic -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] ---------------------------------------------------- PGP: 19359DC1 # Blog: https://kolabian.wordpress.com

2 3

Updates 1.2.3 and 1.1.7 released
by Thomas Bruederli 05 Jan '17

05 Jan '17

Dear subscribers We just published another update to the both stable versions 1.2 and 1.1 delivering important bug fixes and improvements which we picked from the upstream branch. Included is a fix for a recently revealed security issue when using PHP's mail() function. It has been discovered and kindly reported by Robin Peraglie using the static code analyzer RIPS [1] and more details along with a CVE number will be published shortly. See the full changelog for 1.2.3 in the wiki [2]. Version 1.1.7 is a security update fixing the mail() issue and thus only relevant to Roundcube installations not having an SMTP server configured for mail delivery. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don't forget to backup your data before updating! Best, Thomas [1] https://www.ripstech.com/ [2] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-123

2 1

exporting secret keys
by devotedmystic . 22 Nov '16

22 Nov '16

I just installed the latest git version. When I export just the public key, all works fine. When I include the secret key, nothing happens and I cannot download it. Of course, I see both keys in the PGP Keys view. So there is some issue with the secret key export.

1 1

Syncloud: Roundcube based mail server on a device
by Boris Rybalkin 16 Oct '16

16 Oct '16

Hello Roundcube developers, I would like to let you know that we are developing open source platform for Raspberry Pi and alike devices which allows easy installation of popular services. So far we have a few apps in the store including: Diaspora, ownCloud/nextcloud, Mail server based on Roindcube. We also provide a sub domain under syncloud.it <http://syncloud.it/> for free for convinience (pure DNS, not tunnel) it may be useful for individuals especially for those with no development experience. Currently we have a complete mail server app on top of Roindcube, Postfix, Dovecot, Postgres and LDAP. We are happy to work with application development communities like yours. It would be great if you could mention us somewhere on <http://diasporafoundation.org/>https://roundcube.net/about/supporters Our site: syncloud.org <http://syncloud.org/> Code: https://github.com/syncloud <https://github.com/syncloud> Thank you, Boris Rybalkin, Co-founder and Developer, syncloud.org

1 0

PHP openssl_pkcs7_decrypt BUG
by Kyle Francis 06 Oct '16

06 Oct '16

So it appears as though there is a bug in decrypting emails when using . It appears as though the error only surfaces (sometimes) when decrypting with the sender's credentials. This leads to some, not all, messages not being able to be decrypted from the "Sent" folder in Roundcube. The emails that cannot be decrypted from the "Sent" folder are successfully decrypted when viewing in Thunderbird (either from the recipients account or the sender's account). This tells me the bug is with the php function openssl_pkcs7_decrypt. The same email is also not able to be decrypted utilizing openssl from the command line. All emails successfully decrypt with gpgsm. I could do one of two things: 1. Decrypt utilizing gpgsm, keep openssl_pkcs7_* functions for everything else and attempt to fix/submit patch for openssl[_pkcs7_decrypt] function at a later date. Pro - least amount of re-work could make it into an upcoming beta Con - "messy"/fragmented solution 2. Re-write all openssl_pkcs7_* PHP functions to utilize gpgsm Pro - unified, "clean" solution gpgsm integrates with gpg for public/private key storage decrypted emails would never be written to file Con - extensive rework Probably won't make the next beta Importing pkcs12 files into keyrings is currently "messy" and would still require use of openssl_pkcs7 function for certificate manipulation I'd really like to see this feature be wrapped up, but I also want to do it right. Thoughts? -Kyle

2 1

Update 1.2.2 and 1.1.6 released
by A.L.E.C 30 Sep '16

30 Sep '16

Dear subscribers We just published updates to both stable versions 1.2 and 1.1 delivering important bug fixes and again more improvements of the Enigma plugin introduced in version 1.2. Version 1.1.6 comes with cherry-picked fixes from the more recent version and improvements in contacts searching as well as a few localization fixes. See the full changelog in the wiki [1] and the selection for 1.1.6 on the release page [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Alec [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-122 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.1.6

1 0

GB2312 and ISO-2022-KR
by Vladimir Gorpenko 29 Sep '16

29 Sep '16

Hello. Sometimes to me letters in such charsets come. No, I don't correspond with Chinese or Koreans. But someone writes on cyrillic using these charsets. These codings, as well as UTF-8, allow to mix characters of different national alphabets, including Latin and cyrillic in the letter. Some e-mail clients work with this coding normally. As far as I can judge, RC 1.1.4 doesn't support these codings. Whether there is a support of these codings in the latest version of RC? Whether it is planned to add it to next versions? Most likely, I should add it to RC 1.1.4 urgently. I will be grateful if to me help to find places where different codings for a letter body, both HTML, and the text are processed. I found processing of codings in titles recently. If it is interesting to someone, I am ready to transfer results of this work. -- Best regards, Vladimir Gorpenko

5 10

Enigma hybrid decryption
by Kyle Francis 28 Sep '16

28 Sep '16

Hey everyone, So I'm mostly finished with the implementation of the hybrid decryption model. So far I have the following working: enigma.js calls a mailvelope API I added for decrypting session key out of a PGP message - decrypted session key and PGP message get posted (over https) back to the enigma plugin enigma.php catches posted data and decrypts PGP message with session key - modified Crypt_GPG to additionally utilize GPG's "--override-session-key" So I can write the decrypted email to a file on the server, but I'd like to replace the body of the email and reload. When doing this while decrypting S/MIME it was simple since the replacing occurred before the message was completely loaded and rendered out as html. Is there any way to replace the body (and subsequently parse the body structure) after all the plugin hooks have run? I tried calling exec_hook for message_part_body, but as far as I can tell I would need to pass the rcube_message object as an argument to do this but I don't have access to it. Any thoughts would be greatly appreciated. -Kyle

7 29

GB2312, ISO-2022-KR
by Vladimir Gorpenko 27 Sep '16

27 Sep '16

Something managed to be clarified. Perhaps, it will be interesting. If you remember, I have two servers, will call them W and T. T normally opens letters in these codings, W shows something like the Arab characters. 1. In case of conversion of the codings RC at first tries to use iconv. As iconv(php) is an interface to the linux utility iconv, it doesn't work at the server W where chroot is used. On the T server iconv transforms both of these codings normally. 2. In the second queue RC tries to apply mbstring to conversion of codings. Mbstring, apparently, doesn't understand GB2312 (GBK), but understands ISO-2022-KR. Nevertheless, mbstring also doesn't work at W server. I think, the reason is also somehow connected to chroot. I suppose, RC has problems with different codings by operation under chroot. Though I still hope to set up operation of iconv and mbstring. -- Best regards, Vladimir Gorpenko

4 13

Re: [RCD] Plugin - AJAX GET request to cross domain
by Thomas Bruederli 26 Sep '16

26 Sep '16

On Wed, Sep 21, 2016 at 3:03 AM, Joogl <jooglnetz(a)posteo.uk> wrote: > Thank you Thomas, Please try to reply to the mailinglist and not to me privately. Otherwise you might wait for days until you get a response :-) > > I very appreciate it. > Since I have to query an external API, I am calling it with cURL. > But whenever I do this, I get an Internal Server Error Message. But I > can't find any logs about it. When I try it in my local workspace, > everything works fine. > Does Roundcube forbid cURL? Roundcube does not forbid anything. curl needs to be installed with PHP on your server. Fatal errors are logged into Roundcube's error log or the error log file of your webserver. ~Thomas > function sendCurl($url) > { > $ch = curl_init($url); > $curlResult["msg"] = curl_exec($ch); > $curlResult["http"] = curl_getinfo($ch, CURLINFO_HTTP_CODE); > curl_close($ch); > return $curlResult; > } > > Am 18.09.2016 um 23:20 schrieb Thomas Bruederli: >> On Sun, Sep 18, 2016 at 10:53 AM, Joogl <jooglnetz(a)posteo.uk> wrote: >>> Thanks a lot Thomas, >>> was not too hard to be honest. >>> >>> But I still have problems with my values I want to transfer. >>> Do I really have to use $_POST? I mean, for what reason do I have the >>> $args variable? >> >> Actually, the $args variable is empty in this case. >> In order to access request data, you should use the dedicated function [1]: >> >> rcube_utils::get_input_value('someparam', rcube_utils::INPUT_GPC); >> >> This does proper input sanitization like html tag stripping and >> charset conversion. >> Use rcube_utils::INPUT_GET or rcube_utils::INPUT_POST to access GET or >> POST parameters specifically. >> >> Regards, >> Thomas >> >> >> [1] https://github.com/roundcube/roundcubemail/blob/master/program/lib/Roundcub… >> >> >>> Am 17.09.2016 um 00:56 schrieb Thomas Bruederli: >>>> On Mon, Sep 12, 2016 at 11:21 AM, Jakob Bachhuber <jakob-b(a)posteo.de> wrote: >>>>> [...] >>>>> >>>>> Of course, I have read the documentation. I also analysed some other >>>>> plugins, but it is still just random guessing for me. >>>> >>>> The relevant part for you is probably here: >>>> https://github.com/roundcube/roundcubemail/wiki/Plugin-API#ajax-requests-an… >>>> >>>>> In my php I do: >>>>> $this->register_action('plugin.someaction', array($this, 'actions')); >>>>> >>>>> and >>>>> >>>>> function actions($args) >>>>> { >>>>> echo '<script type="text/javascript">alert("' . $args . >>>>> '")</script>'; >>>>> echo '<script type="text/javascript">alert("' . $args['value'] . >>>>> '")</script>'; >>>>> $this->rc->ouput->send(); >>>>> } >>>> >>>> The way to pass data back to the client is not using `echo` but send >>>> it a "command" for which your plugin has already registered an event >>>> listener: >>>> >>>> $rcmail->output->command('plugin.somecallback', $args); >>>> >>>> Makes sense? >>>> >>>> ~Thomas >>>>

1 0

GB2312, ISO-2022-KR and other problems
by Vladimir Gorpenko 23 Sep '16

23 Sep '16

First, I am not sure now that the problem with GB2312 was on a test server before reload of system. Perhaps, it always worked correctly. In any case, it has no errors log. On the work server the error log present. As I understand, the record [23-Sep-2016 10:48:49 Europe/Moscow] PHP Notice: No suitable function found for UTF-8 encoding in /var/www/html/mail/program/lib/Roundcube/rcube_charset.php on line 276 has a direct bearing on my problems with G2312. What does it mean? Secondly, on this server in a log there is a group of the errors relating to spell-checker. [23-Sep-2016 10:24:05 Europe/Moscow] PHP Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /var/www/html/mail/program/lib/Roundcube/rcube_spellcheck_googie.php on line 87 [23-Sep-2016 10:24:05 Europe/Moscow] PHP Warning: fsockopen(): Failed to enable crypto in /var/www/html/mail/program/lib/Roundcube/rcube_spellcheck_googie.php on line 87 [23-Sep-2016 10:24:05 Europe/Moscow] PHP Warning: fsockopen(): unable to connect to ssl://spell.roundcube.net:443 (Unknown error) in /var/www/html/mail/program/lib/Roundcube/rcube_spellcheck_googie.php on line 87 Thirdly, after the Linux updating RC ceased to work at the work server. More precisely, the authentication page opens and works normally. The wrong password is processed normally. But after input of the correct password the RC page doesn't open, and the browser (Chrome) reports ERR_EMPTY_RESPONSE. In the RC error log there is no diagnostics about it. I will be grateful for any consultations on search of the reasons of this failure. Updating of Linux was very big. One more question which doesn't have a direct relation on RC, but here are specialists in e-mail. Perhaps, somebody will be so kind that he will answer. In case of attachment of the file in the letter the title in which cyrillic is encoded quite peculiar is created. Content-Disposition: attachment; filename*0*=UTF-8''%D0%9E%D1%82... I can't find the function which is realizing such coding or descriptions of the standard. I just don't know that I should look for. How this coding is named? -- Best regards, Vladimir Gorpenko

2 5

Re: [RCD] Plugin - AJAX GET request to cross domain
by Thomas Bruederli 18 Sep '16

18 Sep '16

On Sun, Sep 18, 2016 at 10:53 AM, Joogl <jooglnetz(a)posteo.uk> wrote: > Thanks a lot Thomas, > was not too hard to be honest. > > But I still have problems with my values I want to transfer. > Do I really have to use $_POST? I mean, for what reason do I have the > $args variable? Actually, the $args variable is empty in this case. In order to access request data, you should use the dedicated function [1]: rcube_utils::get_input_value('someparam', rcube_utils::INPUT_GPC); This does proper input sanitization like html tag stripping and charset conversion. Use rcube_utils::INPUT_GET or rcube_utils::INPUT_POST to access GET or POST parameters specifically. Regards, Thomas [1] https://github.com/roundcube/roundcubemail/blob/master/program/lib/Roundcub… > Am 17.09.2016 um 00:56 schrieb Thomas Bruederli: >> On Mon, Sep 12, 2016 at 11:21 AM, Jakob Bachhuber <jakob-b(a)posteo.de> wrote: >>> [...] >>> >>> Of course, I have read the documentation. I also analysed some other >>> plugins, but it is still just random guessing for me. >> >> The relevant part for you is probably here: >> https://github.com/roundcube/roundcubemail/wiki/Plugin-API#ajax-requests-an… >> >>> In my php I do: >>> $this->register_action('plugin.someaction', array($this, 'actions')); >>> >>> and >>> >>> function actions($args) >>> { >>> echo '<script type="text/javascript">alert("' . $args . >>> '")</script>'; >>> echo '<script type="text/javascript">alert("' . $args['value'] . >>> '")</script>'; >>> $this->rc->ouput->send(); >>> } >> >> The way to pass data back to the client is not using `echo` but send >> it a "command" for which your plugin has already registered an event >> listener: >> >> $rcmail->output->command('plugin.somecallback', $args); >> >> Makes sense? >> >> ~Thomas >>

1 0

Widescreen layout (three column view) is coming to you
by A.L.E.C 17 Sep '16

17 Sep '16

I just pushed "layout modes" change into dev-layouts branch. This is an implementation of three column view for mail UI. This is a BC breaking change. So, if you're an author of a skin or a plugin that modifies the messages list, you'll most likely have to do some modifications of your code. You can also just start beta-testing of this change, so it will be ready for 1.3-beta release. Have fun! https://kolabian.wordpress.com/2016/09/17/widescreen-layout-aka-three-colum… -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] ---------------------------------------------------- PGP: 19359DC1 # Blog: https://kolabian.wordpress.com

1 0

What can be reached, changing skin?
by Vladimir Gorpenko 16 Sep '16

16 Sep '16

I wasn't engaged in development of skins for RC yet. Before being engaged in it, I would like to understand what results can be received. Whether it is possible to change configuration of the screen? To make RC more convenient for operation from the smartphone? It seems, someone advertized the paid skins intended for this purpose. So it is possible? And maybe, the decision of this task already exists? I know the program RoundCube for Android which not bad adapts the interface. Though it is not absolutely correct. And for iOS such program is? -- Best regards, Vladimir Gorpenko

1 0

Login Script
by Aurélio de Souza Ribeiro Neto 16 Sep '16

16 Sep '16

2 1

Skin Markup
by Aurélio de Souza Ribeiro Neto 16 Sep '16

16 Sep '16

Hello Everyone, I'm devoloping a Plugin, and I have 2 questions: 1) How can I user a $label['variable'] content as HTML and not as Plain Text? 2) I can use a <roundcube:include file=......> to include a file from my plugin templates directory? Thanks Aurelio

2 2

Plugin - AJAX GET request to cross domain
by Jakob Bachhuber 16 Sep '16

16 Sep '16

Hey all, I am developing a plugin, where I wanna ask my personal web API about some email details. First, I tried to make a jquery ajax request. Firebug shows me the correct response, but I always get a 404 error. So the plugin does not get the result. I can imagine that is because a cross domain issue. Then I tried to do an ajax request to my server side plugin code, where I would try to make a php request to my API. But to be honest, I can't figure out how to send my values with such a GET request, process them within the php function and send it back. Of course, I have read the documentation. I also analysed some other plugins, but it is still just random guessing for me. Thanks for any help. Cheers, Jack In my JavaScript I do: var value = "test" rcmail.http_get("plugin.someaction","value"+value); In my php I do: $this->register_action('plugin.someaction', array($this, 'actions')); and function actions($args) { echo '<script type="text/javascript">alert("' . $args . '")</script>'; echo '<script type="text/javascript">alert("' . $args['value'] . '")</script>'; $this->rc->ouput->send(); }

2 1

List of attached files
by Vladimir Gorpenko 16 Sep '16

16 Sep '16

Hello! In what module the list the of attached files is created? I mean the list displayed on the right when reading the letter. I want to eliminate an insignificant error in my S/MIME plugin. The matter is that at me when reading the decrypted letter with attachment of .eml file this file in the list is displayed twice and I would like to deal with it. In structure of the decrypted letter this attachment it is specified only once. -- Best regards, Vladimir Gorpenko

2 1

Re: [RCD] Enigma hybrid decryption
by Kyle Francis 01 Sep '16

01 Sep '16

2 1

Re: [RCD] Enigma hybrid decryption
by Kyle Francis 01 Sep '16

01 Sep '16

2 1

Enigma S/MIME support
by Kyle Francis 23 Aug '16

23 Aug '16

Alec, Thanks for helping me get up and running with the enigma plugin and for pointing me to the previously existing work on an SMIME plugin. For those of you who don't know and are interested, I'm a Master's Candidate and I'm implementing S/MIME in the enigma plugin for an independent study this semester. So far I have implemented the following features: - Import PKCS#12 certificate store (password protected) - Pub cert, priv key, any additional certs contained in the store treated as CA certs. - create a hashed directory of CA certs - Verify S/MIME signatures (pkcs7-signatures .p7s) - Decrypt S/MIME encrypted emails - Decrypt and verify signed then encrypted emails Features that are not yet complete: - Encrypt only outgoing - Add menu option to Compose Window - Sign only outgoing (clear signing) - Add menu option to Compose window - Encrypt then Sign - Sign then Encrypt - List certs/details from settings view - Verify pkcs7-mime (.p7m) signed emails - Generate CSR - Handle CRL's (.p7c) Modifications are available at github.com/guitarmanusa/roundcubemail in a branch called enigma-smime-dev. -- Kyle Francis M.S.IT Candidate Rensselaer Polytechnic Institute Email - franck6(a)rpi.edu kyle(a)linuxtoolbox.ninja

3 8

Enigma logging
by Kyle Francis 23 Aug '16

23 Aug '16

2 1

QP-encoding and decoding within a plugin
by Rimas Kudelis 18 Aug '16

18 Aug '16

Hi, is there an official way to QP-encode and QP-decode a text string from within a RoundCube plugin? Thanks! Rimas

2 2

RC 1.2.1 - Enigma signed e-mail validation failure
by sgironella＠schema31.it 28 Jul '16

28 Jul '16

Hi. I'm facing a strange behaviour on latest RC version. I've enabled Enigma plugin and I'm able to create my key pairs, sign and encrypt messages. The strange thing is I couldn't verify signed messages at all, even if decryption in perfectly working. I've debugged GPG class (vendor/pear-pear.php.net/Crypt_GPG/Crypt/GPG.php) to verify what he was doing and why sign validation always fails. Within _SIGN() method, I've added following lines to log what he was going to sign: _$rc = rcmail::get_instance();_ _$rc->console('---------------------------------');_ _$rc->console('SIGN INPUT');_ _$rc->console($input);_ _$rc->console('---------------------------------');_ Same thing within _VERIFY() method, to log what is going to verify: _$rc = rcmail::get_instance();_ _$rc->console('---------------------------------');_ _$rc->console('VERIFY INPUT');_ _$rc->console($input);_ _$rc->console('---------------------------------');_ _$rc->console('VERIFY SIGNATURE');_ _$rc->console($signature);_ _$rc->console('---------------------------------');_ Here is my full output for the sequence: * user send a new signed email to himself * user goes to inbox and open signed e-mail I've noticed that the signed message has an extra newline between main headers and body (take a look at the highlited rows) so I thing that's why sign verification fails (content doesn't match with original message). _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> SIGN INPUT_ _[27-JUL-2016 15:10:38 +0200]: <CMNLOQL4> CONTENT-TYPE: MULTIPART/ALTERNATIVE;_ _ BOUNDARY="=_944CBD90B0D51928FF049222817A4B03"_ _--=_944CBD90B0D51928FF049222817A4B03_ _Content-Transfer-Encoding: 7bit_ _Content-Type: text/plain; charset=US-ASCII_ _This is an HTML content..._ _--=_944cbd90b0d51928ff049222817a4b03_ _Content-Transfer-Encoding: quoted-printable_ _Content-Type: text/html; charset=UTF-8_ _<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=_ _=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=_ _eva,sans-serif'>_ _<p>This is an HTML content...</p>_ _</body></html>_ _--=_944cbd90b0d51928ff049222817a4b03--_ _[27-Jul-2016 15:10:38 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> VERIFY INPUT_ _[27-JUL-2016 15:10:45 +0200]: <CMNLOQL4> CONTENT-TYPE: MULTIPART/ALTERNATIVE;_ _ BOUNDARY="=_944CBD90B0D51928FF049222817A4B03"_ _--=_944CBD90B0D51928FF049222817A4B03_ _Content-Transfer-Encoding: 7bit_ _Content-Type: text/plain; charset=US-ASCII_ _This is an HTML content..._ _--=_944cbd90b0d51928ff049222817a4b03_ _Content-Transfer-Encoding: quoted-printable_ _Content-Type: text/html; charset=UTF-8_ _<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=_ _=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=_ _eva,sans-serif'>_ _<p>This is an HTML content...</p>_ _</body></html>_ _--=_944cbd90b0d51928ff049222817a4b03--_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> ---------------------------------_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> VERIFY SIGNATURE_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> -----BEGIN PGP SIGNATURE-----_ _Version: GnuPG v1_ _iQEcBAEBAgAGBQJXmLLOAAoJEB1v3mO3A8Wpz6QH/015jrt7YkfGT8pE1nyjpHHe_ _JoCEmugkpmEgJ6wjTgU1SHQos5l1mKqFhsrzpdNghO11yqB/NxOjxOpqSkE9c9c1_ _dXr/H53cLfqPULMD5dqGBFua180BUdLAQ0Nvyll7kD8Y/irU5ccrwA1e3Cb9RYp0_ _sGplLYcD7pPKthCGQfFzPslL9Fj82MBJigm46cKa7pqYhJDNkM4q4zsqtNXcTUqB_ _HcFhEL3+Q21bAbie+B8hDw2SUYGEZORf+sLUrW1oQLLG5ld6XZywCDDKdpq6F+ET_ _OzVaXta8cMIg5dwP/10VALlqYavlzjY/0h7lBmEgm5W/ehs7XuReur45LsS1KJg=_ _=Q6j9_ _-----END PGP SIGNATURE-----_ _[27-Jul-2016 15:10:45 +0200]: <cmnloql4> --------------------------------_ Anyone is facing the same issue? Maybe it's not an Enigma related issue but a Roundcube behaviour because it happes even on not signed e-mails (but in this case it doesn't bother at all). Any help would be really appreciate. Thanks. Stefano

3 4

Update 1.2.1 published
by Thomas Bruederli 26 Jul '16

26 Jul '16

Dear subscribers We just published the first service release to update the stable version 1.2. It contains some important bug fixes and improvements in the recently introduced Enigma plugin for PGP encryption. See the detailed Changelog in the wiki [1] or on the the release page [2]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-121 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.2.1

1 0

RC 1.2 - Corrupted e-mail headers while sending an html empty message
by sgironella＠schema31.it 14 Jul '16

14 Jul '16

Hello all, I've recently posted a bug reporting to the Roundcube community forum [1] We have noticed a strange behavior with a fresh Roundcube 1.2 install (no additional plugins enabled nor 'strange' custom config defined). To reproduce this, send an e-mail using the html editor, leaving a blank content. Received e-mail has a 'text/html' content-type (instead of the expected 'multipart'). therefore client view raw mime-parts as e-mail content. Note that sent e-mail (taken from sender 'sent' mailbox) has the right content-type (multipart) so it's perfectly readable. In addition, we have recorded a tcpdump session, that confirm our impression of having two separate libraries handling in a different way SMPT (for delivery) and IMAP (for storing e-mail within 'sent' inbox) sections; that's what we got: IMAP SESSION (SAVE E-MAIL TO 'SENT' MAILBOX) - Note the right mime-type and boundary here * OK [CAPABILITY IMAP4rev1 AUTH=LOGIN AUTH=CRAM-MD5 ID LITERAL+] dbmail 3.2.3 ready. A0001 LOGIN xxxxx@xxxxxx xxxxxxx A0001 OK [CAPABILITY IMAP4rev1 ACL RIGHTS=texk NAMESPACE CHILDREN SORT QUOTA THREAD=ORDEREDSUBJECT UNSELECT IDLE ID UIDPLUS WITHIN CONDSTORE LITERAL+ ENABLE QRESYNC] User utente1(a)mail.qa.schema31.it authenticated A0002 LSUB "" Sent * LSUB (\hasnochildren) "/" "Sent" A0002 OK LSUB completed A0003 LIST "" Sent * LIST (\hasnochildren) "/" "Sent" A0003 OK LIST completed A0004 APPEND Sent (\Seen) {936+} MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_17681037babd7dadb94a79c2cf51cb1f" Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Jul 2016 14:23:01 +0200 From: Utente di TEST <utente1(a)mail.qa.schema31.it> To: stefano.gironella(a)gmail.com Subject: prova 2 Organization: SC31 Message-ID: <a46919e3b0380e0dc85f82e475581740(a)mail.qa.schema31.it> X-Sender: utente1(a)mail.qa.schema31.it User-Agent: Roundcube Webmail/1.2.0 --=_17681037babd7dadb94a79c2cf51cb1f Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII --=_17681037babd7dadb94a79c2cf51cb1f Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset= =3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen= eva,sans-serif'> </body></html> --=_17681037babd7dadb94a79c2cf51cb1f-- A0004 OK [APPENDUID 2028 2695213] APPEND completed A0005 LOGOUT * BYE A0005 OK LOGOUT completed SMTP SESSION (E-MAIL DISPATCH) - Note that content-type here is 'text/html' (maybe taken from the first non-empty mime-part?) 220 litio.roma.schema31.it ESMTP Sendmail 8.14.5/8.14.5; Thu, 14 Jul 2016 14:23:01 +0200 (CEST) EHLO localhost 250-litio.roma.schema31.it Hello [10.33.100.158], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-STARTTLS 250-DELIVERBY 250 HELP MAIL FROM:<utente1(a)mail.qa.schema31.it> 250 2.1.0 <utente1(a)mail.qa.schema31.it>... Sender ok RCPT TO:<stefano.gironella(a)gmail.com> 250 2.1.5 <stefano.gironella(a)gmail.com>... Recipient ok DATA 354 Enter mail, end with "." on a line by itself MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Date: Thu, 14 Jul 2016 14:23:01 +0200 From: Utente di TEST <utente1(a)mail.qa.schema31.it> To: stefano.gironella(a)gmail.com Subject: prova 2 Organization: SC31 Message-ID: <a46919e3b0380e0dc85f82e475581740(a)mail.qa.schema31.it> X-Sender: utente1(a)mail.qa.schema31.it User-Agent: Roundcube Webmail/1.2.0 --=_6e4cf8211c48e997305a4faab4020297 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII --=_6e4cf8211c48e997305a4faab4020297 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=UTF-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset= =3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen= eva,sans-serif'> </body></html> --=_6e4cf8211c48e997305a4faab4020297-- . 250 2.0.0 u6ECN1Je026469 Message accepted for delivery QUIT 221 2.0.0 litio.roma.schema31.it closing connection Links: ------ [1] http://www.roundcubeforum.net/index.php/topic,23529.0.html

3 4

Mailvelope default keyring identifier
by Kyle Francis 12 Jul '16

12 Jul '16

I noticed in app.js the default mailvelope keyring identifier is set to this.user_id, which is a long unique identifier. This produced an unexpected behavior for me. My use case was as such: I initially installed Mailvelope, exported my GPG keys from roundcube/enigma and loaded them into Mailvelope (no issues). Then I attempted to encrypt an outgoing email using the Mailvelope api plugin (vice the enigma plugin) and was told that Mailvelope was unable to find the requisite public keys for the intended recipient. Wait, what? I just imported those in the last step... In debugging app.js through the browser I saw that the keyring was in fact empty, yet the only keyring I saw through the plugin interface in Firefox was the default keyring that I had previously imported keys into. It wasn't until I used the mailvelope API to manually open the settings page for the new keyring that I was able to in face see the alternate keyring (and subsequently add keys to it). As it turns out, the default keyring identifier used by the Mailvelope plugin is in fact 'mailvelope'. Would it make more sense to default to that keyring instead of initializing a new one off of the user_id in Roundcube? Are there any conflicts that I'm not thinking of? I suggest this change since I wasn't even able to find the new roundcube keyring from the user interface in the first place. To me this seems "more intuitive", but then again my HCI course isn't until the fall semester ;) If this would be useful I would be more than happy to submit a PR. Kyle

2 1

Updating Crypt_GPG version
by Kyle Francis 11 Jul '16

11 Jul '16

I saw the changes for adding the option to exporting Private GPG keys from the Enigma plugin which is awesome. I was doing some testing with my SMIME work making sure I didn't break anything when I noticed that exporting private GPG keys fails for me because I don't have the latest version of Crypt_GPG which has the new exportPrivateKeys function. Since the vendor folder isn't included in the github repo, what would be the best way to update my local copy of Crypt_GPG? Can I just copy Crypt_GPG-1.4.2/{Crypt,data} to roundcubemail/vendor/pear-pear.php.net/Crypt_GPG? Kyle

2 2

Accessing Mailvelope Keyring
by Kyle Francis 11 Jul '16

11 Jul '16

I just started playing around with the Mailvelope support in v1.2 and I it looks quite nice. I wasn't aware that Mailvelope now supports adding attachements and that was a pleasant surprise. In attempting to implement the hybrid PGP decryption model (decrypting the session key in the client and passing the session key back to the server for full decryption) I was hoping to tap into the mailvelope keyring as I figure it will be more secure in terms of storage than attempting to write my own using openpgp.js. I see where mailvelope is loaded in app.js and "this" refers to an instance of rcube_webmail. However, from the plugin space (i.e. enigma.js) the "this" class is of type rcmail and notably "this" does not contain the previously initialized "mailvelope_keyring". Since my javascript fu is not as strong as my php fu, would anyone be able to point me in the right direction of how to access the mailvelope_keyring from inside the plugin space, specifically enigma.js? -Kyle

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev