Dev

dev@lists.roundcube.net

4304 discussions

Accessing Mailvelope Keyring
by Kyle Francis 11 Jul '16

11 Jul '16

I just started playing around with the Mailvelope support in v1.2 and I it looks quite nice. I wasn't aware that Mailvelope now supports adding attachements and that was a pleasant surprise. In attempting to implement the hybrid PGP decryption model (decrypting the session key in the client and passing the session key back to the server for full decryption) I was hoping to tap into the mailvelope keyring as I figure it will be more secure in terms of storage than attempting to write my own using openpgp.js. I see where mailvelope is loaded in app.js and "this" refers to an instance of rcube_webmail. However, from the plugin space (i.e. enigma.js) the "this" class is of type rcmail and notably "this" does not contain the previously initialized "mailvelope_keyring". Since my javascript fu is not as strong as my php fu, would anyone be able to point me in the right direction of how to access the mailvelope_keyring from inside the plugin space, specifically enigma.js? -Kyle

2 1

[1.3] Drop mail() support
by A.L.E.C 28 Jun '16

28 Jun '16

PHP mail() is just too simple for such a sophisticated app as Roundcube. I propose to drop mail() support and require smtp_server setting. Is there any reason to keep it? https://github.com/roundcube/roundcubemail/issues/5340 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Enigma decryption password prompt
by Kyle Francis 28 Jun '16

28 Jun '16

2 5

Patch for french translation
by Olivier Thauvin 20 Jun '16

20 Jun '16

Hi, There is a small but very anoying typo in the french translation. In a nutshell the current translation is: on = No off = Yes. I did a patch few month ago, can please apply it to definitivly solve this issue. Regards. -- Olivier Thauvin CNRS - LATMOS ♖ ♘ ♗ ♕ ♔ ♗ ♘ ♖

2 1

Security issue in centos_rhel_install.sh
by Alex H. 14 Jun '16

14 Jun '16

Hi, I just subscribed to tell you this issue I stumbled upon. In centos_rhel_install.sh [1] there is this line for generating the des key and then putting it in the config. The way it is made, the key might contain characters which break the sed expression putting the key in the config file, so that the configured key is broken: The line generating the key: deskey=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9-_#&!*%?' | fold -w 24 | head -n 1) Taking a look on this example key: 2S0?w1*6GXrxFSah!%&xjnaq It can contain a '&', which will break the sed expression: sed -i "s|^$\$config\['des_key'\] =$.*$|\1 \'${deskey}\';|" /var/www/html/roundcube/config/config.inc.php so that the example key will bring this result in the config: $config['des_key'] = '2S0?w1*6GXrxFSah!%$config['des_key'] = 'rcmail-!24ByteDESkey*Str';xjnaq'; instead of: $config['des_key'] = '2S0?w1*6GXrxFSah!%&xjnaq'; Some info about my environment: # cat /etc/centos-release CentOS release 6.8 (Final) # sed --version GNU sed version 4.2.1 Best regards, Alex H. [1] https://gist.github.com/rcubetrac/cc85589b837d58680a86e7b5cbb09a4f#file-cen…

1 0

Searching for messages...
by Michael Heydekamp 11 Jun '16

11 Jun '16

...still seems to be quite a strange thing in Roundcube. Just did a search for the term "Ibiza" in the subject: 1) First of all, some messages even when searching in just one specific folder are not found at all. Although the subject clearly contains this string, a message with the subject "Auftragsbestätigung Düsseldorf-Valencia-Ibiza 12JUN16" is not being found. Looking at the source of the message, it becomes quite clear, why: > Subject: =?UTF-8?Q?Auftragsbest=C3=A4tigung_D=C3=BCsseldorf-Valencia-Ibiz?= > =?UTF-8?Q?a_12JUN16?= See...? The subject is folded right before the last character of "Ibiza", and the search routine apparently doesn't unfold such headers. Not good. 2) OTOH, a search for the same string "Ibiza" across ALL folders does find messages which do not contain this string in the subject at all and therefore shouldn't be found: "Re: Anfrage Mexiko-Miami 02DEC16 und Montréal-New York 10DEC16" "Re: IBZ - Vigo" "✈ Aktuelle Flugzeugverfügbarkeiten" "Re: EMPTY LEG C650 (CITATION III ) Availability" "Re: ZRH - DUS" Just a few examples of HUNDREDS of (wrong) matches. What's the search routine looking for? Apparently not only for "Ibiza", but for what else? Indeed, those messages DO contain the string "Ibiza" in the body, but I didn't ask for a search in the subject AND the body. I still may have more issues with regards to searching messages which I did report last year already, but that should be it for today. Searching for messages is quite critical for me, as I'm using Roundcube not (only) for private purposes - as you may see above. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

3 7

[1.3] Modify search box
by A.L.E.C 10 Jun '16

10 Jun '16

https://github.com/roundcube/roundcubemail/issues/5312 This one is not so significant, but there is a couple of options. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

[1.3] Drop legacy browser support
by A.L.E.C 10 Jun '16

10 Jun '16

Hi! there's a couple of things that should be discussed/voted for Roundcube 1.3. So, please put your comment here or in the ticket in case you are against the proposed changes. This is about dropping IE7, IE8, and maybe IE9 support, including removal of legacy_browser plugin. https://github.com/roundcube/roundcubemail/issues/5167 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

[1.3] Addressbook -> Contacts
by A.L.E.C 10 Jun '16

10 Jun '16

Hi! there's a couple of things that should be discussed/voted for Roundcube 1.3. So, please put your comment here or in the ticket in case you against the proposed changes. https://github.com/roundcube/roundcubemail/issues/5233 -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

Roundcube Webmail 1.2.0 released
by Thomas Bruederli 26 May '16

26 May '16

Dear subscribers Today we proudly announce the stable version 1.2.0 of Roundcube Webmail which is now available for download. It introduces new features since version 1.1 covering security and PGP encryption topics: - PHP7 compatibility - PGP encryption - Drag-n-drop attachments from mail preview to compose window - Mail messages searching with pre-defined date interval - Improved security measures to protect from brute-force attacks And of course plenty of small improvements and bug fixes. There wasn't much feedback on the 1.2-beta version and the release candidate which we consider a good sign. Some cleanup and stabilization of the Enigma plugin just happened for the now stable version. As already announced with the 1.2-beta release [1], PGP encryption comes in two flavors: client-side using the Mailvelope browser extension and server-side with the Enigma plugin using GnuPG on the server. Support with the Mailvelope browser plugin comes out of the box and is automatically enabled if the Mailvelope API is detected in a user’s browser. The Mailvelope documentation [2] explains how to enable it for your site. The features of the Enigma plugin, which comes with the release package and simply needs to be activated for your Roundcube installation are explained in Alec's blog post [3]. With the release of Roundcube 1.2.0, the previous stable release branches 1.0.x and 1.1.x will switch in to LTS low maintenance mode which means they will only receive important security updates but no longer any regular improvements from upstream. See the complete Changelog in our wiki [4] and download the new packages from https://roundcube.net/download. Roundcube 1.2.0 is considered stable and we recommend to update all productive installations of Roundcube. As usual, don’t forget to backup your data before updating ;-) Best, Thomas [1] https://roundcube.net/news/2015/11/23/roundcube-webmail-1.2-beta-out-now [2] https://www.mailvelope.com/en/help#watchlist [3] https://kolabian.wordpress.com/2015/10/13/enigma-plugin-pgp-encryption/ [4] https://github.com/roundcube/roundcubemail/wiki/Changelog

4 7

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev