Discussion:
Problem with PGP-signed E-Mails
T. Mohrfeldt (Liesegang GmbH)
2018-06-01 09:47:13 UTC
Permalink
Hello fellow Kolabusers,

I've recently installed the enigmail-plugin for roundcubemail and so far
it's working fine,

however as soon as I try to send a message signed and not encrypted with
PGP the signature is valid in my Sent-Folder but invalid at the
receiving Inbox. I am a little bit puzzled, can DKIM signing be the
problem? And if so how can I solve this (if it' solvable...). What else
could be tampering with my sent mail?

I hope this problem is within the scope of this mailing-list, if not,
sorry from my side.

--
With kind regards

Torben
Jan Kowalsky
2018-06-02 23:31:46 UTC
Permalink
Hi Torben,
Post by T. Mohrfeldt (Liesegang GmbH)
Hello fellow Kolabusers,
I've recently installed the enigmail-plugin for roundcubemail and so far
it's working fine,
however as soon as I try to send a message signed and not encrypted with
PGP the signature is valid in my Sent-Folder but invalid at the
receiving Inbox. I am a little bit puzzled, can DKIM signing be the
problem? And if so how can I solve this (if it' solvable...). What else
could be tampering with my sent mail?
can you send the source of both emails?

Regards
Jan
T. Mohrfeldt (Liesegang GmbH)
2018-06-14 06:42:59 UTC
Permalink
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature";
micalg=pgp-sha1;
boundary="=_45557bc0a5e217b81ba14abed50af396"
Date: Thu, 14 Jun 2018 08:31:12 +0200
Subject: Signature Test
Organization: Liesegang GmbH
User-Agent: Kolab 16/Roundcube 1.3.6
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--=_45557bc0a5e217b81ba14abed50af396
Content-Type: multipart/alternative;
boundary="=_3cb3b50b323830e3b0e0938de5af52fb"
--=_3cb3b50b323830e3b0e0938de5af52fb
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
Signature Test
Mit freundlichen Grüßen
Torben Mohrfeldt
--
LIESEGANG GMBH
Stadtweg 22 * 24837 Schleswig
Tel.: +49 (4621) 99 46 07 3
Fax: +49 (4621) 99 46 07 0
GPG/PGP ID: CE040A70 [1]
www.liesegang.sh [2]
Geschäftsführer: Amtsgericht Schleswig 1010
Axel Böhringer, Christian Liesegang
------
[1]
https://keys.fedoraproject.org/pks/lookup?op=get&search=0x0E619FACCE040A70
[2] https://buchliesegang.buchhandlung.de
--=_3cb3b50b323830e3b0e0938de5af52fb
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html;
charset=
Verdana,Gen=
eva,sans-serif'>
<p>Signature Test</p>
<div>
<p>Mit freundlichen Gr&uuml;&szlig;en</p>
<p>Torben Mohrfeldt&nbsp;</p>
<p>--</p>
<table>
<tbody>
<tr>
<td valign=3D"top"><img src=3D"Loading Image..."
alt=
=3D"Liesegang Logo" width=3D"100" height=3D"100" /></td>
<td valign=3D"top"><span style=3D"font-family: verdana, geneva,
sans-serif;=
"><strong>Liesegang GmbH</strong></span>
<p><span style=3D"font-family: verdana, geneva, sans-serif;">Stadtweg
22&nb=
ver=
dana, geneva, sans-serif;">Tel.: +49 (4621) 99 46 07 3</span><br
/><span st=
yle=3D"font-family: verdana, geneva, sans-serif;">Fax: +49 (4621) 99 46
07 =
0<br />GPG/PGP ID: <a
href=3D"https://keys.fedoraproject.org/pks/lookup?op=
=3Dget&amp;search=3D0x0E619FACCE040A70">CE040A70</a></span></p>
<p><span style=3D"color: #000000; font-family: verdana, geneva,
sans-serif;=
"><a style=3D"color: #000000;" title=3D"Zum Online Shop"
href=3D"https://bu=
chliesegang.buchhandlung.de">www.liesegang.sh</a> </span></p>
</td>
</tr>
<tr>
verdana, ge=
neva, sans-serif;">Handelsregister:<br
/>Gesch&auml;ftsf&uuml;hrer:</span><=
/td>
<td><span style=3D"font-size: 8pt; font-family: verdana, geneva,
sans-serif=
;"> Amtsgericht Schleswig 1010<br /> Axel B&ouml;hringer, Christian
Liesega=
ng</span></td>
</tr>
</tbody>
</table>
</div>
</body></html>
--=_3cb3b50b323830e3b0e0938de5af52fb--
--=_45557bc0a5e217b81ba14abed50af396
Content-Type: application/pgp-signature;
name=signature.asc
Content-Disposition: attachment;
filename=signature.asc;
size=836
Content-Description: OpenPGP digital signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)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=wefq
-----END PGP SIGNATURE-----
--=_45557bc0a5e217b81ba14abed50af396--
Received: from mail.liesegang.sh ([unix socket])
by mail.liesegang.sh (Cyrus
2.5.11-41-gd53406f3f-Kolab-2.5.11-10.2.el7.kolab_16) with LMTPA;
Thu, 14 Jun 2018 08:31:17 +0200
X-Sieve: CMU Sieve 2.4
X-Virus-Scanned: amavisd-new at liesegang.sh
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.liesegang.sh 0B9E321099
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=liesegang.sh;
s=mail;
t=1528957877; bh=DmrErtcZr/8iddRAxMUF8SagrISXAd+t5gi8oL3jiuE=;
h=Date:From:To:Subject:From;
b=wpiMqAccyLRLIVdweqza+U3ukgrLyDIywuFhEW8rp3LYuNz9u2R+oOqcCLrgj5PTA
EYWZymTh3lc5fbYLF6xx0Yh29a6IagM3e/NmN6gWky+tZrEUoNz0XyRDtQ4VNgJcwr
CGYlKkYxcSGxFt4+KfmsfbiqQmr91jN5z2TbVZU0=
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.liesegang.sh D73A9210CE
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=liesegang.sh;
s=mail;
t=1528957876; bh=8j8A9MNMC4peA6Xr6XwBzUMK/xwaaz3o3sZiLqjYkps=;
h=Date:From:To:Subject:From;
b=csclWWokCs5uTx39v3UEXiOpjODvdPqeTYKniuyVpM/bfH+StCPvVmFd4ap8HNYh2
P33TLUOOgmTUYwjeLGkl1Qkd0rif2yXEom1FKa+jd6ZuhVm/M4QjAMtQNAryK12KLA
y9+igit5P8tvAwFfuT0fVmd2WwSxR1fDTnSzN5f4=
Authentication-Results: mail.liesegang.sh (amavisd-new);
dkim=pass (1024-bit key) header.d=liesegang.sh
MIME-Version: 1.0
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.liesegang.sh 642DB21099
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=liesegang.sh;
s=mail;
t=1528957874; bh=8j8A9MNMC4peA6Xr6XwBzUMK/xwaaz3o3sZiLqjYkps=;
h=Date:From:To:Subject:From;
b=C7j1haDeUJJE2ivYmJiCAIZQgVePyDVDq4qZdtmky1s/R2i0g8xpLaUdkSFDZPP6W
GaQShrXelS20IRTFmM+5IUcIK0zh0dgvSo6/fFhAM9hckmB3T+rCe/0WngirnTGgy0
EUU6XTyRC2sXm39ZliGhQaHT6Qyr/RE2Z504X1RU=
Content-Type: multipart/signed; protocol="application/pgp-signature";
boundary="=_45557bc0a5e217b81ba14abed50af396"; micalg=pgp-sha1
Date: Thu, 14 Jun 2018 08:31:12 +0200
Subject: Signature Test
Organization: Liesegang GmbH
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--=_45557bc0a5e217b81ba14abed50af396
Content-Type: multipart/alternative;
boundary="=_3cb3b50b323830e3b0e0938de5af52fb"
--=_3cb3b50b323830e3b0e0938de5af52fb
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Signature Test
Mit freundlichen Gr=C3=BC=C3=9Fen=20
Torben Mohrfeldt =20
--=20
LIESEGANG GMBH=20
Stadtweg 22 * 24837 Schleswig
Tel.: +49 (4621) 99 46 07 3
Fax: +49 (4621) 99 46 07 0
GPG/PGP ID: CE040A70 [1]=20
www.liesegang.sh [2]=20
Gesch=C3=A4ftsf=C3=BChrer: Amtsgericht Schleswig 1010
Axel B=C3=B6hringer, Christian Liesegang=20
=20
------
[1]
https://keys.fedoraproject.org/pks/lookup?op=3Dget&amp;search=3D0x0E619FA=
CCE040A70
[2] https://buchliesegang.buchhandlung.de
--=_3cb3b50b323830e3b0e0938de5af52fb
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html;
charset=
Verdana,Gen=
eva,sans-serif'>
<p>Signature Test</p>
<div>
<p>Mit freundlichen Gr&uuml;&szlig;en</p>
<p>Torben Mohrfeldt&nbsp;</p>
<p>--</p>
<table>
<tbody>
<tr>
<td valign=3D"top"><img src=3D"https://buchliesegang.com/extern/lg.png"
alt=
=3D"Liesegang Logo" width=3D"100" height=3D"100" /></td>
<td valign=3D"top"><span style=3D"font-family: verdana, geneva,
sans-serif;=
"><strong>Liesegang GmbH</strong></span>
<p><span style=3D"font-family: verdana, geneva, sans-serif;">Stadtweg
22&nb=
ver=
dana, geneva, sans-serif;">Tel.: +49 (4621) 99 46 07 3</span><br
/><span st=
yle=3D"font-family: verdana, geneva, sans-serif;">Fax: +49 (4621) 99 46
07 =
0<br />GPG/PGP ID: <a
href=3D"https://keys.fedoraproject.org/pks/lookup?op=
=3Dget&amp;search=3D0x0E619FACCE040A70">CE040A70</a></span></p>
<p><span style=3D"color: #000000; font-family: verdana, geneva,
sans-serif;=
"><a style=3D"color: #000000;" title=3D"Zum Online Shop"
href=3D"https://bu=
chliesegang.buchhandlung.de">www.liesegang.sh</a> </span></p>
</td>
</tr>
<tr>
verdana, ge=
neva, sans-serif;">Handelsregister:<br
/>Gesch&auml;ftsf&uuml;hrer:</span><=
/td>
<td><span style=3D"font-size: 8pt; font-family: verdana, geneva,
sans-serif=
;"> Amtsgericht Schleswig 1010<br /> Axel B&ouml;hringer, Christian
Liesega=
ng</span></td>
</tr>
</tbody>
</table>
</div>
</body></html>
--=_3cb3b50b323830e3b0e0938de5af52fb--
--=_45557bc0a5e217b81ba14abed50af396
Content-Type: application/pgp-signature;
name=signature.asc
Content-Disposition: attachment;
filename=signature.asc;
size=836
Content-Description: OpenPGP digital signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)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=wefq
-----END PGP SIGNATURE-----
--=_45557bc0a5e217b81ba14abed50af396--
I hope it's legible...

With kind regards

Torben Mohrfeldt
Hi Torben,
Post by T. Mohrfeldt (Liesegang GmbH)
Hello fellow Kolabusers,
I've recently installed the enigmail-plugin for roundcubemail and so far
it's working fine,
however as soon as I try to send a message signed and not encrypted with
PGP the signature is valid in my Sent-Folder but invalid at the
receiving Inbox. I am a little bit puzzled, can DKIM signing be the
problem? And if so how can I solve this (if it' solvable...). What else
could be tampering with my sent mail?
can you send the source of both emails?
Regards
Jan
_______________________________________________
users mailing list
https://lists.kolab.org/mailman/listinfo/users
hede
2018-06-14 08:23:26 UTC
Permalink
[...]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
vs.
[...]
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Something changed the encoding, rendering the signature invalid.

Wallace!?
Jan Kowalsky
2018-06-15 21:45:00 UTC
Permalink
Hi Torben,
Post by hede
[...]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
vs.
[...]
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Something changed the encoding, rendering the signature invalid.
Wallace!?
yes, this is wallace (grr...) Have a look on the thread "wallace breaks
dkim signature" from two weeks ago.

The solution could be to send all mails as quoted-printable. But:
should't a gpg signed email always be sent as quoted-printable? On my
enigmail at least every signed mail is sent as quoted-printable - even
if the same mail would be sent in 8bit if it's not signed.

So for me it looks more as a client problem

Regards
Jan
Jan Kowalsky
2018-06-15 23:03:34 UTC
Permalink
Hi Torben,
Post by hede
[...]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
vs.
[...]
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Something changed the encoding, rendering the signature invalid.
Wallace!?
yes, this is wallace (grr...) Have a look on the thread "wallace breaks
dkim signature" from two weeks ago.

The solution could be to send all mails as quoted-printable. But:
should't a gpg signed email always be sent as quoted-printable? On my
enigmail at least every signed mail is sent as quoted-printable - even
if the same mail would be sent in 8bit if it's not signed.

So for me it looks more as a client problem

Regards
Jan
T. Mohrfeldt (Liesegang GmbH)
2018-06-16 08:11:45 UTC
Permalink
OK,

Enabling: "Use MIME encoding for 8-bit characters" in Settings -->
Compose --> Advanced
keeps the signature intact.

Offtopic:
Any ideas how to enable this feature for all users, without needing them
to fiddle in the settings?

Thanks for the pointers

Torben Mohrfeldt
Post by Jan Kowalsky
Hi Torben,
Post by hede
[...]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
vs.
[...]
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Something changed the encoding, rendering the signature invalid.
Wallace!?
yes, this is wallace (grr...) Have a look on the thread "wallace breaks
dkim signature" from two weeks ago.
should't a gpg signed email always be sent as quoted-printable? On my
enigmail at least every signed mail is sent as quoted-printable - even
if the same mail would be sent in 8bit if it's not signed.
So for me it looks more as a client problem
Regards
Jan
_______________________________________________
users mailing list
https://lists.kolab.org/mailman/listinfo/users
Jan Kowalsky
2018-06-16 08:56:23 UTC
Permalink
Post by T. Mohrfeldt (Liesegang GmbH)
OK,
Enabling: "Use MIME encoding for 8-bit characters" in Settings -->
Compose --> Advanced
keeps the signature intact.
Any ideas how to enable this feature for all users, without needing them
to fiddle in the settings?
what clients do they use?

In thunderbird the configuration parameter in about:config is
"mail.strictly_mime".


echo 'user_pref("mail.strictly_mime", true);' >>
/.thunderbird/PROFILE_NAME/prefs.js

regards
jan
T. Mohrfeldt (Liesegang GmbH)
2018-06-16 09:08:14 UTC
Permalink
I didn't bother using clients, just plain old roundcubemail...
I know there's a way to preconfigure settings, but I think that's only
considerated for new users...

With kind regards

Torben Mohrfeldt
Post by Jan Kowalsky
Post by T. Mohrfeldt (Liesegang GmbH)
OK,
Enabling: "Use MIME encoding for 8-bit characters" in Settings -->
Compose --> Advanced
keeps the signature intact.
Any ideas how to enable this feature for all users, without needing them
to fiddle in the settings?
what clients do they use?
In thunderbird the configuration parameter in about:config is
"mail.strictly_mime".
echo 'user_pref("mail.strictly_mime", true);' >>
/.thunderbird/PROFILE_NAME/prefs.js
regards
jan
Jan Kowalsky
2018-06-16 12:21:14 UTC
Permalink
Post by T. Mohrfeldt (Liesegang GmbH)
I didn't bother using clients, just plain old roundcubemail...
I know there's a way to preconfigure settings, but I think that's only
considerated for new users...
than this is a setting in the database, probably in users ->
preferences. Since this is a json or something like this it's not easy
to just set this one preference setting for one user. You have to read
them all out, put this config variable inside the string and save it
back... But I never tried.

But this is interesting, because I thought roundcube would do this in
default - but maybe we configured this per default a while ago. So I
thought roundcube does it anyway.

best regards
Jan
T. Mohrfeldt (Liesegang GmbH)
2018-06-16 12:24:36 UTC
Permalink
https://github.com/roundcube/roundcubemail/blob/master/config/defaults.inc.php#L1002
// Use MIME encoding (quoted-printable) for 8bit characters in message
body
$config['force_7bit'] = false;
set to true one logout/login and the setting is ready to go.

With kind regards

Torben Mohrfeldt
Post by T. Mohrfeldt (Liesegang GmbH)
I didn't bother using clients, just plain old roundcubemail...
I know there's a way to preconfigure settings, but I think that's only
considerated for new users...
than this is a setting in the database, probably in users ->
preferences. Since this is a json or something like this it's not easy
to just set this one preference setting for one user. You have to read
them all out, put this config variable inside the string and save it
back... But I never tried.
But this is interesting, because I thought roundcube would do this in
default - but maybe we configured this per default a while ago. So I
thought roundcube does it anyway.
best regards
Jan
Christoph Erhardt
2018-06-17 07:22:06 UTC
Permalink
I've opened a bug report: https://git.kolab.org/T4151

Best regards,
Christoph
Post by T. Mohrfeldt (Liesegang GmbH)
https://github.com/roundcube/roundcubemail/blob/master/config/defaults.inc.p
hp#L1002
// Use MIME encoding (quoted-printable) for 8bit characters in message
body
$config['force_7bit'] = false;
set to true one logout/login and the setting is ready to go.
With kind regards
Torben Mohrfeldt
Jan Kowalsky
2018-06-17 10:27:01 UTC
Permalink
Post by Christoph Erhardt
I've opened a bug report: https://git.kolab.org/T4151
Best regards,
Christoph
ah, great. I didn't yet. I was stalled by finding out where exactly the
reencoding happens. For me it looked like it's not an wallace module -
because it still happens if all modules are disabled. Maybe the python
smtp library itself is responsible.

Kind regards
Jan
Vuorikoski, Jupiter
2018-06-17 23:46:51 UTC
Permalink
_______________________________________________
users mailing list
***@lists.kolab.org
https://lists.kolab.org/mailman/listinfo/users

Continue reading on narkive:
Loading...