8fe12e2fad
Enigma: Fix "decryption oracle" bug [CVE-2019-10740] ( #6638 )
...
When composing mail (on reply/forward/edit) we decrypt content only
in the first "content part" of the message.
6 years ago
1ee7253ff2
Enigma: Fix error message when trying to encrypt with a revoked private key ( #6607 )
6 years ago
6efa88f049
Enigma: Fix bug where revoked users/keys were not greyed out in key info
...
The 'deleted' class was assigned to the wrong (next) row in a table.
It also didn't work in Elastic skin at all because of the missing style.
6 years ago
57c67db029
Remove year(s) from copyright headers + some cleanup
6 years ago
0e640e95c9
Enigma: Fixed multi-host syncronization of private and deleted keys and pubring.kbx file
...
Added context column to filestore table for easier listing of stored files.
6 years ago
e024f133fa
give all temp files a constant prefix
6 years ago
19c0d48267
Enigma: Skip encryption if the message has been already encrypted by Mailvelope
6 years ago
412c5ab75b
Enigma: Fix deleting keys with authentication subkeys ( #6381 )
6 years ago
2fa112bd83
[EFAIL] Don't decrypt PGP messages with no MDC protection ( #6289 )
7 years ago
e05be853da
Enigma: Add hint about max upload size in key import form
7 years ago
647a7e91c6
Unify content frame (watermark) template objects ( #6285 )
...
* unify content frame (watermark) template objects
* several improvements, use existing env var for watermark url
* tighten up var parsing for contentframe template object
7 years ago
14cc3ec188
Add EFAIL-related warning in the code
7 years ago
e79838aaac
Enigma: Disable autofill for new keypair password
7 years ago
662363c7e2
Enigma: Add positiblity to modify list of identities for key generation by other plugins
7 years ago
f63150b256
Enigma: Fix key selection for signing
...
In some cases a public key of other user could be selected instead
of the sender's private key
7 years ago
48417c5fc9
Remove default for enigma_pgp_homedir ( #6173 )
...
To make the default installation more secure force users to set the folder.
Added notes that it should be secured or not accessible from the web browser.
7 years ago
7b1f0f020b
Enigma: Multi-host support
7 years ago
f211fcf254
Elastic: Use .boxconfirmation
7 years ago
0f21488ce2
Elastic: Fix enigma information boxes
7 years ago
674eac1c1c
Enigma: Fix key generation in Safari by upgrade to OpenPGP 2.6.2 ( #6149 )
7 years ago
9ce8948294
Get rid of the 2nd argument of include_stylesheet()
...
.. make the optional behavior default now.
7 years ago
e6fd3982f6
Elastic: set some checkbox classes
7 years ago
d739036eda
Improve identities list structure in key create form
7 years ago
d815525c6a
Merge branch 'master' into dev-elastic
7 years ago
0d3b61a022
Elastic: propforms should use labels even if there are no inputs
7 years ago
182aa52ab9
Enigma: Key search and import in dialogs (for better Elastic integration)
7 years ago
5d08580b86
Enigma: Add options to set PGP cipher/digest algorithms ( #5645 )
7 years ago
3c1b78af48
Merge branch 'master' into dev-elastic
7 years ago
cdd616744a
Initial Elastic skin support for Enigma
7 years ago
5660489759
Fix decryption of messages encoded with non-ascii charset ( #5962 )
7 years ago
999cfe9f82
Enigma: Add button to send mail unencrypted if no key was found ( #5913 )
7 years ago
d4478c4ff7
Enigma: Fix decrypting an encrypted+signed message when signature verification fails ( #5914 )
7 years ago
7090058b9f
Enigma: Fix compatibility with assets_dir
8 years ago
9028e77290
Enigma: Set micalg parameter to real hash algorithm used for signing
8 years ago
dd53a3d486
Enigma: Fix handling of messages with nested PGP encrypted parts ( #5634 )
8 years ago
81f67a4de2
Don't use each() deprecated in PHP 7.2
8 years ago
d04cc14018
Enigma: Always use detached signatures ( #5624 )
8 years ago
29d0b80449
Enigma: Fix PHP fatal error when decrypting a message with invalid signature ( #5555 )
8 years ago
bd76a921ac
Simplified/unified key info frame
8 years ago
62bcda35df
Enigma: Don't log bad-passphrase errors
8 years ago
ed44a73ca5
GnuPG 2.1: Fix secret keys export
8 years ago
2ae1da4b1d
Merge branch 'dev/gnupg21'
8 years ago
b6c061656f
GnuPG 2.1: Support password prompt on private key import
8 years ago
ecefdca21d
GnuPG 2.1: Support password input on private key export
8 years ago
4e0532808d
Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc ( #5452 )
...
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
8 years ago
7829da358d
GnuPG 2.1: Fix importing newly generated (secret) keys using GnuPG 2.1
8 years ago
fba3e1ae0c
GnuPG 2.1: Add option to configure gpgconf binary location
8 years ago
462faace73
Enigma: Support key generation for multiple identities ( #5383 )
...
Update OpenPGP.js to version 1.6.2.
Get rid of server-side key generation - Crypt_GPG does not support
multiple user IDs, it's also slow and requires entrophy generator.
8 years ago
a1a7b0b9e6
Enigma: Make recipient key searches case-insensitive ( #5434 )
8 years ago
51c6269ded
Improve accessibility of enigma encryption options button in compose screen
8 years ago
Aleksander Machniak