CipherMail gateway 3.0.3-0 release candidate available

Hi,

A new release candidate of the CipherMail gateway community edition is
now available (version 3.0.3-0).

New

* Support for MySQL/MariaDB and Oracle Database added.
* JDB connection tester tool added. This can be used to test a
  connection to an external database (Postgres,
  MySQL/MariaDB and Oracle Database).
* Log export functionality added to the virtual appliance (previously
  this was a CipherMail Enterprise only feature).

Improvements/Changes

* Because support for MySQL/MariaDB and Oracle Database was added, there
  is now a separate package for Postgres. The
  main back-end package no longer requires Postgres. The separate
  postgres package can be used to auto configure a local postgres
  database.
* Mail generated by the web GUI ("Compose a test email" tool and "PDF
  reply" page) is now sent to a special local port
  on port 10027. This makes it possible to change settings on the
  default smtpd port (25) without interfering with email sent from the
  GUI. This requires an additional service setting for port 10027 in
  master.cf.
* Java wrapper updated to 3.5.28
  (https://wrapper.tanukisoftware.com/doc/english/release-notes.html).
  This fixes the following Java wrapper bugs: multi byte char logging
  sometimes resulted in ? in the log files, memory leak on
  RedHat/CentOS.
* Libraries updated.
* Java 8 is now supported. Note: because of bug#
  https://bugs.centos.org/view.php?id=9482, OpenJDK 8 on RedHat/CentOS
  currently cannot be used because EC ciphers are not supported for
  SSL/TLS.
* Certificate request page now supports more request parameters
  (country, locality, state, OU).
* Fix for bug GATEWAY-91. Djigzo should trim off whitespace in the
  beginning and/or end of any PGP header lines. Note that this is not
  enabled by default because this is not RFC compliant. A system
  property must be set to enable this.
* Fix for bug GATEWAY-92. PDF encryption failed on non-standard Unicode
  characters (Webdings font).
* Fix for bug GATEWAY-96. PGP keyring importer does not report import
  failure if password is incorrect.
* Fix for bug GATEWAY-97. PGP/MIME signing a message with an invalid
  content-transfer-encoding results in a message in the error queue.
* The database connection string is now stored in a separate xml
  fragment (hibernate.connection.xml). This makes upgrading easier
  because upgrading the hibernate configuration file no longer results
  in overwriting the database connection string.
* The Web portal is now responsive (i.e., scales on smaller devices).
* Ciphermail.backup.enabled system property added which can be used to
  disable backup option from the web GUI.
* Default Tomcat server.xml now only supports strong SSL/TLS ciphers
  (ssllabs gives GUI an A rating).

The release candidate can be downloaded from

https://www.ciphermail.com/beta.html

When upgrading an existing installation, a number of (minor) additional
configuration steps are required. See the upgrade guide for more
information:

https://www.ciphermail.com/documents-3.0/upgrade-guide.pdf

This release has been extensively tested. If there are no major issues
found this week, it will be officially released.

Kind regards,

Martijn Brinkers

···

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

https://www.ciphermail.com

Twitter: http://twitter.com/CipherMail

Hi,

A new release candidate of the CipherMail gateway community edition is
now available (version 3.0.3-0).

...

Improvements/Changes

...

* Fix for bug GATEWAY-96. PGP keyring importer does not report import
  failure if password is incorrect.
* Fix for bug GATEWAY-97. PGP/MIME signing a message with an invalid
  content-transfer-encoding results in a message in the error queue.

Thanks and Keep up the good work. :slight_smile:

Cheers
Andre

···

On 04/04/2016 06:31 PM, Martijn Brinkers wrote:

Hi,

* Fix for bug GATEWAY-97. PGP/MIME signing a message with an invalid

  content-transfer-encoding results in a message in the error queue.

We have tryed again to use ciphermail.
but now we have a different Problem.

If i try to send a mail with header
"Content-Type: text/plain charset=utf-8"

Mail is not signed, if i remove the header from the same message message
will be signed. Bug or feature?

Cheers
Andre

···

On 04/05/2016 12:18 PM, Andre Helwig wrote:

--
Heinlein Support GmbH
Schwedter Str. 8/9b, 10119 Berlin

Tel: 030 / 405051-0
Fax: 030 / 405051-19

Zwangsangaben lt. §35a GmbHG:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg,
Geschäftsführer: Peer Heinlein -- Sitz: Berlin

This content type is not valid

"Content-Type: text/plain charset=utf-8"

There should be a ; between the parameters:

"Content-Type: text/plain; charset=utf-8"

Email which is invalid cannot be signed. A human might understand that a
; is missing but most MIME parser's are not yet smart enough to figure
this out :slight_smile:

Kind regards,

Martijn Brinkers

···

On 09/22/2016 11:08 AM, Andre Helwig wrote:

Hi,

On 04/05/2016 12:18 PM, Andre Helwig wrote:

* Fix for bug GATEWAY-97. PGP/MIME signing a message with an invalid

  content-transfer-encoding results in a message in the error queue.

We have tryed again to use ciphermail.
but now we have a different Problem.

If i try to send a mail with header
"Content-Type: text/plain charset=utf-8"

Mail is not signed, if i remove the header from the same message message
will be signed. Bug or feature?

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail