Djigzo CLI tool - importing XML file

Yes, I did mean the pdf password
This is how the xml file I'm using to test looks like:

<djigzo>
  <user>
    <email>abc(a)xyz.nl</email>
    <property><name>user.password</name><value>zeergeheim</value><encrypted>true</encrypted></property>
  </user>
</djigzo>

Logging into the Djigzo portal as admin I see the password of the user as "zeergeheim",
not encrypted.
Isn't the Password field under Password the pdf password ?
If so, why is it not encrypted ?

Thanx,

Perry

Re: Djigzo CLI tool - importing XML file

I assume you mean the PDF password. If you download the example xml file
(www.djigzo.com/downloads/djigzo-import.xml) it shows you how to make
sure that the password is encrypted. If the encrypted property is set to
true, the property value will be encrypted when set.

the PDF password with value "test1" will be stored encrypted because the
encrypted property is true:

        <property>
            <name>user.password</name>
            <value>test1</value>
            <encrypted>true</encrypted>
        </property>

Note: you can (and should) only encrypt properties which should be
stored encrypted.

Kind regards,

Martijn Brinkers

···

--
DJIGZO email encryption

------------------------------

Message: 3
Date: Thu, 31 May 2012 10:17:38 +0200
From: Martijn Brinkers <martijn(a)djigzo.com>
Subject: DJIGZO gateway version 2.4.0-3 is released
To: Users(a)lists.djigzo.com, announce(a)lists.djigzo.com
Message-ID: <4FC72922.6040000(a)djigzo.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi,

Version 2.4.0-3 of the DJIGZO gateway is released.

This is the same version as the last release candidate so if you already
installed 2.4.0-3 you do not need to reinstall this version.

Release notes:

New

* Sign and encrypt tags can be added to the subject for incoming signed
  and/or encrypted email (GATEWAY-36)
* Signer and sender address mismatch detection has been added
  (GATEWAY-21)
* S/MIME encrypt mailet can selectively encrypt headers (this is mainly
  used in combination with DJIGZO for Android)
* S/MIME encryption and signing algorithm can be set per recipient or
  domain.
* Simple subject filter added which can be used to filter the subject
  using a regular expression.
* Locale (i.e., language) can be selected on the portal login and signup
  page.
* CLI tool added which can be used to set/get user properties from the
  command line.

Improvements/Changes

* The 8.4 PostgreSQL JDBC drivers were not compatible with PostgreSQL 9
  (The default version with Ubuntu 12.04).
  The PostgreSQL JDBC drivers have been updated to 9.X (GATEWAY-56)
* Logging has been improved. More information is logged and color coding
  has been improved (GATEWAY-42, GATEWAY-26)
* Upgraded to BC 1.47
* LogLevel OFF added which can be used to completely disable logging for
  a class.
* Clickatell provider now supports additional parameters.
* Spanish translation for the portal added
  (translation by Diego A. Fliess)
* Loading speed of the preferences page has been improved.
* The user no longer has to login after the portal signup. The user is
  automatically logged in after the signup process.
* The packages are now signed with a new gpg key.

Bug fix

* sudo added to the RPM spec file as a required package (GATEWAY-55)
* PDF reply should use the Reply-To header (GATEWAY-45)
* Under certain circumstances, unicode characters were incorrectly
  encoded when replying to a PDF (GATEWAY-48)
* Compatibility with IE9 has been improved (GATEWAY-40)
* The RPM installer now waits for Postgres to be running before
  continuing the installation.

The new version can be downloaded from:

http://www.djigzo.com/downloads.html

Upgrade guide http://www.djigzo.com/documents/upgrade-guide.pdf

Note: the packages are signed with a new GPG key (which can be
downloaded from the download page)

Kind regards,

Martijn Brinkers

--
DJIGZO email encryption

------------------------------

_______________________________________________
Users mailing list
Users(a)lists.djigzo.com
http://lists.djigzo.com/lists/listinfo/users

End of Users Digest, Vol 36, Issue 13
*************************************

Yes, I did mean the pdf password
This is how the xml file I'm using to test looks like:

<djigzo>
  <user>
    <email>abc(a)xyz.nl</email>
    <property><name>user.password</name><value>zeergeheim</value><encrypted>true</encrypted></property>
  </user>
</djigzo>

Logging into the Djigzo portal as admin I see the password of the user as "zeergeheim",
not encrypted.
Isn't the Password field under Password the pdf password ?
If so, why is it not encrypted ?

Ah oke I now understand what you mean. The PDF password is stored
encrypted on the database (it is encrypted with the system password).
When it is retrieved it is however decrypted. The reason why the PDF
password must be stored "plain text" (note the quotes) is that in order
to encrypt the PDF, access to the password is required. It cannot be a
hashed password since the PDF must be encrypted with the real password.
If you want improved security you should use the OTP mode.

Kind regards,

Martijn Brinkers

···

On 05/31/2012 01:23 PM, Perry Peeters wrote:

Re: Djigzo CLI tool - importing XML file

I assume you mean the PDF password. If you download the example xml file
(www.djigzo.com/downloads/djigzo-import.xml) it shows you how to make
sure that the password is encrypted. If the encrypted property is set to
true, the property value will be encrypted when set.

the PDF password with value "test1" will be stored encrypted because the
encrypted property is true:

        <property>
            <name>user.password</name>
            <value>test1</value>
            <encrypted>true</encrypted>
        </property>

Note: you can (and should) only encrypt properties which should be
stored encrypted.

Kind regards,

Martijn Brinkers

--
DJIGZO email encryption