# Encryption and Gmail **URL:** \ **Category:** Gateway\ **Created:** [June 23, 2009, 3:22pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21 "2009-06-23T15:22:23Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 23, 2009, 3:22pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/1 "2009-06-23T15:22:23Z")
As a test of Djigzo (and because some of our mail recipients use public, Web-based mail like Yahoo Mail and Gmail), I've created a Djigzo user (me) with a Gmail account. In the user's Djigzo profile, I created the Subject trigger "test". I sent a message to me(a)gmail.com with the subject "test". What I received was an email with no message, but an attachment labelled smime.p7m. The only option I have is to download it, but don't have any idea what the DL is or how to open it. BTW, I have the FireGPG plugin installed on my copy of Firefox, and it does work with Gmail. Dimitri > **···** > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 23, 2009, 3:28pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/2 "2009-06-23T15:28:01Z")
When a message is encrypted with S/MIME the complete message (including all attachments) is converted to an attachment with name smime.p7m. You need a S/MIME capable email client to read the message. There is a GMail add-on available which can be used with Firefox You need to import the pfx into Firefox. See [http://www.djigzo.com/help/import\_pfx\_gmail.html](http://www.djigzo.com/help/import_pfx_gmail.html) for instructions on how to use the GMail S/MIME add-on with Firefox. If you open the email from GMail with Outlook or any other S/MIME capable client the message will be automatically decrypted. Kind regards, Martijn Dimitri Yioulos wrote: > **···** > > > As a test of Djigzo (and because some of our mail > > recipients use public, Web-based mail like Yahoo > > Mail and Gmail), I've created a Djigzo user (me) > > with a Gmail account. In the user's Djigzo > > profile, I created the Subject trigger "test". I > > sent a message to me(a)gmail.com with the > > subject "test". What I received was an email > > with no message, but an attachment labelled > > smime.p7m. The only option I have is to download > > it, but don't have any idea what the DL is or how > > to open it. BTW, I have the FireGPG plugin > > installed on my copy of Firefox, and it does work > > with Gmail. > > > > Dimitri > > -- > Djigzo open source email encryption ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 23, 2009, 3:42pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/3 "2009-06-23T15:42:06Z")
Hey, Martijn! Boy, am I keeping you busy! Thanks for the Gmail How-to. When I created the Djigzo account me(a)gmail.com, I had the cert mailed there, and it arrives without any body text and only an attachment also named smime.p7m. What am I doing wrong? Dimitri > **···** > > On Tuesday 23 June 2009 11:28:01 am you wrote: > > > When a message is encrypted with S/MIME the > > complete message (including all attachments) is > > converted to an attachment with name smime.p7m. > > You need a S/MIME capable email client to read > > the message. There is a GMail add-on available > > which can be used with Firefox > > > > You need to import the pfx into Firefox. See > > [http://www.djigzo.com/help/import\_pfx\_gmail.htm](http://www.djigzo.com/help/import_pfx_gmail.htm) > > l for instructions on how to use the GMail > > S/MIME add-on with Firefox. > > > > If you open the email from GMail with Outlook > > or any other S/MIME capable client the message > > will be automatically decrypted. > > > > Kind regards, > > > > Martijn > > > > Dimitri Yioulos wrote: > > \> As a test of Djigzo (and because some of our > > \> mail recipients use public, Web-based mail > > \> like Yahoo Mail and Gmail), I've created a > > \> Djigzo user (me) with a Gmail account. In > > \> the user's Djigzo profile, I created the > > \> Subject trigger "test". I sent a message to > > \> me(a)gmail.com with the subject "test". What I > > \> received was an email with no message, but an > > \> attachment labelled smime.p7m. The only > > \> option I have is to download it, but don't > > \> have any idea what the DL is or how to open > > \> it. BTW, I have the FireGPG plugin installed > > \> on my copy of Firefox, and it does work with > > \> Gmail. > > \> > > \> Dimitri > > > > -- > > Djigzo open source email encryption > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 23, 2009, 3:57pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/4 "2009-06-23T15:57:51Z")
> Boy, am I keeping you busy! Thanks for the Gmail > How-to. 🙂 no problem > When I created the Djigzo account me(a)gmail.com, I > had the cert mailed there, and it arrives without > any body text and only an attachment also named > smime.p7m. What am I doing wrong? That's because you should disable encryption for the CA sender. What happens is that the email gets sent by the CA sender (which you have specified in the CA settings). Because by default encryption is enabled AND a valid certificate is found the email with the pfx gets encrypted. Even though this is explained on page 30 in the administration guide I should explain this a bit better. Perhaps I can ask the user when the CA sender is setup whether encryption should be disabled for the CA sender. Page 30: "..You should make sure that the CA email address is a valid email address. Because the email containing the encrypted certificate is sent by Djigzo you should make sure that the settings for the CA email user are such that the email is not encrypted by Djigzo (i.e. set encrypt mode of the CA user to "No Encryption")." Kind regards, Martijn Brinkers > **···** > > > Dimitri > > > > On Tuesday 23 June 2009 11:28:01 am you wrote: > > > > > When a message is encrypted with S/MIME the > > > complete message (including all attachments) is > > > converted to an attachment with name smime.p7m. > > > You need a S/MIME capable email client to read > > > the message. There is a GMail add-on available > > > which can be used with Firefox > > > > > > You need to import the pfx into Firefox. See > > > [http://www.djigzo.com/help/import\_pfx\_gmail.htm](http://www.djigzo.com/help/import_pfx_gmail.htm) > > > l for instructions on how to use the GMail > > > S/MIME add-on with Firefox. > > > > > > If you open the email from GMail with Outlook > > > or any other S/MIME capable client the message > > > will be automatically decrypted. > > > > > > Kind regards, > > > > > > Martijn > > > > > > Dimitri Yioulos wrote: > > > > > > > As a test of Djigzo (and because some of our > > > > mail recipients use public, Web-based mail > > > > like Yahoo Mail and Gmail), I've created a > > > > Djigzo user (me) with a Gmail account. In > > > > the user's Djigzo profile, I created the > > > > Subject trigger "test". I sent a message to > > > > me(a)gmail.com with the subject "test". What I > > > > received was an email with no message, but an > > > > attachment labelled smime.p7m. The only > > > > option I have is to download it, but don't > > > > have any idea what the DL is or how to open > > > > it. BTW, I have the FireGPG plugin installed > > > > on my copy of Firefox, and it does work with > > > > Gmail. > > > > > > > > Dimitri > > > > > > -- > > > Djigzo open source email encryption > > -- > Djigzo open source email encryption ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 23, 2009, 5:54pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/5 "2009-06-23T17:54:13Z")
OK, I temporarily set Encrypt Mode to "No Encryption, and sent the cert to me(a)gmail. I installed the Gmail S/MIME pluin in Firefox. I followed the Gmail How-to. Then I sent an email with the subject trigger "test" from me(a)work.com to me(a)gmail.com, When the mail arrives at gmail, and I click on it, I get a JavaScript Application error - "warning: unexpected msg classname: X0uMP" . Click OK, then get a much longer JavaScript Application error stating that the email contains a different certificate than I have on file for me(a)work.com. It asks me to get rid of the one I have on file and replace it using Gmail S/MIME. After I click OK, I see my message decrypted. As a side note Gmail S/MIME reports that it doesn't support digital signature verification. Dimitri > **···** > > On Tuesday 23 June 2009 11:57:51 am Martijn Brinkers wrote: > > > \> Boy, am I keeping you busy! Thanks for the > > \> Gmail How-to. > > \> > > 🙂 no problem > > : > > \> When I created the Djigzo account > > \> me(a)gmail.com, I had the cert mailed there, > > \> and it arrives without any body text and only > > \> an attachment also named smime.p7m. What am > > \> I doing wrong? > > > > That's because you should disable encryption > > for the CA sender. What happens is that the > > email gets sent by the CA sender (which you > > have specified in the CA settings). Because by > > default encryption is enabled AND a valid > > certificate is found the email with the pfx > > gets encrypted. > > > > Even though this is explained on page 30 in the > > administration guide I should explain this a > > bit better. Perhaps I can ask the user when the > > CA sender is setup whether encryption should be > > disabled for the CA sender. > > > > Page 30: > > > > "..You should make sure that the CA email > > address is a valid email address. Because the > > email containing the encrypted certificate is > > sent by Djigzo you should make sure that the > > settings for the CA email user are such that > > the email is not encrypted by Djigzo (i.e. set > > encrypt mode of the CA user to "No > > Encryption")." > > > > Kind regards, > > > > Martijn Brinkers > > > > \> Dimitri > > \> > > \> On Tuesday 23 June 2009 11:28:01 am you wrote: > > \>\> When a message is encrypted with S/MIME the > > \>\> complete message (including all attachments) > > \>\> is converted to an attachment with name > > \>\> smime.p7m. You need a S/MIME capable email > > \>\> client to read the message. There is a GMail > > \>\> add-on available which can be used with > > \>\> Firefox > > \>\> > > \>\> You need to import the pfx into Firefox. See > > \>\> [http://www.djigzo.com/help/import\_pfx\_gmail](http://www.djigzo.com/help/import_pfx_gmail). > > \>\>htm l for instructions on how to use the > > \>\> GMail S/MIME add-on with Firefox. > > \>\> > > \>\> If you open the email from GMail with > > \>\> Outlook or any other S/MIME capable client > > \>\> the message will be automatically decrypted. > > \>\> > > \>\> Kind regards, > > \>\> > > \>\> Martijn > > \>\> > > \>\> Dimitri Yioulos wrote: > > \>\>\> As a test of Djigzo (and because some of > > \>\>\> our mail recipients use public, Web-based > > \>\>\> mail like Yahoo Mail and Gmail), I've > > \>\>\> created a Djigzo user (me) with a Gmail > > \>\>\> account. In the user's Djigzo profile, I > > \>\>\> created the Subject trigger "test". I sent > > \>\>\> a message to me(a)gmail.com with the subject > > \>\>\> "test". What I received was an email with > > \>\>\> no message, but an attachment labelled > > \>\>\> smime.p7m. The only option I have is to > > \>\>\> download it, but don't have any idea what > > \>\>\> the DL is or how to open it. BTW, I have > > \>\>\> the FireGPG plugin installed on my copy of > > \>\>\> Firefox, and it does work with Gmail. > > \>\>\> > > \>\>\> Dimitri > > \>\> > > \>\> -- > > \>\> Djigzo open source email encryption > > > > -- > > Djigzo open source email encryption > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > Users mailing list > > Users(a)lists.djigzo.com > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 23, 2009, 7:02pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/6 "2009-06-23T19:02:43Z")
I'll will check the GMail add-on. They have just released a new version. Martijn Dimitri Yioulos wrote: > **···** > > > OK, I temporarily set Encrypt Mode to "No > > Encryption, and sent the cert to me(a)gmail. I > > installed the Gmail S/MIME pluin in Firefox. I > > followed the Gmail How-to. Then I sent an email > > with the subject trigger "test" from me(a)work.com > > to me(a)gmail.com, When the mail arrives at gmail, > > and I click on it, I get a JavaScript Application > > error - "warning: unexpected msg classname: > > X0uMP" . Click OK, then get a much longer > > JavaScript Application error stating that the > > email contains a different certificate than I > > have on file for me(a)work.com. It asks me to get > > rid of the one I have on file and replace it > > using Gmail S/MIME. After I click OK, I see my > > message decrypted. > > > > As a side note Gmail S/MIME reports that it > > doesn't support digital signature verification. > > > > Dimitri > > > > On Tuesday 23 June 2009 11:57:51 am Martijn \> Brinkers wrote: > > > > > > Boy, am I keeping you busy! Thanks for the > > > > Gmail How-to. > > > > > > 🙂 no problem > > > : > > > > > > > When I created the Djigzo account > > > > me(a)gmail.com, I had the cert mailed there, > > > > and it arrives without any body text and only > > > > an attachment also named smime.p7m. What am > > > > I doing wrong? > > > > > > That's because you should disable encryption > > > for the CA sender. What happens is that the > > > email gets sent by the CA sender (which you > > > have specified in the CA settings). Because by > > > default encryption is enabled AND a valid > > > certificate is found the email with the pfx > > > gets encrypted. > > > > > > Even though this is explained on page 30 in the > > > administration guide I should explain this a > > > bit better. Perhaps I can ask the user when the > > > CA sender is setup whether encryption should be > > > disabled for the CA sender. > > > > > > Page 30: > > > > > > "..You should make sure that the CA email > > > address is a valid email address. Because the > > > email containing the encrypted certificate is > > > sent by Djigzo you should make sure that the > > > settings for the CA email user are such that > > > the email is not encrypted by Djigzo (i.e. set > > > encrypt mode of the CA user to "No > > > Encryption")." > > > > > > Kind regards, > > > > > > Martijn Brinkers > > > > > > > Dimitri > > > > > > > > On Tuesday 23 June 2009 11:28:01 am you wrote: > > > > > > > > > When a message is encrypted with S/MIME the > > > > > complete message (including all attachments) > > > > > is converted to an attachment with name > > > > > smime.p7m. You need a S/MIME capable email > > > > > client to read the message. There is a GMail > > > > > add-on available which can be used with > > > > > Firefox > > > > > > > > > > You need to import the pfx into Firefox. See > > > > > [http://www.djigzo.com/help/import\_pfx\_gmail](http://www.djigzo.com/help/import_pfx_gmail). > > > > > htm l for instructions on how to use the > > > > > GMail S/MIME add-on with Firefox. > > > > > > > > > > If you open the email from GMail with > > > > > Outlook or any other S/MIME capable client > > > > > the message will be automatically decrypted. > > > > > > > > > > Kind regards, > > > > > > > > > > Martijn > > > > > > > > > > Dimitri Yioulos wrote: > > > > > > > > > > > As a test of Djigzo (and because some of > > > > > > our mail recipients use public, Web-based > > > > > > mail like Yahoo Mail and Gmail), I've > > > > > > created a Djigzo user (me) with a Gmail > > > > > > account. In the user's Djigzo profile, I > > > > > > created the Subject trigger "test". I sent > > > > > > a message to me(a)gmail.com with the subject > > > > > > "test". What I received was an email with > > > > > > no message, but an attachment labelled > > > > > > smime.p7m. The only option I have is to > > > > > > download it, but don't have any idea what > > > > > > the DL is or how to open it. BTW, I have > > > > > > the FireGPG plugin installed on my copy of > > > > > > Firefox, and it does work with Gmail. > > > > > > > > > > > > Dimitri > > > > > > > > > > -- > > > > > Djigzo open source email encryption > > > > > > -- > > > Djigzo open source email encryption > > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > > Users mailing list > > > Users(a)lists.djigzo.com > > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > -- > Djigzo open source email encryption ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 23, 2009, 7:36pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/7 "2009-06-23T19:36:42Z")
Thanks, Martijn. I installed the latest version. Dimitri PS - More tomorrow on receiving encrypted mail in Kmail (oh, boy 🙂 ). > **···** > > On Tuesday 23 June 2009 3:02:43 pm Martijn Brinkers wrote: > > > I'll will check the GMail add-on. They have > > just released a new version. > > > > Martijn > > > > Dimitri Yioulos wrote: > > \> OK, I temporarily set Encrypt Mode to "No > > \> Encryption, and sent the cert to me(a)gmail. I > > \> installed the Gmail S/MIME pluin in Firefox. > > \> I followed the Gmail How-to. Then I sent an > > \> email with the subject trigger "test" from > > \> me(a)work.com to me(a)gmail.com, When the mail > > \> arrives at gmail, and I click on it, I get a > > \> JavaScript Application error - "warning: > > \> unexpected msg classname: X0uMP" . Click OK, > > \> then get a much longer JavaScript Application > > \> error stating that the email contains a > > \> different certificate than I have on file for > > \> me(a)work.com. It asks me to get rid of the > > \> one I have on file and replace it using Gmail > > \> S/MIME. After I click OK, I see my message > > \> decrypted. > > \> > > \> As a side note Gmail S/MIME reports that it > > \> doesn't support digital signature > > \> verification. > > \> > > \> Dimitri > > \> > > \> > > \> On Tuesday 23 June 2009 11:57:51 am Martijn \> \> \> \> Brinkers wrote: > > \>\>\> Boy, am I keeping you busy! Thanks for the > > \>\>\> Gmail How-to. > > \>\>\> > > \>\> 🙂 no problem > > \>\>\> > > \>\>\> When I created the Djigzo account > > \>\>\> me(a)gmail.com, I had the cert mailed there, > > \>\>\> and it arrives without any body text and > > \>\>\> only an attachment also named smime.p7m. > > \>\>\> What am I doing wrong? > > \>\> > > \>\> That's because you should disable encryption > > \>\> for the CA sender. What happens is that the > > \>\> email gets sent by the CA sender (which you > > \>\> have specified in the CA settings). Because > > \>\> by default encryption is enabled AND a valid > > \>\> certificate is found the email with the pfx > > \>\> gets encrypted. > > \>\> > > \>\> Even though this is explained on page 30 in > > \>\> the administration guide I should explain > > \>\> this a bit better. Perhaps I can ask the > > \>\> user when the CA sender is setup whether > > \>\> encryption should be disabled for the CA > > \>\> sender. > > \>\> > > \>\> Page 30: > > \>\> > > \>\> "..You should make sure that the CA email > > \>\> address is a valid email address. Because > > \>\> the email containing the encrypted > > \>\> certificate is sent by Djigzo you should > > \>\> make sure that the settings for the CA email > > \>\> user are such that the email is not > > \>\> encrypted by Djigzo (i.e. set encrypt mode > > \>\> of the CA user to "No > > \>\> Encryption")." > > \>\> > > \>\> Kind regards, > > \>\> > > \>\> Martijn Brinkers > > \>\> > > \>\>\> Dimitri > > \>\>\> > > \>\>\> On Tuesday 23 June 2009 11:28:01 am you wrote: > > \>\>\>\> When a message is encrypted with S/MIME > > \>\>\>\> the complete message (including all > > \>\>\>\> attachments) is converted to an attachment > > \>\>\>\> with name smime.p7m. You need a S/MIME > > \>\>\>\> capable email client to read the message. > > \>\>\>\> There is a GMail add-on available which > > \>\>\>\> can be used with Firefox > > \>\>\>\> > > \>\>\>\> You need to import the pfx into Firefox. > > \>\>\>\> See > > \>\>\>\> [http://www.djigzo.com/help/import\_pfx\_gmai](http://www.djigzo.com/help/import_pfx_gmai) > > \>\>\>\>l. htm l for instructions on how to use the > > \>\>\>\> GMail S/MIME add-on with Firefox. > > \>\>\>\> > > \>\>\>\> If you open the email from GMail with > > \>\>\>\> Outlook or any other S/MIME capable client > > \>\>\>\> the message will be automatically > > \>\>\>\> decrypted. > > \>\>\>\> > > \>\>\>\> Kind regards, > > \>\>\>\> > > \>\>\>\> Martijn > > \>\>\>\> > > \>\>\>\> Dimitri Yioulos wrote: > > \>\>\>\>\> As a test of Djigzo (and because some of > > \>\>\>\>\> our mail recipients use public, Web-based > > \>\>\>\>\> mail like Yahoo Mail and Gmail), I've > > \>\>\>\>\> created a Djigzo user (me) with a Gmail > > \>\>\>\>\> account. In the user's Djigzo profile, I > > \>\>\>\>\> created the Subject trigger "test". I > > \>\>\>\>\> sent a message to me(a)gmail.com with the > > \>\>\>\>\> subject "test". What I received was an > > \>\>\>\>\> email with no message, but an attachment > > \>\>\>\>\> labelled smime.p7m. The only option I > > \>\>\>\>\> have is to download it, but don't have > > \>\>\>\>\> any idea what the DL is or how to open > > \>\>\>\>\> it. BTW, I have the FireGPG plugin > > \>\>\>\>\> installed on my copy of Firefox, and it > > \>\>\>\>\> does work with Gmail. > > \>\>\>\>\> > > \>\>\>\>\> Dimitri > > \>\>\>\> > > \>\>\>\> -- > > \>\>\>\> Djigzo open source email encryption > > \>\> > > \>\> -- > > \>\> Djigzo open source email encryption > > \>\> \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > \>\>\_\_\_ Users mailing list > > \>\> Users(a)lists.djigzo.com > > \>\> [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > > > -- > > Djigzo open source email encryption > > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > > Users mailing list > > Users(a)lists.djigzo.com > > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users) > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 23, 2009, 7:45pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/8 "2009-06-23T19:45:15Z")
Dimitri Yioulos wrote: > OK, I temporarily set Encrypt Mode to "No > Encryption, and sent the cert to me(a)gmail. I It's better to set "Encrypt mode" for the CA sender email address to no encryption and leave it like this. The CA sender should be an email address which you normally only use for sending the email with the password protected pfx. Because the pfx is already encrypted with a password and the user must be able to open the message with the pfx the message with the pfx should not be S/MIME encrypted. Kind regards, Martijn ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 24, 2009, 1:30pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/9 "2009-06-24T13:30:53Z")
Martijn, The Encrypt Mode default for each new user is "Allow". So, I should change that to "No Encryption" each time I set up a new user? On another front, I sent an encrypted message from me(a)gamil.com to me(a)work.com. I get the message, but Kmail said it was encrypted. When I clicked on "decrypt Message", I got the following: Encrypted message (decryption not possible) Reason: No secret key Isn't Djigzo supposed to automatically decrypt messages for internal users? Dimitri > **···** > > On Tuesday 23 June 2009 3:45:15 pm Martijn Brinkers wrote: > > > Dimitri Yioulos wrote: > > \> OK, I temporarily set Encrypt Mode to "No > > \> Encryption, and sent the cert to me(a)gmail. I > > > > It's better to set "Encrypt mode" for the CA > > sender email address to no encryption and leave > > it like this. The CA sender should be an email > > address which you normally only use for sending > > the email with the password protected pfx. > > Because the pfx is already encrypted with a > > password and the user must be able to open the > > message with the pfx the message with the pfx > > should not be S/MIME encrypted. > > > > Kind regards, > > > > Martijn > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 24, 2009, 1:39pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/10 "2009-06-24T13:39:30Z")
Dimitri Yioulos wrote: > The Encrypt Mode default for each new user > is "Allow". So, I should change that to "No > Encryption" each time I set up a new user? The settings are hierarchical. You have the system settings, global settings, wild-card domain settings (\*.example.com) domain settings and user settings. Lower levels inherit from higher levels if a setting is not explicitly set. You can override the inherited value by unchecking the "inherit" checkbox for the specific setting. In your case you should set "Encrypt mode" to allow for the global settings (which is the default) and explicitly set it to "No encryption" ONLY for the CA sender (the email address of the CA). Doing so assures you that the email with the pfx is not S/MIME encrypted. > On another front, I sent an encrypted message from > me(a)gamil.com to me(a)work.com. I get the message, > but Kmail said it was encrypted. When I clicked > on "decrypt Message", I got the following: > > Encrypted message (decryption not possible) > Reason: No secret key > > Isn't Djigzo supposed to automatically decrypt > messages for internal users? Are you sure that the domain work.com (or the user me(a)work.com) is an internal user. Only for users that are internal users is email decrypted. Email to internal users is decrypted and email to external users is encrypted. Martijn > **···** > > -- > Djigzo open source email encryption ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 24, 2009, 1:53pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/11 "2009-06-24T13:53:38Z")
Dimitri Yioulos wrote: > On another front, I sent an encrypted message from > me(a)gamil.com to me(a)work.com. I get the message, > but Kmail said it was encrypted. When I clicked > on "decrypt Message", I got the following: > > Encrypted message (decryption not possible) > Reason: No secret key > > Isn't Djigzo supposed to automatically decrypt > messages for internal users? The MPA log tells you how the message has been handled by Djigzo. For example "INFO incoming" shows that the message is for an internal user whereas "INFO external" shows you that the message is for an internal user. If the message could not be decrypted because Djigzo did not find a suitable private key to decrypt the message with you'll get the following warning in the MPA log: "WARN A decryption key for the message could not be found." The logs tells you what happens. Kind regards, Martijn > **···** > > -- > Djigzo open source email encryption ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 24, 2009, 2:09pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/12 "2009-06-24T14:09:46Z")
Martijn, In Settings | Edit Global preferences, I set Encrypt Mode to "No Encryption". That should take care of the CA sender issue, right? Both the domain, and me(a)work.com, are internal users. Best, Dimitri > **···** > > On Wednesday 24 June 2009 9:39:30 am Martijn Brinkers wrote: > > > Dimitri Yioulos wrote: > > \> The Encrypt Mode default for each new user > > \> is "Allow". So, I should change that to "No > > \> Encryption" each time I set up a new user? > > > > The settings are hierarchical. You have the > > system settings, global settings, wild-card > > domain settings (\*.example.com) domain settings > > and user settings. Lower levels inherit from > > higher levels if a setting is not explicitly > > set. You can override the inherited value by > > unchecking the "inherit" checkbox for the > > specific setting. > > > > In your case you should set "Encrypt mode" to > > allow for the global settings (which is the > > default) and explicitly set it to "No > > encryption" ONLY for the CA sender (the email > > address of the CA). Doing so assures you that > > the email with the pfx is not S/MIME encrypted. > > > > \> On another front, I sent an encrypted message > > \> from me(a)gamil.com to me(a)work.com. I get the > > \> message, but Kmail said it was encrypted. > > \> When I clicked on "decrypt Message", I got > > \> the following: > > \> > > \> Encrypted message (decryption not possible) > > \> Reason: No secret key > > \> > > \> Isn't Djigzo supposed to automatically > > \> decrypt messages for internal users? > > > > Are you sure that the domain work.com (or the > > user me(a)work.com) is an internal user. Only for > > users that are internal users is email > > decrypted. Email to internal users is decrypted > > and email to external users is encrypted. > > > > Martijn > > > > -- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 24, 2009, 2:14pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/13 "2009-06-24T14:14:50Z")
Dimitri Yioulos wrote: > In Settings | Edit Global preferences, I set > Encrypt Mode to "No Encryption". That should > take care of the CA sender issue, right? Yes. But in that case all outgoing email will not be encrypted by default so you need to either override the Encrypt mode setting / recipient or domain or use a "Subject trigger". > Both the domain, and me(a)work.com, are internal > users. Can you send me some relevant lines of the MPA log? Martijn > **···** > > -- > Djigzo open source email encryption ---
**Author:** ![Dimitri\_Yioulos](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Dimitri\_Yioulos](https://community.ciphermail.com/u/Dimitri_Yioulos)\ **Post date:** [June 24, 2009, 2:53pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/14 "2009-06-24T14:53:22Z")
Hmmm, nothing in the MPA log about my message. I guess I 1) have to set sendmail to forward mail to Djigzo, and; 2) tell Kmail to receive mail from Djigzo. Sound right? > **···** > > On Wednesday 24 June 2009 10:14:50 am Martijn Brinkers wrote: > > > Dimitri Yioulos wrote: > > \> In Settings | Edit Global preferences, I set > > \> Encrypt Mode to "No Encryption". That should > > \> take care of the CA sender issue, right? > > > > Yes. But in that case all outgoing email will > > not be encrypted by default so you need to > > either override the Encrypt mode setting / > > recipient or domain or use a "Subject trigger". > > > > \> Both the domain, and me(a)work.com, are > > \> internal users. > > > > Can you send me some relevant lines of the MPA > > log? > > > > Martijn > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [June 24, 2009, 3:01pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/15 "2009-06-24T15:01:44Z")
Dimitri Yioulos wrote: > Hmmm, nothing in the MPA log about my message. I > guess I 1) have to set sendmail to forward mail > to Djigzo, and; 2) tell Kmail to receive mail > from Djigzo. Sound right? Djigzo is an MTA and does not have a POP3/IMAP server installed. You therefore cannot receive email with KMail from Djigzo. You should tell Djigzo that mail for your internal domains are delivered to your mail server that handles your POP/IMAP accounts (probably your sendmail server). In the MTA settings you must specify the "Internal relay host". This should point to the mail server that handles your mail boxes. If you want your KMail to send mail through Djigzo you can either tell KMail to send directly to Djigzo or setup your sendmail server to relay mail through Djigzo. So the current situation (without Djigzo) Kmail -\> sendmail -\> internet Kmail \<- (pop/imap) \<- sendmail \<- internet With Djigzo: Kmail -\> sendmail -\> Djigzo -\> internet Kmail \<- (pop/imap) \<- sendmail \<- Djigzo \<- internet This is the most typical setup. Martijn > **···** > > -- > Djigzo open source email encryption ---
**Author:** ![Christine](https://avatars.discourse-cdn.com/v4/letter/c/8491ac/32.png) [@Christine](https://community.ciphermail.com/u/Christine)\ **Post date:** [June 24, 2009, 3:29pm UTC](https://community.ciphermail.com/t/encryption-and-gmail/21/16 "2009-06-24T15:29:26Z")
Dimitri Yioulos wrote: > Hmmm, nothing in the MPA log about my message. I > guess I 1) have to set sendmail to forward mail > to Djigzo, and; 2) tell Kmail to receive mail > from Djigzo. Sound right? >    It depends on how you want your mail to be handled. I myself have my mail server - postfix - configured to accept mail, send it to Djigzo, which sends it to SpamAssassin, which sends it back to Postfix for processing. My mail clients don't need to know that Djigzo is involved. Outgoing mail also goes to Postfix, which loops it through Djigzo before sending the mail. As long as you realize that Djigzo is an MTA, you can configure your SendMail and Djigzo and Spam filters any way you like. dagdag Christine > **···** > > -- > > dagdag is just a two-character rotation of byebye.