# Is it possible to encrypt without signing ? **URL:** \ **Category:** Gateway\ **Created:** [May 16, 2012, 9:33am UTC](https://community.ciphermail.com/t/is-it-possible-to-encrypt-without-signing/298 "2012-05-16T09:33:59Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Yannick\_Grange](https://avatars.discourse-cdn.com/v4/letter/y/f17d59/32.png) [@Yannick\_Grange](https://community.ciphermail.com/u/Yannick_Grange)\ **Post date:** [May 16, 2012, 9:33am UTC](https://community.ciphermail.com/t/is-it-possible-to-encrypt-without-signing/298/1 "2012-05-16T09:33:59Z")
Dear all, I would like to know if it's possible to configure Djigzo en encrypt emails without signing it. We would need that because using "Company gateway" certificate to sign, the sender email adress is not the same as the email adress inside the "Company gateway" certificate, and it seems this create some "warning" on the recipient side SMIME product. I look into the web interface and the Administration Guide, and I don't see any option to encrypt whithout signing. the option "Only Sign when encrypt" say : "messages will be signed only when encrypted , otherwise all messages will be signed." Does anyone know if it's possible to not sign at all ? Thank's > **···** > > -- > Yannick ---
**Author:** ![lst\_hoe021](https://avatars.discourse-cdn.com/v4/letter/l/58956e/32.png) [@lst\_hoe021](https://community.ciphermail.com/u/lst_hoe021)\ **Post date:** [May 16, 2012, 9:49am UTC](https://community.ciphermail.com/t/is-it-possible-to-encrypt-without-signing/298/2 "2012-05-16T09:49:01Z")
Zitat von Yannick Grange \: > Dear all, > > I would like to know if it's possible to configure Djigzo en encrypt > emails without signing it. > We would need that because using "Company gateway" certificate to sign, > the sender email adress is not the same as the email adress inside the > "Company gateway" certificate, and it seems this create some "warning" on > the recipient side SMIME product. This is the downside of Gateway certificates, yes... > I look into the web interface and the Administration Guide, and I don't > see any option to encrypt whithout signing. > the option "Only Sign when encrypt" say : "messages will be signed only > when encrypted , otherwise all messages will be signed." This means all messages will be signed if a matching certificate/key is available. So in your case Djigzo should not sign the mails as long as you don't have a matching sender mailaddress which you don't have with your gateway certificate. If it does sign with the gateway certificate/key you most likely have assigned it as "signing certificate" at domain level, no? Regards Andreas ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [May 16, 2012, 10:41am UTC](https://community.ciphermail.com/t/is-it-possible-to-encrypt-without-signing/298/3 "2012-05-16T10:41:54Z")
I think Andreas is right in that probably a signing certificate has been selected for the sender domain (i.e., for the domain technip.com). You can check whether a signing certificate is selected for the sender domain by opening the properties page for the domain, then click on "signing certificate". If a certificate is selected you can remove the selection by clicking "auto select certificate". "auto select certificate" for a domain will result in no certificate because there is no domain certificate available. Kind regards, Martijn Brinkers > **···** > > On 05/16/2012 11:49 AM, lst\_hoe02(a)kwsoft.de wrote: > > > Zitat von Yannick Grange \: > > > > > Dear all, > > > > > > I would like to know if it's possible to configure Djigzo en encrypt > > > emails without signing it. > > > We would need that because using "Company gateway" certificate to sign, > > > the sender email adress is not the same as the email adress inside the > > > "Company gateway" certificate, and it seems this create some "warning" on > > > the recipient side SMIME product. > > > > This is the downside of Gateway certificates, yes... > > > > > I look into the web interface and the Administration Guide, and I don't > > > see any option to encrypt whithout signing. > > > the option "Only Sign when encrypt" say : "messages will be signed only > > > when encrypted , otherwise all messages will be signed." > > > > This means all messages will be signed if a matching certificate/key is > > available. So in your case Djigzo should not sign the mails as long as > > you don't have a matching sender mailaddress which you don't have with > > your gateway certificate. If it does sign with the gateway > > certificate/key you most likely have assigned it as "signing > > certificate" at domain level, no? > > -- > DJIGZO email encryption ---
**Author:** ![Yannick\_Grange](https://avatars.discourse-cdn.com/v4/letter/y/f17d59/32.png) [@Yannick\_Grange](https://community.ciphermail.com/u/Yannick_Grange)\ **Post date:** [May 16, 2012, 12:17pm UTC](https://community.ciphermail.com/t/is-it-possible-to-encrypt-without-signing/298/4 "2012-05-16T12:17:38Z")
Dear all, Thank you very much for your 2 very fast answers. Of course the Martijn's solution is working perfectly 🙂 Sorry to have missed this Domain "signing certificate" options in web interface. Thank you > **···** > > -- > Yannick > > From: Martijn Brinkers \ > To: users(a)lists.djigzo.com > Date: 16/05/2012 12:42 > Subject: Re: Is it possible to encrypt without > signing ? > Sent by: users-bounces(a)lists.djigzo.com > > On 05/16/2012 11:49 AM, lst\_hoe02(a)kwsoft.de wrote: > > > Zitat von Yannick Grange \: > > > > > Dear all, > > > > > > I would like to know if it's possible to configure Djigzo en encrypt > > > emails without signing it. > > > We would need that because using "Company gateway" certificate to sign, > > > the sender email adress is not the same as the email adress inside the > > > "Company gateway" certificate, and it seems this create some "warning" > > on > > > > the recipient side SMIME product. > > > > This is the downside of Gateway certificates, yes... > > > > > I look into the web interface and the Administration Guide, and I don't > > > see any option to encrypt whithout signing. > > > the option "Only Sign when encrypt" say : "messages will be signed only > > > when encrypted , otherwise all messages will be signed." > > > > This means all messages will be signed if a matching certificate/key is > > available. So in your case Djigzo should not sign the mails as long as > > you don't have a matching sender mailaddress which you don't have with > > your gateway certificate. If it does sign with the gateway > > certificate/key you most likely have assigned it as "signing > > certificate" at domain level, no? > > I think Andreas is right in that probably a signing certificate has been > selected for the sender domain (i.e., for the domain technip.com). You > can check whether a signing certificate is selected for the sender > domain by opening the properties page for the domain, then click on > "signing certificate". If a certificate is selected you can remove the > selection by clicking "auto select certificate". "auto select > certificate" for a domain will result in no certificate because there is > no domain certificate available. > > Kind regards, > > Martijn Brinkers > > -- > DJIGZO email encryption > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > Users mailing list > Users(a)lists.djigzo.com > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users)