The S/MIME add-on for WebApp is an easy to use tool that helps you secure your email with minimal effort. This new beta release introduces new features and improvements primarily aimed at how certificates are handled and verified. This S/MIME release also introduces a dependency on a new PHP module which is also available in the S/MIME package repository. You will need to restart your webserver or php-fpm after installation.
S/MIME Enable cross-organization data sharing, and fight against data leakage. It is about exchanging email with an extra layer of trust by using a so-called ‘public key infrastructure’ (PKI). In practice this means that the user ensures the authenticity of the message by adding a digital signature. In addition, encryption can be used to avoid data leakage in case you were to be hit by a ‘man-in-the-middle’ attack. If you want more details about the Kopano S/MIME plugin, have a look at the page about Email Security.
What is new in this version?
The primary goal of this release was to improve the handling of certificates and keys for the user. In addition we improved the user interface and resolved some bugs.
Improved certificate handling
We improved the way certificate validity is verified with different types of (intermediate) certificates, by traversing the complete chain on verification. This was not supported in PHP and required the addition multiple function calls. This means that for existing PHP versions, you need to install a new module that is provided in the Kopano S/MIME repository.
The required change has been submitted to the PHP development team (https://github.com/php/php-src/commit/787a18a50a4863874dcf805974ba609efdd9950f) for inclusion in future PHP versions.
Reading your encrypted sent items
Any outgoing encrypted message sent by you will also be encrypted with your own public key. New messages sent after installing this version can be read from your sent items folder after entering your passphrase.
A total of 29 tickets have been fixed in this release. The complete list can be found in the changelog.
Where do I get the packages?
The packages to this release are available. You can download them through the repositories, the portal or directly from the download server (all require authentication). The latest development build of the S/MIME plugin is also available through the community download server! Technical details can be found in the documentation. If you have any feedback on this new release, leave your comments in the forum or send an email to firstname.lastname@example.org!