Commit graph

1894 commits

Author SHA1 Message Date
David Duque
9d180f592e
Use the core enigma instead 2020-10-04 16:32:58 +01:00
David Duque
f746ef64dc
Roundcube: Enable enigma plugin 2020-09-20 20:19:04 +01:00
David Duque
ca807c65a7
Syntax warning correction 2020-09-11 22:23:20 +01:00
David Duque
0e2fd86568
Daemon now sends signed messages as an attachment 2020-09-11 19:51:14 +01:00
David Duque
be26603525
Key auto-renewal 2020-09-11 16:23:37 +01:00
David Duque
80e532f31e
PGP Keyring status checks 2020-09-09 18:39:28 +01:00
David Duque
934397fc35
Fix setup issue when we tried to symlink something that is already symlinked 2020-09-09 15:13:23 +01:00
David Duque
e1ff419d83
Pubkey algos - index via the relevant constants 2020-09-09 15:12:09 +01:00
David Duque
1d6e902935
Remove trust owner - not relevant for our use cases 2020-09-09 14:48:28 +01:00
David Duque
01ef02841e
Key deletion 2020-09-07 21:30:33 +01:00
David Duque
ed2b192f9c
Key removal front-end 2020-09-07 18:11:13 +01:00
David Duque
549e11a3ad
Add single-key querying, key deletion stub 2020-09-07 18:03:36 +01:00
David Duque
cbbcbc12c8
Code refactoring, return results as raw data 2020-09-07 18:02:35 +01:00
David Duque
01954748ca
Key removal confirmation modal 2020-09-07 17:35:53 +01:00
David Duque
9638f84573
Enable key importing via admin panel
Key highlights:
* Supports ascii armored imports
* Refuses to import secret keys
* Can import entire keyboxes (imports with more than one key, etc.)
* Can import revocations, etc.
2020-09-07 00:11:45 +01:00
David Duque
ccab40cbc4
Display revoked keys as such 2020-09-05 12:42:14 +01:00
David Duque
d134da66e7
Key export: Handle error cases 2020-09-03 23:15:49 +01:00
David Duque
8a5a5aa92a
Import key front-end 2020-09-03 23:09:55 +01:00
David Duque
e6c0af621b
Allow keys to be exported 2020-09-03 22:40:12 +01:00
David Duque
888b3794fc
Increase modal screen width 2020-09-03 22:39:54 +01:00
David Duque
c3db6e4749
Make venv use the distribution's gpgme bindings
The bindings provided via pip both require a compilation step (which we
do not want), and they're actually severely out-of-date (aka, missing
features)

The only way to make venv use these bindings (at least from my point of
view, at the moment) is to symlink the gpg package inside the venv lib
directory.
2020-09-03 22:29:43 +01:00
David Duque
dd54fc1b51
Key exports 2020-09-02 20:21:07 +01:00
David Duque
f1a9a9fe7f
Properly add buttons to export and delete. Functionality still pending. 2020-09-02 16:37:01 +01:00
David Duque
4af61247b8
Fix algorithm display width to 120pt 2020-09-02 16:21:53 +01:00
David Duque
9384064b9c
Representation of keys in webpage 2020-08-25 00:04:31 +01:00
David Duque
a9b2160b2b
Pass in friendly versions of expiration timestamps 2020-08-24 23:55:37 +01:00
David Duque
145ba32b5e
Begin templating work 2020-08-24 11:24:05 +01:00
David Duque
73f4647e65
Placeholder for showing keys 2020-08-24 00:58:14 +01:00
David Duque
1771d76be4
Properly recall pgp key from /etc/mailinabox.conf 2020-08-24 00:25:48 +01:00
David Duque
dea8cb1356
Use first private key when writing mailinabox.conf
In a scenario where somehow there are multiple private keys in the ring
(development purposes), gpg will output all their fingerprints, and that
will be written to /etc/mailinabox.conf, like this:

PGPKEY=FPR1
FPR2
FPR3
FPRn

When imported by other shell scripts this will cause errors (causing
issues in the setup)
2020-08-23 23:35:48 +01:00
David Duque
2b95ecd5eb
Add route /admin/system/pgp/
Returns all keys in the keyring (daemon's and private)
2020-08-23 23:34:34 +01:00
David Duque
02eeb0bd41
Get keys in keyring 2020-08-23 02:08:12 +01:00
David Duque
f9c6c76b8d
Key representation function 2020-08-23 01:59:15 +01:00
David Duque
1b232f14bc
Keep daemon's key fingerprint in configuration; Replace if needed 2020-08-17 00:58:28 +01:00
David Duque
a8abae7703
Begin pgp.py tools 2020-08-16 01:48:36 +01:00
David Duque
d03b5ad595
Generate initial private key if one doesn't already exist 2020-08-15 02:34:21 +01:00
David Duque
12f35acb09
Front-end mockup 2020-08-12 19:06:11 +01:00
David Duque
1414a9b6c3
Use bootstrap-provided features (instead of messing up with style tags) 2020-08-10 03:13:41 +01:00
David Duque
2e18b9280e
Add PGP Keyring Management page 2020-08-06 19:18:05 +01:00
David Duque
ee22d4a4b9
Move advanced pages into separate dropdown menu 2020-08-06 19:15:15 +01:00
David Duque
0cf4ed9a24
Version bump 2020-07-30 15:43:48 +01:00
David Duque
1ba62c6112 v0.47
v0.47 (July 29, 2020)
 ---------------------
 
 Security fixes:
 
 * Roundcube is updated to version 1.4.7 fixing a cross-site scripting (XSS) vulnerability with HTML messages with malicious svg/na$
 * SSH connections are now rate-limited at the firewall level (in addition to fail2ban).
 -----BEGIN PGP SIGNATURE-----
 
 iQFDBAABCgAtFiEEX0wOcxPM10RpOyrquSBB9MEL3YEFAl8hh4APHGp0QG9jY2Ft
 cy5pbmZvAAoJELkgQfTBC92BD8EIAKuNEHxgL0C0kkpAhuTlVXuoNEH/2FF6hYS7
 7NqVrqOO1iVPGkGPhAh77CLpnvvJEhu9GeSWFhTrpI//5CvfafUQowmELClmDcYL
 yxHqgoHX9O0PAd+uCLgO3MdAzFMVLNbPmt/uPgEHufnrrQGIGieB2iGWnf9xnnpf
 wFSyQQnLofFpq7nH6qQvLNvh//zPQd7l/YV3ieEuT0dV4izg/Sr7Q5W6Zwn/q/ed
 Btp4CizRFRFTmulIEM8an+jSXMMvdVkut6WDcl6ct8LZLoWwtEkWVeru9IVu4n9L
 Lj8Bkt+8aRR6updnI/2tm0d7ZgFXWHc/+dfLCaK+aOlMD3qV9p0=
 =xsgn
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEAKK/toPAcMkE+dinLzJ3OKPArjoFAl8i0EQACgkQLzJ3OKPA
 rjopbg//T75ZyceGJVvDnzylhW65bIL8oUYiFLy/GOA39rmR1gjcwzHSaIP0kOtX
 HPpm6rhPhVUKo8pjuWSvLnnNfz9QfJ4b6SqAN2Zg/hiqFdMEShGZNqvSQVvLkfxi
 HHwa1C+TlRTD57HlVi9Y6TLX7YH65T9YmJol6KO30dGJRMIPssLg6K5k0Wf2Y2uG
 E+6tipkiTPcHEaKIHUPdi5xxTL/QHVn+c+C0nsiflX7i9vC6P30e3yNsOvpk3q7V
 XwD/bJfycUq8Qc5WhPsKoo287QY9XrkUco8vsVMDJJ1oCSIO1Ek5H/tgu2qB1QNJ
 EGtcAYr09Fi8+5PLhmbTgRRWJ6ez6SaNnxsh8W5FhRpymgujoe4ghMiuYCwfHW13
 ESB1KKZHGUiqP4nxHIgYyANrSP97qsZmVWUEQcwqhcP8BZY4NOzEsUKgIjTCTpVJ
 CbRUJlgQow7s/R76aH3Crb7xhbE+2eQPDgKQ6AwDySWbPTDd3T6MtL0Oe2MZS8Wg
 8mv02U+eqDfQ0TfD30vGIESARXJ1UJWfsLQzyyg7jBCTrIfSQt1IwFzXCASm78hs
 kHN0/gmXUULQq0FslKV/zrfOsNEzKX+sCwjOMG7RMlWVcEVkRyXFvcajBj72mvZl
 3kFOEqah8nErTStsP89Z+ltwfkVsWehu+vwP67NryRy4/B3y9fQ=
 =CTVK
 -----END PGP SIGNATURE-----

Merge upstream v0.47
2020-07-30 14:51:00 +01:00
hija
56d0289ed9 v0.47 2020-07-29 10:24:56 -04:00
Marcus Bointon
f253c40012 [backport] Add rate limiting of SSH in the firewall (#1770)
See #1767. Backport of cfc8fb484c.
2020-07-29 10:24:23 -04:00
Hilko
2c34a6df2b Update roundcube to 1.4.7 2020-07-29 10:15:12 -04:00
David Duque
dd7899acca
Version bump 2020-07-26 01:03:28 +01:00
David Duque
5e597bb536
Update deprecated function from dnspython 2020-07-26 01:00:17 +01:00
David Duque
60911515fd
Support Ubuntu LTS point releases 2020-07-26 00:26:35 +01:00
David Duque
ac8c0ae762
Release v0.46.POWER.4 2020-07-22 12:45:18 +01:00
David Duque
16ae3038b3
Merge branch 'development' 2020-07-22 12:44:04 +01:00