Merge pull request 'Refresh docs' (#128) from 126-refresh-docs into main
Reviewed-on: #128
This commit is contained in:
commit
401f67844a
18
INSTALL.md
18
INSTALL.md
|
|
@ -19,16 +19,17 @@ These instructions are based on an installation on an Ubuntu 14.04 LTS virtual m
|
|||
|
||||
### Requirements
|
||||
|
||||
- Python 3.x is already installed
|
||||
- Postfix is already installed and configured. It is recommended that you have already tested your configuration so we can exclude this as a main cause of problems
|
||||
- GnuPG is already installed and configured
|
||||
- Python 3.9.
|
||||
- Dependencies listed in [requirements file](https://packaging.python.org/en/latest/tutorials/installing-packages/#requirements-files), `requirements.txt`.
|
||||
- Postfix: installed, configured and tested.
|
||||
- GnuPG: installed, configured and tested (e.g. via command-line).
|
||||
|
||||
### Installation
|
||||
|
||||
1. Install the Python-M2Crypto module:
|
||||
1. Install the dependencies:
|
||||
|
||||
```
|
||||
apt-get install python-m2crypto
|
||||
python -m pip install -r requirements.txt
|
||||
```
|
||||
|
||||
2. Set the home directory for the user `nobody` (sadly this workaround is needed as there is no better solution at this point). If you get an error that the user is currently used by a process, you might need to kill the process manually.
|
||||
|
|
@ -99,8 +100,7 @@ sudo -u nobody /usr/bin/gpg --homedir=/var/gpgmailgate/.gnupg --import /some/pub
|
|||
|
||||
- Replace `/some/public.key` with the location of a public key
|
||||
- `/some/public.key` can be deleted after importation
|
||||
- Confirm that it's working:
|
||||
`sudo -u nobody /usr/bin/gpg --list-keys --homedir=/var/gpgmailgate/.gnupg`
|
||||
- Confirm that it's working: `sudo -u nobody /usr/bin/gpg --list-keys --homedir=/var/gpgmailgate/.gnupg`
|
||||
|
||||
Please also test your installation before using it.
|
||||
|
||||
|
|
@ -124,7 +124,9 @@ If your recipients have problems to decrypt mails encrypted by GPG-Mailgate they
|
|||
|
||||
### Installation
|
||||
|
||||
All files you need can be found in the [gpg-mailgate-web](gpg-mailgate-web/) directory.
|
||||
All files you need can be found in the
|
||||
[Lacre / lacre-webgate](https://git.disroot.org/Lacre/lacre-webgate/)
|
||||
repository.
|
||||
|
||||
1. Install the Python-mysqldb and Python-markdown modules:
|
||||
|
||||
|
|
|
|||
67
README.md
67
README.md
|
|
@ -1,57 +1,68 @@
|
|||
# GPG Lacre Project
|
||||
# Lacre Project
|
||||
|
||||
GPG Lacre is a fork and continuation of original work of gpg-mailgate project:
|
||||
[gpg-mailgate](https://github.com/TheGreatGooo/gpg-mailgate). It is still
|
||||
actively developed and should be considered as beta -- with all APIs and
|
||||
internals being subject to change. Please only use this software if you know
|
||||
GnuPG well.
|
||||
**Lacre** (wax seal in Portuguese) is an add-on for Postfix that automatically
|
||||
encrypts incoming email before delivering it to recipients' inbox for
|
||||
recipients that have provided their public keys.
|
||||
|
||||
Lacre is a fork and continuation of the original work on
|
||||
[gpg-mailgate](https://github.com/TheGreatGooo/gpg-mailgate) project. It is
|
||||
still actively developed and should be considered as beta -- with all APIs and
|
||||
internals being subject to change. Please only use this software if you know
|
||||
GnuPG well and accept occasional failures.
|
||||
|
||||
**GPG Lacre** (wax seal in Portuguese) is a content filter for Postfix that automatically encrypts unencrypted incoming email using PGP or S/MIME for select recipients.
|
||||
This project is the continuation of the work of "gpg-mailgate" on providing open source, GnuPG based email encryption for emails at rest. All incoming emails are automatically encrypted with user's public key before they are saved on the server. It is a server side encryption solution while the control of the encryption keys are fully at the hands of the end-user and private keys are never stored on the server.
|
||||
# How it works
|
||||
|
||||
The scope of the project is to improve on the already existing code, provide easy to use key upload system (standalone as well as Roundcube plugin) and key discoverability. Beside providing a solution that is easy to use we will also provide easy to digest material about encryption, how it works and how to make use of it in situations other the just mailbox encryption. Understanding how encryption works is the key to self-determination and is therefore an important part of the project.
|
||||
Lacre is a [content filter](https://www.postfix.org/FILTER_README.html). This
|
||||
means, that when Postfix receives a message, it "forwards" that message to
|
||||
Lacre and if Lacre delivers it to a given destination, the message arrives to
|
||||
recipient's inbox.
|
||||
|
||||
GPG Lacre will be battle tested on the email infrastructure of https://disroot.org (an ethical non-profit service provider).
|
||||
After receiving the message, Lacre does the following:
|
||||
|
||||
1. If message already is encrypted, it just delivers the message immediately.
|
||||
2. Checks the list of recipients, finds their public keys if any were
|
||||
provided.
|
||||
3. Encrypts message if possible.
|
||||
4. Delivers the message.
|
||||
|
||||
---
|
||||
|
||||
The work on this project in 2021 is funded by https://nlnet.nl/thema/NGIZeroPET.html for which we are very thankful.
|
||||
|
||||
The scope of the work for 2021 is:
|
||||
- Rewrite code to python3
|
||||
- Improve standalone key upload website
|
||||
- Provide Roundcube plugin for key management
|
||||
- Improve key server features
|
||||
- Provide webiste with information and tutorials on how to use GPG in general and also **Lacre**
|
||||
- (Optional) provide Autocrypt support
|
||||
Work on this project in 2021 was funded by
|
||||
[NGI Zero PET](https://nlnet.nl/thema/NGIZeroPET.html)
|
||||
for which we are very thankful.
|
||||
|
||||
Made possible thanks to:<br>
|
||||
|
||||
|
||||
---
|
||||
|
||||
For installation instructions, please refer to the included **INSTALL** file.
|
||||
# Installation
|
||||
|
||||
For installation instructions, please refer to the included [INSTALL](INSTALL.md) file.
|
||||
|
||||
---
|
||||
|
||||
# Features
|
||||
# Planned features
|
||||
|
||||
- Correctly displays attachments and general email content; currently will only display first part of multipart messages
|
||||
- Public keys are stored in a dedicated gpg-home-directory
|
||||
- Encrypts both matching incoming and outgoing mail (this means gpg-mailgate can be used to encrypt outgoing mail for software that doesn't support PGP or S/MIME)
|
||||
- Decrypts PGP encrypted mails for present private keys (but no signature check and it does not always work with PGP/INLINE encrypted mails)
|
||||
- Easy installation
|
||||
- gpg-mailgate-web extension is a web interface allowing any user to upload PGP keys so that emails sent to them from your mail server will be encrypted (see gpg-mailgate-web directory for details)
|
||||
- people can submit their public key like to any keyserver to gpg-mailgate with the gpg-mailgate-web extension
|
||||
- people can send an S/MIME signed email to register@yourdomain.tld to register their public key
|
||||
- people can send their public OpenPGP key as attachment or inline to register@yourdomain.tld to register it
|
||||
- People can submit their public key like to any keyserver to gpg-mailgate with the gpg-mailgate-web extension
|
||||
- People can send an S/MIME signed email to register@yourdomain.tld to register their public key
|
||||
- People can send their public OpenPGP key as attachment or inline to register@yourdomain.tld to register it
|
||||
|
||||
See also: [lacre-webgate](https://git.disroot.org/Lacre/lacre-webgate/) -- a
|
||||
web interface allowing any user to upload PGP keys so that emails sent to them
|
||||
from your mail server will be encrypted
|
||||
|
||||
This is forked from the original project at http://code.google.com/p/gpg-mailgate/
|
||||
|
||||
# Authors
|
||||
|
||||
This is a combined work of many developers and contributors. We would like to pay honours to original gpg mailbox developers for making this project happen, and providing solid solution for encryption emails at rest:
|
||||
This is a combined work of many developers and contributors. We would like to
|
||||
pay honours to original gpg mailbox developers for making this project happen,
|
||||
and providing solid solution for encryption emails at rest:
|
||||
|
||||
* mcmaster <mcmaster@aphrodite.hurricanelabs.rsoc>
|
||||
* Igor Rzegocki <ajgon@irgon.com> - [GitHub](https://github.com/ajgon/gpg-mailgate)
|
||||
|
|
@ -63,4 +74,4 @@ This is a combined work of many developers and contributors. We would like to pa
|
|||
* Bruce Markey - [GitHub](https://github.com/TheEd1tor)
|
||||
* Remko Tronçon - [GitHub](https://github.com/remko/phkp/)
|
||||
* Kiritan Flux [GitHub](https://github.com/kflux)
|
||||
* Fabian Krone [GitHub] (https://github.com/fkrone/gpg-mailgate)
|
||||
* Fabian Krone [GitHub](https://github.com/fkrone/gpg-mailgate)
|
||||
|
|
|
|||
Loading…
Reference in New Issue