Disroot
/
gpg-lacre
9
15
Fork 4
Code Issues 29 Pull Requests 1 Releases 2 Wiki Activity
A mailgate for Postfix to encrypt incoming and outgoing email with S/MIME and/or OpenPGP and decrypting OpenPGP encrypted emails https://lacre.io
194 Commits 6 Branches 12 Tags 2.1 MiB
Python 98%
Makefile 1.4%
Shell 0.6%
Go to file
fkrone 24cfe01d95 Fixing stupid bug with non existing variable. Copy & paste fail. Finding a default key for recipient in domain keymap crashed mailgate. 2015-06-04 19:04:27 +02:00
GnuPG Support for decrypting PGP encrypted mails. However, it has some drawbacks and might cause some security issues. So before using it please read carefully through the installation instructions. 2015-05-25 20:24:37 +02:00
cron_templates Changes to cron, register-handler, settings and templates: 2015-01-31 16:08:12 +01:00
gpg-mailgate-web Make the SMTP relay used by cron configurable via config. Use the same as the gateway does. 2015-03-28 19:41:40 +01:00
register_templates Changes to cron, register-handler, settings and templates: 2015-01-31 16:08:12 +01:00
.gitignore Added .gitignore for python 2013-04-02 21:30:20 +02:00
INSTALL.md Disable PGP/INLINE decryption by default. It does work, however, it has some drawbacks (e.g. content type for files getting lost). 2015-05-25 22:49:42 +02:00
LICENSE Update license to GNU GPL v3. 2013-10-02 14:27:28 -04:00
README.md Support for decrypting PGP encrypted mails. However, it has some drawbacks and might cause some security issues. So before using it please read carefully through the installation instructions. 2015-05-25 20:24:37 +02:00
gpg-mailgate.conf.sample Added possibility to define a regex for finding recipients to decrypt for and also adding possibility to use default keys for domain ranges 2015-05-29 23:13:05 +02:00
gpg-mailgate.py Fixing stupid bug with non existing variable. Copy & paste fail. Finding a default key for recipient in domain keymap crashed mailgate. 2015-06-04 19:04:27 +02:00
register-handler.py Making GPG-Mailgate compatible with RFC 2821 (Simple Mail Transfer Protocol). The previous reverted commits made the gateway incompatible with the RFC. However, compatibility has to be activated in the settings. Most mail servers ignore the case sensitivity of the mail addresses, so this should not be a big issue. 2015-02-14 19:34:26 +01:00

README.md

gpg-mailgate

Please note: This fork is currently WIP. It is not recommended for use at the moment.

gpg-mailgate is a content filter for Postfix that automatically encrypts unencrypted incoming email using PGP or S/MIME for select recipients. It is also able to decrypt incoming PGP mails.

For installation instructions, please refer to the included INSTALL file.

Features

  • Correctly displays attachments and general email content; currently will only display first part of multipart messages
  • Public keys are stored in a dedicated gpg-home-directory
  • Encrypts both matching incoming and outgoing mail (this means gpg-mailgate can be used to encrypt outgoing mail for software that doesn't support PGP or S/MIME)
  • Decrypt PGP encrypted mails for present private keys (but no signature check and it does not always work with PGP/INLINE encrypted mails)
  • Easy installation
  • gpg-mailgate-web extension is a web interface allowing any user to upload PGP keys so that emails sent to them from your mail server will be encrypted (see gpg-mailgate-web directory for details)
  • people can submit their public key like to any keyserver to gpg-mailgate with the gpg-mailgate-web extension
  • people can send an S/MIME signed email to register@yourdomain.tld to register their public key
  • people can send their public OpenPGP key as attachment or inline to register@yourdomain.tld to register it

This is forked from the original project at http://code.google.com/p/gpg-mailgate/

Authors

This is a combined work of many developers and contributors:

To Do

  • clean up code
  • rename from gpg-mailgate to openpgp-s-mime-mailgate or something.....
  • find a better solution for an own user instead of the user nobody
  • make PGP/INLINE decryption more reliable
  • even more magical stuff