Re: [SOGo] SMIME E-Mail Encryption

[Christian Mack]

Hello

Am 12.11.24 um 12:39 schrieb Luke Haase (luke.ha...@ender-informatics.ch):

Hello Everyone

We have Sogo installed on a Debian 12 System for a customer of mine.

Now the Customer wants to send encrypted mails via the Sogo Web interface.

Installing the S/MIME certificate and sending signed emails works without an issue. Encrypting those emails hovever doesn't. Encrypting the mail doesn't even work, when replying to a encrypted mail. We always get the error: "cannot encrypt email without recipient certificate". According to the documentation sogo should automatically save the sender certificate and encrypt the mail (https://www.sogo.nu/files/docs/ SOGoInstallationGuide.html#_smime_support_in_sogo)

I also can't find an option to manually add the public key to a contact.

First:
SOGo uses only the personal addressbook in order to store public keys.

Then open a signed email from that person.
Afterwards you can send encrypted emails to that person.

Second:

With that I didn't have to think about it.

But it fills that addressbook with a lot of addresses.
So be sure to clean them out regularly :-)

> I can see an error in the Sogo Log when trying to send an encrypted
> email: [ERROR] <0x0x55930452e7a0[UIxMailRenderingContext]> found no
> viewer for MIME type: application/pkcs7-signature


But there is no rendering part for that (and should not be).

> Unfortunately I can't find a resolution online so I will give it a last
> try here.
>

Hope that clarifies it a bit.


Kind regards,
Christian Mack

--
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung IT-Dienste Forschung, Lehre, Infrastruktur
78457 Konstanz
+49 7531 88-4416

Therefore you have to add the addresses of people you want to communicate encrypted with into that first. For convenience I had set the option "When sending email, add unknown recipients to my" "personal addressbook" in my testsystem. As I usually only send emails signed, they were added on those instances, providing the entry and public keys when I needed them. That error is normal, as SOGo tries to display the signature attachment while displaying a signed email.

smime.p7s
Description: Kryptografische S/MIME-Signatur