Re: [SOGo] SMIME E-Mail Encryption

[Luke Haase]

Hello Christian

Thank you for your response.





Is there an option that I forgot to set?

Regards,

Luke Haase
System Engineer

--
ender informatics gmbh
rietlistrasse 1
ch 6345 neuheim
+41 41 755 00 88
luke.ha...@ender-informatics.ch
www.ender-informatics.ch

I've tried it how you described it in your mail but it still doesn't save the S/MIME Certificate of the sender. I tried it with the automatic storing of the email in the address book and I also tested manually adding the contact to the address book. It still doesn't store the public key when I open a signed email of the sender. I still have the same error as before. Am 14.11.2024 um 08:57 schrieb Christian Mack (christian.m...@uni-konstanz.de):

Hello

Am 12.11.24 um 12:39 schrieb Luke Haase (luke.ha...@ender-informatics.ch):

Hello Everyone

We have Sogo installed on a Debian 12 System for a customer of mine.

Now the Customer wants to send encrypted mails via the Sogo Web interface. Installing the S/MIME certificate and sending signed emails works without an issue. Encrypting those emails hovever doesn't. Encrypting the mail doesn't even work, when replying to a encrypted mail. We always get the error: "cannot encrypt email without recipient certificate". According to the documentation sogo should automatically save the sender certificate and encrypt the mail (https://www.sogo.nu/files/docs/ SOGoInstallationGuide.html#_smime_support_in_sogo)

I also can't find an option to manually add the public key to a contact.

First:
SOGo uses only the personal addressbook in order to store public keys.

Then open a signed email from that person.
Afterwards you can send encrypted emails to that person.

Second:

With that I didn't have to think about it.

But it fills that addressbook with a lot of addresses.
So be sure to clean them out regularly :-)

> I can see an error in the Sogo Log when trying to send an encrypted
> email: [ERROR] <0x0x55930452e7a0[UIxMailRenderingContext]> found no
> viewer for MIME type: application/pkcs7-signature


But there is no rendering part for that (and should not be).

> Unfortunately I can't find a resolution online so I will give it a last
> try here.
>

Hope that clarifies it a bit.


Kind regards,
Christian Mack

Therefore you have to add the addresses of people you want to communicate encrypted with into that first. For convenience I had set the option "When sending email, add unknown recipients to my" "personal addressbook" in my testsystem. As I usually only send emails signed, they were added on those instances, providing the entry and public keys when I needed them. That error is normal, as SOGo tries to display the signature attachment while displaying a signed email.

smime.p7s
Description: Kryptografische S/MIME-Signatur