mirror of
https://github.com/the-djmaze/snappymail.git
synced 2026-08-30 20:49:20 +03:00
* Cleanup OpenPgpImportPopupView code * update polish translation * small fix * Added Import S/MIME certificate popup And much better handling of the sign and encrypt options * bugfix: store in Passphrases * Resolve #1448 * pre-verify S/MIME opaque signed messages so we have a body to view * Fix timestampToString() for future dates * Move php8.php to /app/libraries/polyfill/ * Improved Settings handling to prevent bugs in outer code * Changed AbstractProvider::IsActive() to be abstract * Example for #1449 * bugfix: previous IsActive() commit * OpenSSL required due to S/MIME * Use get_debug_type() instead of gettype() * update polish translation * Make all Enumerations classes abstract * Added search functionality in Admin -> Config And removed the unused ['capa']['quota'] * Cleanup Quota handling * OPEN_PGP should be OPENPGP as it is one word * Improve Capa handling * Resolve #1451 * Bugfix TypeError: b64Encode(...).match(...) is null * Small StorageType change * Bugfix: mailvelope editor failed * Bugfix: undefined getMailvelopePrivateKeyFor() * Bugfix: MIME parser RegExp didn't escape `boundary` which caused issues * Return detailed info on PgpImportKey * Show GnuPG verify error * Sort PGP keys by email and id * Sort S/MIME certificates on emailAddress else validTo * S/MIME import from signature use `BEGIN PKCS7` * Optionally use existing private key to generate S/MIME certificate * Chaned some error_log() to MailSo Logger() * Force reload of S/MIME certificates list on import * Make better use of SnappyMail\SensitiveString * Fix view PGP key button * Mask all POST data that has a key which contains `pass` * v2.35.1 * Resolve #1455 * Improved GnuPG error handling * Update pt/pt-PT translation * update Polish translation * Drop support for gnupg pecl extension as it fails with "no passphrase" issues * Resolve #1456 * Resolve #1458 * v2.35.2 * fix changelog * Resolve #1461 * Update pt/pt-PT translation * compact-composer plugin v1.0.0 * Resolve #1462 * Fix decrypt error message * `new Error()` to `Error()` * Resolve #1463 * Show url for #1466 * Simplify SignMe/Remember me code * Simplify language Notifications * Bugfix: SetPassword expects \SnappyMail\SensitiveString * https://github.com/the-djmaze/snappymail/issues/1450#issuecomment-1972147950 * improve: fire the 'squire2-toolbar' event after more props are added * improve: add dark theme support and use 'button' element as menu trigger for consistent styling * fix: use compact template in non-destructive way (do not replace the PopupsCompose template if a different wysiwyg is used) * Update admin.json * Update user.json * CSS rainloopErrorTip location * Improved error handling on PGP and S/MIME decrypt * KnockoutJS remove unused `beforeRemove` * KnockoutJS drop unused `as` * KnockoutJS simplify renderMode because only 1 option is used * KnoutJS cleanup templating.js a bit * KnockoutJS drop unused `bindingRewriteValidators` * KnockoutJS drop the twoWayBindings code * KnockoutJS simplify virtualElements binding check * KnockoutJS simplify applyBindingsToNodeInternal * KnockoutJS use Array.isArray * KnockoutJS drop alias `textinput` for `textInput` * KnockoutJS scramble `createChildContext` * KnockoutJS scramble `controlsDescendantBindings` * KnockoutJS scramble `exportDependencies` * KnockoutJS drop unused `throttleEvaluation` * KnockoutJS drop unused `valueAllowUnset` * KnockoutJS drop unused `templateNodes` * KnockoutJS drop unused `optionsCaption` * KnockoutJS drop unused `dontLimitMoves` * KnockoutJS drop unused `uniqueName` * KnockoutJS drop IE leftovers * KnockoutJS drop unused `preprocess` * KnockoutJS drop unused "disposeWhenNodeIsRemoved" and "disposeWhen" * KnockoutJS don't scramble exportDependencies. controlsDescendantBindings, createChildContext * KnockoutJS drop unused `$parentContext` and `$parents` * KnockoutJS drop unused `$rawData` * Knockoutjs built latest * KnockoutJS drop unused template options `nodes`, `if`, `ifnot` * KnockoutJS use more Array.isArray * KnockoutJS cleanup code a bit * KnockoutJS primitiveTypes can just be checked with Object() * KnockoutJS rebuilt * Verify S/MIME signed automatically and log Exception * Automatically verify PGP and S/MIME signed messages * `new Error` to `Error` * By default throw AccountNotAllowed as confused in #1478 * GPG use pinentries for decrypt, sign and export * Better GPG error handling * GPG show error on view/export * OpenPGP fix handling of importing keys * Make "verify signatures automatically" optional, as it requires more IMAP fetching * S/MIME don't post identity key and certificate, just fetch from server * Show error to old browsers, instead of crashing * Automatically verify S/MIME decrypted signed message --------- Co-authored-by: the-djmaze <> Co-authored-by: tinola <tinola@poczta.onet.pl> Co-authored-by: Maarten <3752035+the-djmaze@users.noreply.github.com> Co-authored-by: lmperfis <joint.striker@gmail.com> Co-authored-by: Sergey Mosin <sergey@srgdev.com> Co-authored-by: hguilbert <51283484+hguilbert@users.noreply.github.com>
145 lines
3.9 KiB
JavaScript
145 lines
3.9 KiB
JavaScript
import { SettingsCapa, SettingsGet } from 'Common/Globals';
|
|
//import { staticLink } from 'Common/Links';
|
|
|
|
//import { showScreenPopup } from 'Knoin/Knoin';
|
|
|
|
//import { EmailModel } from 'Model/Email';
|
|
//import { OpenPgpKeyModel } from 'Model/OpenPgpKey';
|
|
|
|
import { GnuPGUserStore } from 'Stores/User/GnuPG';
|
|
import { OpenPGPUserStore } from 'Stores/User/OpenPGP';
|
|
import { MailvelopeUserStore } from 'Stores/User/Mailvelope';
|
|
|
|
import Remote from 'Remote/User/Fetch';
|
|
|
|
export const
|
|
BEGIN_PGP_MESSAGE = '-----BEGIN PGP MESSAGE-----',
|
|
// BEGIN_PGP_SIGNATURE = '-----BEGIN PGP SIGNATURE-----',
|
|
// BEGIN_PGP_SIGNED = '-----BEGIN PGP SIGNED MESSAGE-----',
|
|
// BEGIN_PGP_PUBLIC_KEY = '-----BEGIN PGP PUBLIC KEY BLOCK-----',
|
|
// END_PGP_PUBLIC_KEY = '-----END PGP PUBLIC KEY BLOCK-----',
|
|
|
|
PgpUserStore = new class {
|
|
init() {
|
|
if (SettingsCapa('OpenPGP') && window.crypto && crypto.getRandomValues) {
|
|
rl.loadScript(SettingsGet('StaticLibsJs').replace('/libs.', '/openpgp.'))
|
|
// rl.loadScript(staticLink('js/min/openpgp.min.js'))
|
|
.then(() => this.loadKeyrings())
|
|
.catch(e => {
|
|
this.loadKeyrings();
|
|
console.error(e);
|
|
});
|
|
} else {
|
|
this.loadKeyrings();
|
|
}
|
|
}
|
|
|
|
loadKeyrings(identifier) {
|
|
MailvelopeUserStore.loadKeyring(identifier);
|
|
OpenPGPUserStore.loadKeyrings();
|
|
GnuPGUserStore.loadKeyrings();
|
|
}
|
|
|
|
/**
|
|
* @returns {boolean}
|
|
*/
|
|
isSupported() {
|
|
return !!(OpenPGPUserStore.isSupported() || GnuPGUserStore.isSupported() || window.mailvelope);
|
|
}
|
|
|
|
/**
|
|
* @returns {boolean}
|
|
*/
|
|
isEncrypted(text) {
|
|
return 0 === text.trim().indexOf(BEGIN_PGP_MESSAGE);
|
|
}
|
|
|
|
importKey(key, gnuPG, backup) {
|
|
if (gnuPG || backup) {
|
|
Remote.request('PgpImportKey',
|
|
(iError, oData) => {
|
|
if (gnuPG && oData?.Result/* && (oData.Result.imported || oData.Result.secretimported)*/) {
|
|
GnuPGUserStore.loadKeyrings();
|
|
}
|
|
iError && alert(oData.ErrorMessage);
|
|
}, {
|
|
key, gnuPG, backup
|
|
}
|
|
);
|
|
}
|
|
OpenPGPUserStore.importKey(key);
|
|
}
|
|
|
|
/**
|
|
* Checks if verifying/encrypting a message is possible with given email addresses.
|
|
* Returns the first library that can.
|
|
*/
|
|
hasPublicKeyForEmails(recipients) {
|
|
if (recipients.length) {
|
|
if (GnuPGUserStore.hasPublicKeyForEmails(recipients)) {
|
|
return 'gnupg';
|
|
}
|
|
if (OpenPGPUserStore.hasPublicKeyForEmails(recipients)) {
|
|
return 'openpgp';
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
async decrypt(message) {
|
|
const armoredText = message.plain();
|
|
if (!this.isEncrypted(armoredText)) {
|
|
throw Error('Not armored text');
|
|
}
|
|
|
|
// Try OpenPGP.js
|
|
if (OpenPGPUserStore.isSupported()) {
|
|
const sender = message.from[0].email;
|
|
let result = await OpenPGPUserStore.decrypt(armoredText, sender);
|
|
if (result) {
|
|
return result;
|
|
}
|
|
}
|
|
|
|
// Try Mailvelope (does not support inline images)
|
|
return (await MailvelopeUserStore.decrypt(message))
|
|
// Or try GnuPG
|
|
|| GnuPGUserStore.decrypt(message);
|
|
}
|
|
|
|
async verify(message) {
|
|
const signed = message.pgpSigned(),
|
|
sender = message.from[0].email;
|
|
if (signed) {
|
|
// OpenPGP only when inline, else we must download the whole message
|
|
if (!signed.sigPartId && OpenPGPUserStore.hasPublicKeyForEmails([sender])) {
|
|
return OpenPGPUserStore.verify(message);
|
|
}
|
|
if (GnuPGUserStore.hasPublicKeyForEmails([sender])) {
|
|
return GnuPGUserStore.verify(message);
|
|
}
|
|
// Mailvelope can't
|
|
// https://github.com/mailvelope/mailvelope/issues/434
|
|
}
|
|
}
|
|
|
|
getPublicKeyOfEmails(recipients) {
|
|
if (recipients.length) {
|
|
let result = {};
|
|
recipients.forEach(email => {
|
|
OpenPGPUserStore.publicKeys().forEach(key => {
|
|
if (key.emails.includes(email)) {
|
|
result[email] = key.armor;
|
|
}
|
|
});
|
|
GnuPGUserStore.publicKeys.map(async key => {
|
|
if (!result[email] && key.emails.includes(email)) {
|
|
result[email] = await key.fetch();
|
|
}
|
|
});
|
|
});
|
|
return result;
|
|
}
|
|
return false;
|
|
}
|
|
};
|