• NAME
  • DESCRIPTION
    • GnuPG
    • SMIME

NAME

RT::Interface::Email::Auth::Crypt - decrypting and verifying protected emails

DESCRIPTION

This mail plugin decrypts and verifies incoming emails. Supported encryption protocols are GnuPG and SMIME.

This code is independant from code that encrypts/sign outgoing emails, so it's possible to decrypt data without bringing in encryption. To enable it put the module in the mail plugins list:

    Set(@MailPlugins, 'Auth::MailFrom', 'Auth::Crypt', ...other filters...);

Auth::Crypt will not function without Auth::MailFrom listed before it.

GnuPG

To use the gnupg-secured mail gateway, you need to do the following:

Set up a GnuPG key directory with a pubring containing only the keys you care about and specify the following in your SiteConfig.pm

    Set(%GnuPGOptions, homedir => '/opt/rt4/var/data/GnuPG');

Read also: RT::Crypt and RT::Crypt::GnuPG.

SMIME

To use the SMIME-secured mail gateway, you need to do the following:

Set up a SMIME key directory with files containing keys for queues' addresses and specify the following in your SiteConfig.pm

    Set(%SMIME,
        Enable => 1,
        OpenSSL => '/usr/bin/openssl',
        Keyring => '/opt/rt4/var/data/smime',
        CAPath  => '/opt/rt4/var/data/smime/signing-ca.pem',
        Passphrase => {
            'queue.address@example.com' => 'passphrase',
            '' => 'fallback',
        },
    );

Read also: RT::Crypt and RT::Crypt::SMIME.