Item13221: s/mime wizard broken

pencil
Priority: Urgent
Current State: No Action Required
Released In: n/a
Target Release:
Applies To: Extension
Component: Configure
Branches: master
Reported By: MichaelDaum
Waiting For:
Last Change By: GeorgeClark
Btw isn't it a bit of a security problem storing private keys in {DataDir} ? Wouldn't {Workingdir} be a better place?

-- MichaelDaum - 20 Jan 2015

{DataDir} is documented, in InstallationGuide, as being "secure from public access".

-- JanKrueger - 20 Jan 2015

The buttons calling the s/mime wizards should go onto the "Certificate Management" tab.

The "Certificate Management" tab can be hidden when s/mime email is disabled.

-- MichaelDaum - 20 Jan 2015

I agree that {DataDir} is the wrong place. Quite aside from anything else, it doesn't even exist if you are using a DBI based store. Mind you, it's hard to be more secure than "does not exist" wink

{WorkingDir} (or more accurately, a subdir thereof) is the right place.

-- CrawfordCurrie - 20 Jan 2015

I believe that the wizard is now working, regardless of storage location. Setting to No Action,

-- GeorgeClark - 15 Dec 2015
 
Topic revision: r6 - 15 Dec 2015, GeorgeClark
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy