Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make S/MIME algorithms configurable (signature algorithm for signing, key encapsulation and cipher algorithms for encryption) #498

Closed
asariev opened this issue Mar 19, 2024 · 4 comments
Assignees
Milestone

Comments

@asariev
Copy link

asariev commented Mar 19, 2024

No description provided.

@bbottema bbottema added this to the 8.7.0 milestone Mar 19, 2024
@bbottema bbottema self-assigned this Mar 19, 2024
bbottema added a commit that referenced this issue Mar 20, 2024
bbottema added a commit that referenced this issue Mar 20, 2024
…n the defaults from smime-util itself, so we can start replacing it with our own values
bbottema added a commit that referenced this issue Mar 20, 2024
…r encryption algorithms, and actually use it. Added tests to test some variations, including both RSA (already present) and DSA (added new key for this in pkcs store).
@bbottema bbottema changed the title Configurable to set CMSAlgorithm.AES256_CBC instead of CMSAlgorithm.DES_EDE3_CBC in SmimeUtil.class Make S/MIME algorithms configurable (signature algorithm for signing, key encapsulation and cipher algorithms for encryption) Mar 20, 2024
@bbottema
Copy link
Owner

I think it was about time this was configurable. I'm almost done with it.

bbottema added a commit that referenced this issue Mar 20, 2024
@bbottema
Copy link
Owner

Feature released in 8.7.1.

Please refer to the documentation on signing and encrypting with S/MIME. You can now set any signature algorithm when signing and any key encapsulation algorithm and cipher algorithm when encrypting. Enjoy!

@bbottema
Copy link
Owner

To give a specific example of your request:

Email emailToBeEncrypted = currentEmailBuilder
    .(..)
    .encryptWithSmime(SmimeEncryptConfig.builder()
		.x509Certificate(yourCertificate)
		.cipherAlgorithm("AES256_CBC")
		.build())
    .buildEmail();

@asariev
Copy link
Author

asariev commented Mar 21, 2024 via email

bbottema added a commit that referenced this issue Mar 22, 2024
bbottema added a commit that referenced this issue Mar 22, 2024
…n the defaults from smime-util itself, so we can start replacing it with our own values
bbottema added a commit that referenced this issue Mar 22, 2024
…r encryption algorithms, and actually use it. Added tests to test some variations, including both RSA (already present) and DSA (added new key for this in pkcs store).
bbottema added a commit that referenced this issue Mar 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants