Dovecot encryption plugin
- Ensure GCC and the header files for libcrypto (OpenSSL) and libxcrypt are installed.
make dovecot-installto download and build dovecot 2.2.21 in a sub-directory. It's a local installation and your system wont be affected.
make allto compile the plugin.
Find the plugin at dovecot/target/lib/dovecot/lib18_scrambler_plugin.so.
Ensure the ruby version manager is installed.
Install ruby version 2.1.x with command
rvm install 2.1.
Install the bundler gem with
gem install bundler.
Install the gem bundle with
All tests are written with RSpec and can be run with
make spec-all or
bundle exec rake spec:integration
In order to run, the plugin needs the following configuration values (via the dovecot environment).
scrambler_plain_passwordThe plain user password. It's used to derive the hashed password to decrypt the private key.
scrambler_public_keyThe public key of the user. Formatted as pem.
scrambler_private_keyThe encrypted private key of the user. Formatted as pem.
scrambler_private_key_saltThe salt of the hashed password that has been used to encrypt the private key.
scrambler_private_key_iterationsThe number of iterations of the hashed password that has been used to encrypt the private key.
A configuration example can be found at
The migration of unencrypted mailboxes has to be done by a separate tool and is not part of this project.