Re: [otrs] Can not open S/MIME encrypted E-Mails

Hey Kevin, strange thing. Don't know if you wrote it already, but are you able to send encrypted mails from OTRS? Kind regards, Matthias T-SYSTEMS INTERNATIONAL GMBH Telekom Security Matthias Terlinde Cyber Defense Operations Bonner Talweg 100 53113 Bonn +49 228 181-73771 (fixed) +49 160 3003113 (mobile) E-Mail: matthias.terlinde@t-systems.com Internet: www.t-systems.com Let’s power higher performance Die gesetzlichen Pflichtangaben finden Sie unter: www.t-systems.com/pflichtangaben GROSSE VERÄNDERUNGEN FANGEN KLEIN AN – RESSOURCEN SCHONEN UND NICHT JEDE E-MAIL DRUCKEN.

-----Ursprüngliche Nachricht----- Von: Kevin Dehmlow Gesendet: Dienstag, 9. Juli 2019 09:06 An: Terlinde, Matthias ; otrs@lists.otrs.org Betreff: Re: [otrs] Can not open S/MIME encrypted E-Mails

Hi Matthias,

...

Have you updated to 6.0.19 just recently and maybe copied the certificates with the root user? The otrs.SetPermissions.pl script sometimes misses not standard folder or I copied the certificates after that. I have checked the permissions of the certificates and the corresponded directories. They are correctly set:

...

otrs@otrs:/opt/otrs$ ls -l ssl/ total 8 drwxrwsr-x 2 otrs www-data 4096 Jul  8 10:23 certs drwxrwsr-x 2 otrs www-data 4096 Jul  8 10:23 private

...

otrs@otrs:/opt/otrs$ ls -l ssl/* ssl/certs: total 8 -rw-rw---- 1 otrs www-data 2385 Jul  8 10:23 XXXXXX.0 -rw-rw---- 1 otrs www-data 1968 Jun 26 07:55 XXXXX.0

ssl/private: total 16 -rw-rw---- 1 otrs www-data 1928 Jul  8 10:23 XXXXXX.0 -rw-rw---- 1 otrs www-data   12 Jul  8 10:23 XXXXXX.0.P -rw-rw---- 1 otrs www-data 1834 Jun 26 07:55 XXXXXX.0 -rw-rw---- 1 otrs www-data    8 Jun 26 07:55 XXXXXX.0.P

Kind regards, Kevin

Am 08.07.19 um 15:10 schrieb Matthias.Terlinde@t-systems.com:

...

Hey Kevin,

I think we had this problem once, because we had an ACL issue. Make sure the otrs user and the www-data group have read access to it. Sometimes, _too many_ privileges can produce issues as well.

Have you updated to 6.0.19 just recently and maybe copied the certificates with the root user? The otrs.SetPermissions.pl script sometimes misses not standard folder or I copied the certificates after that.

Hope that helps.

Kind regards, Matthias

T-SYSTEMS INTERNATIONAL GMBH Telekom Security Matthias Terlinde Cyber Defense Operations Bonner Talweg 100 53113 Bonn +49 228 181-73771 (fixed) +49 160 3003113 (mobile) E-Mail:matthias.terlinde@t-systems.com Internet:www.t-systems.com

Let's power higher performance

Die gesetzlichen Pflichtangaben finden Sie unter:www.t- systems.com/pflichtangaben

GROSSE VERÄNDERUNGEN FANGEN KLEIN AN - RESSOURCEN SCHONEN UND NICHT JEDE E-MAIL DRUCKEN.