Re: [ENHANCEMENT] Doveadm HTTP API and the mail-crypt plugin

On 29/06/2021 22:58 Kevin N. kevin@notscheduled.eu wrote:

Hello everybody,

I was wondering, are there any plans for the near future to include the mail-crypt plugin related functions, like changing the user key password, into the doveadm http api?

It would probably be possible to implement it in a more secure way than any other external ad-hoc solution. Wouldn't it?

Cheers,

K.

It is already there, you just need to load mail_crypt plugin.

{"command":"mailboxCryptokeyGenerate", "parameters":[
	{"name":"allUsers","type":"boolean"},
	{"name":"socketPath","type":"string"},
	{"name":"user","type":"string"},
	{"name":"transFlags","type":"integer"},
	{"name":"userFile","type":"string"},
	{"name":"userKeyOnly","type":"boolean"},
	{"name":"reEncryptBoxKeys","type":"boolean"},
	{"name":"force","type":"boolean"},
	{"name":"mailbox","type":"string"}
]},
{"command":"mailboxCryptokeyList", "parameters":[
	{"name":"allUsers","type":"boolean"},
	{"name":"socketPath","type":"string"},
	{"name":"user","type":"string"},
	{"name":"transFlags","type":"integer"},
	{"name":"userFile","type":"string"},
	{"name":"userKey","type":"boolean"},
	{"name":"mailbox","type":"string"}
]},
{"command":"mailboxCryptokeyExport", "parameters":[
	{"name":"allUsers","type":"boolean"},
	{"name":"socketPath","type":"string"},
	{"name":"user","type":"string"},
	{"name":"transFlags","type":"integer"},
	{"name":"userFile","type":"string"},
	{"name":"userKey","type":"boolean"},
	{"name":"mailbox","type":"string"}
]},
{"command":"mailboxCryptokeyPassword", "parameters":[
	{"name":"allUsers","type":"boolean"},
	{"name":"socketPath","type":"string"},
	{"name":"user","type":"string"},
	{"name":"transFlags","type":"integer"},
	{"name":"userFile","type":"string"},
	{"name":"clearPassword","type":"boolean"},
	{"name":"askNewPassword","type":"boolean"},
	{"name":"newPassword","type":"string"},
	{"name":"askOldPassword","type":"string"},
	{"name":"oldPassword","type":"string"}
]}

Aki