Hello,

The plugin appears to be encrypting but not applying the signing key pair to outgoing emails. I can help troubleshoot this if someone can point me in the right direction on what might be causing the problem.

Thank you,

I’m now using WordPress 6.3 and this plugin only appears to be sending messages with keys generated within the plugin. The problem is those keys are not able to be uploaded to apps like Flowcrypt to decode. When I attempt to configure the plugin with keys from GPG Keychain (Mac) or Flowcrypt it no longer sends messages.

Are other people having this problem?

I’m hoping @meitar or someone can help sort out an issue I’ve been experiencing that seems to have gotten worse over time regarding formatting of encrypted emails sent using this plugin. It seems the messages are encrypted & signed (with the signature encapsulated within the encrypted message payload) inline vs. as MIME attachments. I believe this is leading to issues where the formatting is either off or gets mangled in transit. The result is clients have difficulty parsing the message and either fail to decrypt the message or if they manage to decrypt the message it shows up as blank text and is flagged as “partly encrypted” & “partly signed”. The latter seems to happen exclusively with in the case of GPGTools+GPGMail+Mail.app on macOS, other clients simply show the encrypted payload and are unable or unwilling to decrypt it automatically.

I have managed to copy & paste the encrypted message from the raw content and then re-format it to the point of being able to decrypt it manually on the command line, but this solution does not work for non-technical users. I’m hoping @meitar or someone can help sort out what is happening here and suggestion a way to address it. Thanks in advance.

EDIT: to clarify this “seems to have gotten worse over time” refers to the fact that I used to be able to decrypt these messages in past versions of macOS/Mail.app/GPGTools+GPGMail and they would still get flagged as “partly encrypted” & “partly signed”, but with the latest versions of GPGTools+GPGMail on macOS Monterey (12.6.1) I now get a blank message with those same flagged encryption & signature details.

• This topic was modified 1 year, 10 months ago by s0medude.

Hi there

Why is there being added whitespace and &nbsp and only one line on private key, after Regenerate?

When trying to decrypt, it will make error on all clients now. Why is that?

I know this topic shows up in the support section for this plugin, but no real help has been given. I have a multisite environment where this plugin is activated on a sub-site, not network-wide. I have added the PGP public key in the user’s profile on the sub-site and added the signing keypair to the plugin settings. The email gets signed but the text of the message is clearly readable when I look at the email on my phone. The only place where I have the private key installed is on my desktop under Outlook (full program, not accessed through a browser). I used Kleopatra to generate my private/public PGP keys. I have regenerated the keys several times to no avail.

We are using WordPress 6. Any additional help would be most appreciated

I am attempting to get an encrypted email sent with the Forminator plugin to be auto decrypted in Thunderbird 91.9.0.

I receive the encrypted email sent from my website. It’s using the public key generated by Thunderbird OpenPGP Key manager. The Private Key is installed for that email address.
However I get this message ate the top (twice):
“Only a subset of this message was encrypted using OpenPGP.
The readable parts of the message that are already shown were not encrypted.
If you click the decrypt button, the contents of the encrypted parts will be shown.”

Clicking the button does not decrypt the message.

However: If I send a test message from the user account page it appears to work fine, and the message is automatically decrypted by Thunderbird.

Any ideas?

I am having an odd error that I can’t find any information on so hoping I can get some help here. I have setup SMIME encryption on the wordpress accounts with this plugin. The test messages work perfectly. They are encrypted and Outlook automatically decrypts them with the imported keys as you would expect. The issue we are having is that when a form is submitted, the main reason that this was set up for, the email is encrypted with contents being added as the attachment smime.p7m, but isn’t flagged as being encrypted. So Outlook (both desktop and online versions) just shows the email as having no content, but with an attachment that it won’t let you download, access, or even see the file name or type of. If I open the email in a different email client such as Gmail’s online client it doesn’t show signs that the email is encrypted, but I can see the smime.p7m attachment, download it, and use my private key to manually decrypt it so I know the actual encryption is happening successfully. I just need to know if there is anything I need to do to get the form submissions to be flagged as encrypted so it functions properly, or even if there is something I can do after the email is sent to add the smime flag so that email clients will recognize it.

Dear Dev! first of all thanks for this tool! it is the one that exist for this whole problem!

But i cannot implement my Swisssign Email ID Cert that i can download the private and public cert .. i have a code with —–BEGIN CERTIFICATE—– … —–END CERTIFICATE—–

But when someone order from woocmmerce it not send it with a sign mail (this email is signed..)

Hi im having problems setting up a secure email from my webste contact form.

On activating ‘Wp PGP Encrypted Emails’ I get the following warnings

Warning: Invalid argument supplied for foreach() in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php on line 1425

Warning: Invalid argument supplied for foreach() in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php on line 1447

Warning: Invalid argument supplied for foreach() in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php on line 1425

Warning: Invalid argument supplied for foreach() in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php on line 1447

Warning: Cannot modify header information – headers already sent by (output started at /homepages/41/[redacted]/htdocs/clickandbuilds/Welcome/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php:1425) in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-admin/includes/misc.php on line 1310

Warning: Cannot modify header information – headers already sent by (output started at /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php:1425) in /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/wp-admin/admin-header.php on line 9

### Begin System Info (Generated 2022-01-10 09:35:05) ###
———— SITE INFO
Site URL: [redacted]
Home URL: [redacted]
Multisite: No

———— USER BROWSER
Platform: Windows
Browser Name: Firefox
Browser Version: 95.0

———— WORDPRESS CONFIG
WP Version: 5.8.3
Language: en_GB
Permalink Structure: /%postname%/
Active Theme: Customizr 4.4.20
Show On Front: page
Page On Front: Home (#191)
Page For Posts: Unset
ABSPATH: /homepages/41/[redacted]/htdocs/clickandbuilds/[redacted]/
WP_DEBUG: Disabled
WP Memory Limit: 40MB

———— NIMBLE CONFIGURATION
Version: 3.1.32
Upgraded From: None
Started With: 3.1.32

———— MU PLUGINS
1&1 Product Subdomain: 1.1.0

———— WP ACTIVE PLUGINS
Advanced Editor Tools (previously TinyMCE Advanced): 5.6.0
Antispam Bee: 2.10.0
Broken Link Checker: 1.11.16
IONOS Assistant: 7.1.4
Kadence Blocks – Gutenberg Blocks for Page Builder Features: 2.1.19
Limit Login Attempts Reloaded: 2.23.2
Nimble Page Builder: 3.1.32
Real Cookie Banner (Free): 2.12.0
Statify: 1.8.3
The GDPR Framework: 1.0.48
WPForms Lite: 1.7.2
WP PGP Encrypted Emails: 0.8.0

———— WP INACTIVE PLUGINS
Cookies and Content Security Policy: 1.99

———— WEBSERVER CONFIG
PHP Version: 7.4.25
MySQL Version: 5.5.5
Webserver Info: Apache
Write/Read permissions: OK

———— PHP CONFIG
Memory Limit: 1024M
Upload Max Size: 128M
Post Max Size: 128M
Upload Max Filesize: 128M
Time Limit: 30
Max Input Vars: 1000
Display Errors: On (1)
PHP Arg Separator: &
PHP Allow URL File Open: 1

### End System Info ###

Using wp-forms; entering plain text into form is being sent as HTML. Is there a setting for sending in plain text only?

The textarea gets encrypted but the files does not. Is there a special configuration for this or is it not simply possible to do?

I have this working except for the signature.
In Settings->Email Encryption
I generate a key pair and download the public key.

When I try to import it into Thunderbird I get the error “Importing Public Key Failed.”

Any ideas?

Hi,

I would like to encrypt mails generated by Contact Form 7. The issue is that the receiving e-mail account for CF7 e-mails is not the same as the admin e-mail of WP. Is there a workaround for this?
I am happy to use PGP or S/MIME, in case that makes any difference, and I’m also happy to let go of encryption for my WP Admin E-Mail, if I can move it to the receiving CF7 E-Mail Account.

Hi,

I use Contact Form 7 plugin (CF7) in several forms on a website. It works well, even with foreign special characters (éèà?ù …), in text or HTML mode.
But when I want to encrypt email, all these char are badly encoded.

I did not find how to send UTF-8 encoded email (from CF7). The only solution I found is decoding UTF-8 chars while encrypt the message.
Do to so, I modified the line 1464 of ‘wp-pgp-encrypted-emails.php’ file :
$smime_data = apply_filters( 'smime_encrypt', utf8_decode($message), $headers, $pub_cert );

Is there a better way to send UTF-8 encoded email ?

Hi
I’ve tried two Email plugins for WP that I want to use to send out automatic email notifications to employees when a new post is added. The two plugins are “Mailpoet 3” and “Email Subscribers & Newsletters”. The latter automatically detects my S/MIME certificate and sends out encrypted email notifications. However, I cannot get this to work with Mailpoet – any ideas?
Regards
Jan

Since using this plugin umlauts are no longer displayed correctly. Is there a way to send e-mails UTF8-encoded?

I am curious if the developer has given thought to updating the plugin to try and refresh the public keys associated with each user in the database to handle expiring/expired keys? Currently I believe it is up to the user/admin to ensure they update their WP profile in this case. It would be nice if there was an option to have the plugin trigger a cron job periodically that would try and refresh all the public keys it finds against 1 or more (admin configurable) public key servers or other methods like WKD or LDAP. It might also be nice to also have an admin and/or user-level control to try to refresh individual user keys. To reduce the load this could generate for larger installations I might also recommend an option to only try to refresh keys that meet certain criteria (e.g. already expired or expiring within a certain time period that could be admin configurable).

• This topic was modified 3 years, 3 months ago by s0medude. Reason: clarification

Dear Meitar,

thanks a lot for this great plugin.
At the moment I’m creating a new website and I like to keep personal data what they should be, personal and private, so your plugin was my #1 choice to encrypt submitted forms.
While testing your plugin I recognized that it does not work with keys which were created with ECC (Elliptic Curve Cryptography), RSA works great.
I guess it has something to do with openpgp library you use for your plugin, so maybe my short information above helps someone if an error occurs when using an ECC keypair.

By the way, I don’t know if you’ve already read my post in an other support thread regarding the compatibility with PHP 8.0 (-> https://www.ads-software.com/support/topic/wordpress-website-breaks-with-a-php-fatal-error/#post-14339368).
Your plugin should work with the new openpgp library, there was just a little “error” in your file (see mentioned posting).

Thanks again for everything!

Hi,
I get this error message when I click to Download Public Key on the User profile page
https://3d-imaging.co.uk/general/Downloading-PGP-Public-Key-Problem.jpg

Please could you help?

Hello!

I’m getting this error when I activate the plugin:

2021/03/08 21:23:13 [error] 892#892: *1854 FastCGI sent in stderr: "PHP message: PHP Fatal error: Array and string offset access syntax with curly braces is no longer supported in /home/REDACTED/public_html/wp-content/plugins/wp-pgp-encrypted-emails/vendor/singpolyma/openpgp-php/lib/openpgp.php on line 125" while reading response header from upstream, client: REDACTED, server: REDACTED, request: "GET /wp-admin/plugins.php?activate=true&plugin_status=all&paged=1&s= HTTP/1.1", upstream: "fastcgi://unix:/opt/alt/php-fpm80/usr/var/sockets/platadev.sock:", host: "REDACTED", referrer: "https://REDACTED/wp-admin/plugins.php"

Dear Meitar,
it is probably hard to reconstruct, but maybe you know already a quick answer.

I would like to encrypt my wordpress mails with a S/MIME certificate and on my local machine it is working, but unfortunately not on the production server.
I tried to find the difference between both environments, and cause you wrote “S/MIME support requires the OpenSSL PHP extension.” I finally checked this:

My local environment:
OpenSSL support enabled
OpenSSL Library Version OpenSSL 1.1.1d 10 Sep 2019
OpenSSL Header Version OpenSSL 1.1.1g 21 Apr 2020

Hoster:
OpenSSL support enabled
OpenSSL Library Version OpenSSL 1.1.1d 10 Sep 2019
OpenSSL Header Version OpenSSL 1.1.1d 10 Sep 2019

The other specs should not be a problem:
My local environment: WP 5.6.1, your plugin 0.7.4, PHP7.2
Hoster: WP 5.6.1, your plugin 0.7.4, PHP7.3

I will try to ask the webhoster to update the extension, but it is a big, not so userfriendly company.
But maybe you already know, if the older header version could be the reason? Or that it should work and I have to go on searching?

I test always with your built-in test mail.

btw. encryption via pgp key works on both environments like a charm.

thank you!

Just installed the plugin, version 0.7.4. Running WordPress version 5.6.1. PHP version 7.4.11.

Only the original Admin has a PGP key field. Second Admin does not. Subscriber and Editor does not.

Am I correct to assume that each User should have a PGP key field?

Hello,

I like this plugin, I use it since months… but it does not have been updated since many wordpress updates and it starts to generate php warms.

I have already made a donation and would like to do it again to support the work of the developper and to invite him to update the plugin.

Olivier

Any chance to get an update to scrub the HTML tags out of the emails? I did see the post about not supporting the HTML in the encrypted emails.

I’m thinking of scrubbing all the tags out except the break tags where you replace with a line break.

Might be able to “Donate” a certain amount depending on the recommendation.

Wordpress 5.4.1
Theme: Twenty Twenty 1.4
Plugin: WP PGP Encrypted Emails 0.7.4
Users: wpadmin is the only user defined on this site

In WordPress:
Settings -> General -> Administration Email Address
is identical to
Users -> wpadmin -> Email

Setting -> Email Encryption -> Admin Email PGP Public Key
holds the PGP public key for the email address in
Users -> wpadmin -> Email

Users -> wpadmin -> Email Encryption -> Your PGP Public Key
holds the same PGP public key

Then testing it:
a)
Users -> wpadmin -> Send me a test email
results in an email sent to the email address defined for wpadmin. This email is PGP-signed but NOT PGP-encrypted.

b)
Logout -> Lost your password? -> wpadmin -> Get New Password
results in an email sent to the email address defined for wpadmin. This email is PGP-signed but NOT PGP-encrypted.

Problem:
I assumed that these emails would have been PGP-encrypted with the above stated setup. They are not. What is the error in my setup?

Hello,

I am french and have edited a wp-pgp-encrypted-emails-fr_FR.po file using plugin Loco Translate.

This file has been saved in “plugins/wp-pgp-encrypted-emails/languages/”

As you can see on the link (https://www.magic-photo-events.fr/boutique-en-ligne/mon-compte/edit-account/), some texts are still in english.

Can somebody please help me to resolve it ?

Hi,
I’m not sure if this is a bug after a WP/WC update but none of my users have a field to supply the PGP key anymore. Only the admin account has that section.

I thought it might be related to the Profile Builder Pro plugin, but the issue remains even if it’s disabled.

I’m having the issue on multiple sites.

Thanks in advance, really appreciate the plugin.

Will attachments be encrypted too?

Hi there,

great plugin. Three questions:

1) Where does the encryption takes place: on users browser locally, or after insecure data-submission to my server?

2) Yesterday I COULD NOT VERIFY signature on client (after importing public sign key into Kleopatra on windows and validating an email-body-text received signed and encrypted from a contact form of mine …).
Kleopatra said: Could not verify signature ….

3) Today after regenerating sign keys in backend, and downloading public sign key, I was not able to import it into Kleopatra. Kleopatra says: 1 zertificate checked – 0 zertificates imported.
The same result I got after reniewing keys, once and once again … What I am doing wrong?

Thanks a lot
Frank

Hi there, I’m getting this PHP error below. I’m wondering whether it is an error on my end or a bug in the plugin.

How bad is this for the functionality and security of my Site?

And how do I fix it?

Error: As shown on Query Monitor Plugin:

Level:
Warning (Suppressed)

Message:
openssl_x509_read(): supplied parameter cannot be coerced into an X509 certificate! 1

Location:
wp-content/plugins/wp-pgp-encrypted-emails/includes/class-wp-smime.php:55
openssl_x509_read()
wp-content/plugins/wp-pgp-encrypted-emails/includes/class-wp-smime.php:55
WP_SMIME::getCertificate()
wp-includes/class-wp-hook.php:287
apply_filters(‘smime_certificate’)
wp-content/plugins/wp-pgp-encrypted-emails/wp-pgp-encrypted-emails.php:393
WP_PGP_Encrypted_Emails::getAdminCert()
wp-content/plugins/wp-pgp-encrypted-emails/wp-pgp-encrypted-emails.php:554
WP_PGP_Encrypted_Emails::registerAdminSettings()
wp-includes/class-wp-hook.php:287
do_action(‘admin_init’)
wp-admin/admin.php:170

Plugin: wp-pgp-encrypted-emails