Feedback on TopicCryptPlugin

-- AlexIancu 15 May 2006

Alex, thank you very much for sharing this Plugin with the growing TWikiCommunity! There have been some discussions in the past on encrypting content; I am sure there are organizations that are looking forward to try your Plugin.

-- PeterThoeny - 15 May 2006

I made some changes to the Plugin topic, feel free to take this into the next release:

• Fixed heading level & exclusion from TOC
• Fixed <p> into %BR% (multiple <p> tags are not XHTML compliant)
• Shortened SHORTDESCRIPTION
• Fixed location of openssl

Note on security: PRIVKEY_FILE and OPENSSL_PATH should not be a preferences settings, the system could be compromized by anyone editing the Plugin topic.

-- PeterThoeny - 15 May 2006

The PRIVKEY_FILE and OPENSSL_PATH are not anymore preference settings. Thank you for your sugestion.

-- AlexIancu - 15 May 2006

I'm getting the following error after enabling TOPICCRYPTPLUGIN. Can you pls explain how to resolve this.

Can't use string ("TOPICCRYPTPLUGIN_DEFAULT_METHOD") as a HASH ref while "strict refs" in use at /home/twiki/lib/TWiki/Prefs.pm line 218.

-- AlokNarula - 16 May 2006

This Plugin is using some unofficial functions (TWiki::Access::userIsInGroup, TWiki::Store::readTopic, TWiki::Prefs::getPreferencesValue) and seems to be written for the 01 Sep 2004 TWiki version.

Alex: Please consider upgrading this Plugin so that it runs on Cairo and Dakar codebase. See details in HandlingCairoDakarPluginDifferences.

-- PeterThoeny - 16 May 2006

I'm quite new in twiki developing. I used the the debian package for installing twiki and I've seen that is based on the Cairo release. Searching for the error message i have also came to the link you gave me :). I'll read it and try to make the plugin Dakar compliant. Thanks for the reply.

-- AlexIancu - 16 May 2006

i have uploaded a new version of TopicCryptPlugin which should work both on Cairo & Dakar releases

-- AlexIancu - 17 May 2006

thanks!

-- PeterThoeny - 17 May 2006

The new TopicCryptPlugin works fine with the Dakar release. It will be great if the plugin is able to encrypt paragraphs that have manual line breaks. At the moment, when I start a crypt block with {{ and give manual line breaks before the end of the crypt block }}, the text is not encrypted.

-- AlokNarula - 18 May 2006

good point! the requested feature is now available.

-- AlexIancu - 18 May 2006

One more request. The TopicCryptPlugin defaults to base64 encryption. Is it possible to default to rsa_rc4? Actually I'm using the TopicCryptPlugin parameters in a template. When I create a new topic and select the template topic as parent, the encryption defaults to base64.

-- AlokNarula - 19 May 2006

I have changed the default encryption method to rsa_rc4 (as base64 alone is in fact demonstrative); but have you tried to change the DEFAULT_METHOD plugin setting?

-- AlexIancu - 19 May 2006

Thanks a lot Alex. I'll be using your plugin on my knowledge base server. Your continual improvements to the plugin have been very helpful.

-- AlokNarula - 20 May 2006

I fixed the author in the "Plugin Author" table row to an Interwiki link (to avoid a broken link.)

-- PeterThoeny - 04 Sep 2006

Typo: TWiki:Main.XavierRedon in plugin topic should be TWiki:Main.XavierREDON.

-- PeterThoeny - 16 Jan 2007

I couldn't install the dependency Crypt::OpenSSL::RSA from the latest CPAN. It couldn;t do the "make". Has anyone experienced this? Thanks

-- MiloValenzuela - 04 Jun 2007

Milo, i have tried this plugin and installed the CPAN modules yesterday from CPAN shell and everything worked fine. Maybe you should post your comment on "Support" section.

Thank you for this plugin, folks!

-- KimDeal - 27 Jun 2007

Thanks for your plugin. But when you try to encript content with the verbatim tags, the text goes out from the CRYPT* tags and the verbatim tags was inverted. Thanks in advance

-- JuanRafaelAlvarezCorrea - 06 Dec 2007

Has anyone tried to evaluate/patch this plugin for TWiki 4.2.2.

Looks like some of the API calls are broken, i.e. Line 200: return TWiki::Plugins::SESSION->{user}->isInList($groupName);

I tried a quick little patch (replace): return TWiki:Func::isGroupMember($groupname,$user);

This seems to fix the plugin as far as I can tell.

-- BryanEllsaesser - 21 Aug 2008

Well, I have the same problem on TWiki 4.2.2 It does'nt work.. Can you repair it? I don't understand what to do((

-- DmitrySmolokurov - 03 Oct 2008

Bryan, does the TopicCryptPlugin example work for you afterwards? I tried your patch and didn't see any errors, but the example text remained in its original state (i.e., it was readable for all, even w/o login).

Dmitry, I attached a patch tcp_patch422.txt which can be applied from the twiki base directory using
patch -p0 -b <tcp_patch422.txt

On a side note, this plugin unfortunately clashes with the FootNotePlugin because both use {{ and }} delimiters.

-- MarkusUeberall - 03 Oct 2008

I modified TopicCryptPlugin.pm with the suggested fix. Now I receive the following errors:

TWiki detected an internal error - please check your TWiki logs and webserver logs for more information.

Can't locate object method "isInList" via package "UserID" (perhaps you forgot to load "UserID"?)

UserID == shortened wikiname

I am not sure how to fix this issue, I am using LDAPContrib which I believe is causing the problem as the error is returning the LDAP username and not the WikiName like it should.

-- GilbertJones - 21 Oct 2008

Also of note I have found that the %SIGNPAGE% function works correctly when used by itself, only an attempt to encrypt text using {{blah blah}} fails

-- GilbertJones - 21 Oct 2008

Support.SID-00609 reports that the plugin breaks using WYSIWYG editor if the page contains <verbatim> blocks. This should be fixed.

-- PeterThoeny - 2010-03-16

For security, this plugin should be updated to use configure variables defined in twiki/lib/LocalSite.cfg instead of plugin preferences settings.

-- PeterThoeny - 2010-09-17

See related EncryptPluginDev idea.

-- PeterThoeny - 2010-09-17

We are getting the following error on Twiki 4,3.1, but seems to work perfectly on TWiki 4.2.0. We are trying to edit the encrypted page. The change permission lists a group, but it works only if the owner tries to edit the page, and fails for any other users in the allowed group. | Can't use an undefined value as a symbol reference at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 203, <KEY> line 27. at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 203 TWiki::Plugins::TopicCryptPlugin::userIsInGroup('NitishRawat', 'DipuDeshmukh') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 225 TWiki::Plugins::TopicCryptPlugin::isUserInList('NitishRawat', 'DipuDeshmukh,Main.SSRMDeveloperGroup') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 237 TWiki::Plugins::TopicCryptPlugin::checkDecryptPermission('NitishRawat', 'DipuDeshmukh,Main.SSRMDeveloperGroup', '') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 485 TWiki::Plugins::TopicCryptPlugin::cryptedTextFormatting('edit', 'NitishRawat', 'method="rsa_rc4" crypted="lVAYz1zezY7kPWMYVYSPGQIIwqpA8U7ZhNU...', '*,DipuDeshmukh;DipuDeshmukh,Main.SSRMDeveloperGroup;;;;allowt...', '') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 581 TWiki::Plugins::TopicCryptPlugin::decryptRC4('edit', 'NitishRawat', 'lVAYz1zezY7kPWMYVYSPGQIIwqpA8U7ZhNU1nFtWv8Bmj0Hkm4V20A5Zp06aJ...', 'method="rsa_rc4" crypted="lVAYz1zezY7kPWMYVYSPGQIIwqpA8U7ZhNU...') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 1092 TWiki::Plugins::TopicCryptPlugin::doTextDecrypt('edit', 'DipuDeshmukh') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 1129 TWiki::Plugins::TopicCryptPlugin::doDecrypt('edit', '%INCLUDE{"%IF{"context can_login" then="TWiki06x01.WebLeftBa...') called at C:/www/twiki/lib/TWiki/Plugins/TopicCryptPlugin.pm line 1214 TWiki::Plugins::TopicCryptPlugin::beforeEditHandler('%INCLUDE{"%IF{"context can_login" then="TWiki06x01.WebLeftBa...', 'Webleftbar', 'Zermatt', 'TWiki::Meta=HASH(0x3497894)') called at C:/www/twiki/lib/TWiki/Plugin.pm line 266

-- DipuDeshmukh - 2010-09-24

The plugin breaks using WYSIWYG editor on twiki 6.0. I try to change plugins order without success. There is no errors in logs. Any idea on this?

-- Alain Beauvois - 2015-06-21