MISP/MISP — pull request #306 by devnull- (2014-10-19 22:45:38+00:00)
Title: Add SMIME encryption & signing 

Hello all,

The mission of this patch is to add the support of SMIME [1] in order to improve the solutions to encrypt & sign emails in MISP :)

This patch works when:

- SMIME enabled & GPG disabled: In this context, all emails will be sent encrypted and signed using S/MIME. If the user doesn't set a public certificate (for encipherment), he will receive an email (clear text) to invite him to connect to MISP in order to obtain the detail on the published event (the template for this email is attached to this "Pull request").

- GPG & SMIME enabled: By default, GPG is always preferred :). Thus, if the user sets a GPG key and a public certificate in this profile, he will receive all email encrypted & signed using GPG. If the user doesn't set a GPG key but has set a public certificate, the emails will be encrypted & signed using S/MIME. Of course, if no GPG key and public certificate are set, he will receive an email (clear text) to invite him to connect to MISP in order to obtain the detail on the published event (the template for this email is attached to this "Pull request").

- SMIME disabled: In this context, the email will be sent encrypted & signed using GPG, if GPG is enabled. If no GPG key is set in the user profile, the user will receive an email (clear text) to invite him to connect to MISP in order to obtain the detail on the published event (the template for this email is attached to this "Pull request").

The different steps to install this patch is defined the INSTALL.txt (section: ' 9/ SMIME patch')

At the moment, I currently use this patch (and it's working well) but this patch is still in the "beta phase" and don't blame me for bugs and dirty hacks in the code.

devnull-

[1]: https://en.wikipedia.org/wiki/S/MIME

[2]: At the moment, AES_256_CBC is used to encrypt the email

------------------------------------------------------------------------------------------------------------------
```
Hello,

The event number 43 was published on the MISP platform.

Since no GPG/PGP key or public certificate is set in your MISP profile, you can not directly receive the information in an encrypted email.
You can fill out you profile with your GPG/PGP key or public to receive encrypted email.

To access to the event involved, please click on the following link:
URL : https://misp.xxx.xxx.com/events/view/43

Best regards,

XXXXXX xxxx

```
------------------------------------------------------------------------------------------------------------------