S/Notify Email Encryption for Jira

This is primarily a Jira 11 compatibility release

Note that S/Notify 4.2.0 requires Jira 11. For Jira 10.x, please select to install S/Notify 4.1.2, and for Jira 9.x, please select to install S/Notify 4.1.0.

New features

• Compatibility with Jira 11
• S/MIME: optionally reject certificates with unknown extension when marked critical

Improvements

• Increased information in support file information, reduce some overhead logging

Fixes

• S/MIME: avoid NPE when verifying signatures without a certificate

• Jira and Jira Service Management 10.5 compatibility
• Improved compatibility of indicator icons for incoming email with some browsers that would fail to display them properly

This release comes with no functional changes. It is a Jira 10 specific release.

Note that, due to changes in Jira 10, we are considering to release separate editions for Jira and Jira Service Management in the near future. Read more about these plans.

New features

• Prepare for Jira 10
• Support for Dark Theme (Jira 10)
• Allow to perform server key verification against arbitrary email address

Improvements

• Stricter password reset email recognition to prevent false exemption
• Include sender when validating email signatures
• S/MIME: check user uploaded certificate for encryption purposes
• S/MIME: display certificate serial number in decimal for easier comparison
• PGP: remove PGP version tag as recommended in OpenPGP crypto refresh documentation
• Allow to configure external LDAP referral independent from Jira user directory
• Updated crypto library with several fixes and improvements
• More info to test email to avoid confusion

Fixes

• S/MIME: signature validation incorrectly failed when separate certificates are used for signing and encrypting
• S/MIME: signature validation incorrectly failed due to missing AKI (Authority Key Identifier) in certificate
• PGP: signature validation with unknown key used wrong indicator image
• Fix some accessibility issues

This release addresses an issue with S/MIME certificates in incoming signed emails that would occur when no server key store is configured

• fix S/MIME certificate validation
• fix S/MIME certificate extraction

This release addresses an issue with S/MIME certificates in incoming signed emails that would occur when no server key store is configured

• fix S/MIME certificate validation
• fix S/MIME certificate extraction

This is a fix release that addresses an issue with specific IMAP servers that would occur in connection with third-party apps.

Fixes

• Add a method used for IMAP servers announcing the CONDSTORE capability

We recommend to update to this release when you want to use third-party apps with incoming email decryption.

This is a fix release that addresses an issue with specific IMAP servers that would occur in connection with third-party apps.

Fixes

• Add a method used for IMAP servers announcing the CONDSTORE capability

We recommend to update to this release when you want to use third-party apps with incoming email decryption.

This is a security fix release that addresses two CSRF vulnerabilities. For details, please see our security advisory here.

Fixes

• Fix token check on Jira versions before 9.0 and Jira Service Management before 5.0
• Add token check to user upload

It is highly recommended to update to this version if you run Jira before 9.0 or Jira Service Management before 5.0.

This is a security fix release that addresses two CSRF vulnerabilities. For details, please see our security advisory here.

Fixes

• Fix token check on Jira versions before 9.0 and Jira Service Management before 5.0
• Add token check to user upload

It is highly recommended to update to this version if you run Jira before 9.0 or Jira Service Management before 5.0.

Fix release with minor fixes

• fixed a missing error message
• fixed an error message when entering a non-numeric LDAP port
• fixed error message for defect user uploads

Fix release with minor fixes

• fixed a missing error message
• fixed an error message when entering a non-numeric LDAP port
• fixed error message for defect user uploads

Major release with many new features and improvements

New

• S/MIME: Support for encryption with domain or gateway certificates
• PGP: Support for GnuPG's new keybox format
• PGP: Support for AEAD:OCB encrypted emails
• Verify user keystore settings with arbitrary email address

Improved

• Support LDAP referrals
• S/MIME: Option for opaque signatures
• PGP: Tolerate invalid characters in PGP keys
• PGP: Option to disallow non-preferred ciphers
• PGP: More tolerant recognition of PGP/inline message parts
• Optionally exclude emails from encryption based on regex pattern
• Updated crypto library with several fixes and improvements
• Recognize user invitation emails as account relevant emails
• Recognize account relevant emails for service desk customers so they can optionally be excluded from encryption (Jira Service Management)
• Support tool
• Extended and improved external LDAP settings
• Improved checks in Verify Settings
• Improved Advanced Settings
• Clarified some error and configuration texts
• Internal improvements

Major release with many new features and improvements

New

• S/MIME: Support for encryption with domain or gateway certificates
• PGP: Support for GnuPG's new keybox format
• PGP: Support for AEAD:OCB encrypted emails
• Verify user keystore settings with arbitrary email address

Improved

• Support LDAP referrals
• S/MIME: Option for opaque signatures
• PGP: Tolerate invalid characters in PGP keys
• PGP: Option to disallow non-preferred ciphers
• PGP: More tolerant recognition of PGP/inline message parts
• Optionally exclude emails from encryption based on regex pattern
• Updated crypto library with several fixes and improvements
• Recognize user invitation emails as account relevant emails
• Recognize account relevant emails for service desk customers so they can optionally be excluded from encryption (Jira Service Management)
• Support tool
• Extended and improved external LDAP settings
• Improved checks in Verify Settings
• Improved Advanced Settings
• Clarified some error and configuration texts
• Internal improvements

This releases fixes the following issues with incoming S/MIME emails:

• Decrypt S/MIME emails despite signature validation failure
• Parse attachment to recognize S/MIME contents despite missing smime-data attribute in certain Outlook emails
• Fix "no valid policy tree" error from S/MIME policy requirement when the root certificate was included in the signature

This releases fixes the following issues with incoming S/MIME emails:

• Decrypt S/MIME emails despite signature validation failure
• Parse attachment to recognize S/MIME contents despite missing smime-data attribute in certain Outlook emails
• Fix "no valid policy tree" error from S/MIME policy requirement when the root certificate was included in the signature