java - Is it possible to send a secured mail with out the credentials of the sender? -


i trying send digital signed/secrured mail using javamail api.

for created keystore certificate , used (loaded through bouncycastle) while generating mail , sending user. have provide user name , password of sender mail id authenticate.

is there way send secured mail out credentials of sender?

i tried making authentication false. no luck.

props.put("mail.smtp.auth", "true"); //enable authentication 

my code :::

public static void main(string[] args) {     final string fromemail = "satishkumar.reddy@xyz.com"; //requires valid gmail id     final string toemail = "satishxxxxxreddy@gmail.com";        system.out.println("tlsemail start");     properties props = new properties();      props.put("mail.transport.protocol", "smtp");     props.put("mail.smtp.host", "132.000.000.001"); //smtp host     props.put("mail.smtp.port", "587"); //tls port     props.put("mail.smtp.auth", "true"); //enable authentication     props.put("mail.smtp.starttls.enable", "true"); //enable starttls      props.put("mail.smtp.ssl.trust", "*");      props.put("mail.debug", "true");      session session = session.getdefaultinstance(props,                 new javax.mail.authenticator() {                     protected passwordauthentication getpasswordauthentication() {                         return new passwordauthentication("myusername","mypassword");                    }                 });      boolean isalias = false;        //session session = session.getdefaultinstance(props);       system.out.println("session created..............");              try {                // add bouncycastle content handlers command map                 mailcapcommandmap mailcap = (mailcapcommandmap) commandmap.getdefaultcommandmap();                 mailcap.addmailcap("multipart/signed;; x-java-content-handler=org.bouncycastle.mail.smime.handlers.multipart_signed");                 commandmap.setdefaultcommandmap(mailcap);                  security.addprovider(new bouncycastleprovider());                  keystore keystore = keystore.getinstance("jks");                  // provide location of java keystore , password access                 keystore.load(new fileinputstream("d:\\certificates\\mail_cert\\selfservice.cert"),                         "keystore".tochararray());                  // find first legit alias in keystore , use                 enumeration<string> es = keystore.aliases();                 string alias = "";                 while (es.hasmoreelements()) {                     alias = (string) es.nextelement();                      // alias refer private key? assign true/false isalias & evaluate                     if (isalias = keystore.iskeyentry(alias)) {                         break;                     }                 }                 if (isalias) {                     keystore.privatekeyentry pkentry = (keystore.privatekeyentry) keystore.getentry(alias, new keystore.passwordprotection("keystore".tochararray()));                     privatekey myprivatekey = pkentry.getprivatekey();                      // load certificate chain                     certificate[] chain = keystore.getcertificatechain(alias);                      // create smimesignedgenerator                     smimecapabilityvector capabilities = new smimecapabilityvector();                     capabilities.addcapability(smimecapability.des_ede3_cbc);                     capabilities.addcapability(smimecapability.rc2_cbc, 128);                     capabilities.addcapability(smimecapability.des_cbc);                     capabilities.addcapability(smimecapability.aes256_cbc);                      asn1encodablevector attributes = new asn1encodablevector();                     attributes.add(new smimeencryptionkeypreferenceattribute(                             new issuerandserialnumber(                             new x500name(((x509certificate) chain[0])                             .getissuerdn().getname()),                             ((x509certificate) chain[0]).getserialnumber())));                     attributes.add(new smimecapabilitiesattribute(capabilities));                      smimesignedgenerator signer = new smimesignedgenerator();                     signer.addsigner(                             myprivatekey,                             (x509certificate) chain[0],                             "dsa".equals(myprivatekey.getalgorithm()) ? smimesignedgenerator.digest_sha1                             : smimesignedgenerator.digest_md5,                             new attributetable(attributes), null);                      // add list of certs generator                     list certlist = new arraylist();                     certlist.add(chain[0]);                     certstore certs = certstore.getinstance("collection",                             new collectioncertstoreparameters(certlist), "bc");                     signer.addcertificatesandcrls(certs);                      // construct message body                     mimemessage body = new mimemessage(session);                     body.setfrom(new internetaddress(fromemail));                     body.setrecipient(message.recipienttype.to, new internetaddress(toemail));                     body.setcontent("dear.....body....", "text/plain");                     body.savechanges();                       // sign message                     mimemultipart mm = signer.generate(body, "bc");                     mimemessage signedmessage = new mimemessage(session);                      signedmessage.setfrom(new internetaddress(fromemail));                     signedmessage.setrecipient(message.recipienttype.to, new internetaddress(toemail));                     signedmessage.setsubject("testing signed subject");                     // set content of signed message                     signedmessage.setcontent(mm);                     signedmessage.savechanges();                      // send message                     transport.send(signedmessage);                 }              } catch (messagingexception e) {                 throw new runtimeexception(e);             } catch (keystoreexception | nosuchalgorithmexception | certificateexception | ioexception | unrecoverableentryexception |                      invalidalgorithmparameterexception | nosuchproviderexception | certstoreexception |smimeexception e) {                 // todo auto-generated catch block                 e.printstacktrace();             }  } 

the creation of signed or encrypted email message independent of ability login mail server , send email message. no public email servers going let send email message without logging in first. if have user's private key create signed email message, you're going need user's password login mail server.


Comments

Popular posts from this blog

asynchronous - C# WinSCP .NET assembly: How to upload multiple files asynchronously -

aws api gateway - SerializationException in posting new Records via Dynamodb Proxy Service in API -

asp.net - Problems sending emails from forum -