Redmine

Redmine plugin to encrypt parts of the Wiki so sensitive information, like passwords, are saved encrypted in the database and you have to click a button to see them on the interface, to keep them from prying eyes. Also, all previous versions (historic) will be encripted in the database and the redmine logs will be filtered.

This plugin was created to better adequate Redmine to ISO 27001 Information Security Standard requisites.

When you install this plugin a new locker button will appear on the toolbar of every wiki edit page. Just select the sensitive information and hit the button so it puts the {{cipher}} tags around it. Now this information will be encrypted on the database and kept from prying eyes. When viewing the wiki page, the sensitive information will be hidden by a "This text is ciphered" message". Also, when using cipher on a wiki page, all previous versions of that page will be encripted in the database and the redmine logs of the update action will be filtered out. Click the "decipher" button on the toolbar to show the sensitive information.

This plugin was created and liberated by KEEP SOLUTIONS, a Portuguese company that provides advanced services for managing and preserving digital information. Contact us if you need enterprise support.

Screenshots¶

Select sensitive information and click on the "locker" button.

Sensitive information will be surrounded by the {{cipher}} tag.

Save, and the information will be encripted on the database and hidden from prying eyes.

Click the "Decipher" button to decrypt the sensitive information and show it.

1. Place the plugin into /path/to/redmine/vendor/plugins . The name of the plugin's directory/folder should be redmine_wikicipher.
2. Change directory to /path/to/redmine/ .
3. Update the "database_cipher_key" configuration located in /path/to/redmine/config/configuration.yml file with some random key (this key will be used to cipher/decipher the wiki content)
4. For redmine v2.2.x, edit the application.rb file (/path/to/redmine/config/application.rb), adding “:text” to the filter parameters (config.filter_parameters += [:password, :text]).
5. Restart redmine.

How to change the cipher key¶

The key used to encrypt is based on the "database_cipher_key" configuration in the /path/to/redmine/config/configuration.yml file.
To modify the key, update the /path/to/redmine/config/configuration.yml file, run the script /path/to/wikicipherplugin/bin/updatekey.rb, passing the old key and the new key as parameters and restart redmine.

How to remove the encryption¶

The key used to encrypt is based on the "database_cipher_key" configuration in the /path/to/redmine/config/configuration.yml file.
To modify the key, update the /path/to/redmine/config/configuration.yml file, setting the 'database_cipher_key' as empty , run the script /path/to/wikicipherplugin/bin/updatekey.rb, passing the old key as parameter and restart redmine.