GNuPG Newb

[jramro]

 Hi,
 I'm trying to send a php mail form and not able to get it to encrypt or do much of anything.
 The mail form works on its own ,but when trying to add the GNuPG it doesnt work.

 I have the private and public key pair generated. My host has the GnuPG keys generated and the .gnupg bin etc.

 I was a bit confused because i heard that PGP can intercept a mail form through SMTP and encrypt it , but that GnuPG can not?

 Do i have to first output my mail form into a temp folder as a .txt file, and then encrypt the .txt file?

 the overview of the mail form , is that its coded in PHP, and the information in the mail will be populated by $_SESSION and $_POST information.
 It's an auto form that will automatically send the mail when user submits the last form, and is transferred to that last page.

 When reaching last page, the mail form is assembled and populated and sent.

 Currently it all works when using regular non-encryption mail)

Is there an easy way to take the existing mail form thats already working, and attach some code to have it encrypt with the private and public key pair?

Thank You!

[Sven Radde-3]

Hi!

jramro schrieb:
>  I'm trying to send a php mail form and not able to get it to encrypt or do
> much of anything.

First of all, make sure that you have access to the gpg executable from
your php script and that safe mode and similar restrictions do not cause
problems.
Make also sure that the necessary keys are imported, set to trustworthy
on the machine you are running GnuPG and the like.

>  I was a bit confused because i heard that PGP can intercept a mail form
> through SMTP and encrypt it , but that GnuPG can not?

What is confusing about the fact that different softwares can have a
different set of features?
It should however be reasonably easy to write a wrapper around GnuPG
that works as an SMTP proxy if this is really necessary. Maybe someone
can point you to an existing solution, I would be surprised if there
wasn't one already.
A quick look at <http://www.gnupg.org/related_software/frontends.html>
turned up Anubis <http://www.gnu.org/software/anubis/> but I have no
idea about the quality of that project (last update 2004 - either it's
very stable or very abandoned or both).

>  Do i have to first output my mail form into a temp folder as a .txt file,
> and then encrypt the .txt file?

You could do that, but gpg can also be used to handle piped standard
in-/output. I think, this would be the preferred way.

The command line would be roughly like:
gpg --armor --recipient KEYID --encrypt
--> write text to GnuPG stdin, terminate with EOF
<-- read "PGP MESSAGE" from GnuPG stdout

You can easily try this in the console.

>  When reaching last page, the mail form is assembled and populated and sent.

So, at this point, before passing the assembled mail body string to the
PHP mail()-function, you could just pipe it through a call to gpg.

HTH, Sven

_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[jramro]

The server/host I'm on already has a user/bin with the .gnupg
I've never used it before so i dont know how to test it.

The control panel only allows you to see the key pair that was generated, nothing more. there's
no access to control safe modes, etc .

Is there a simple script to test this just to send a basic test email
I've tried a few gpg scripts so far, but the mail they send is blank . it goes through to my email, but no text , nothing.

All of the websites I've researched only talk about the basics or the logic and key pairs, generating keys, or setting up gnupg on your own machine. Is there any comprehensive tutorial or scripts on how to make the gnupg intercept the mail in the in/out pipe, as you say?
If i alreayd have gnupg on the server /host, would i need to even have something like Anubis on my machine?

Sven Radde-3 wrote:

Hi!

jramro schrieb:
>  I'm trying to send a php mail form and not able to get it to encrypt or do
> much of anything.

First of all, make sure that you have access to the gpg executable from
your php script and that safe mode and similar restrictions do not cause
problems.
Make also sure that the necessary keys are imported, set to trustworthy
on the machine you are running GnuPG and the like.

>  I was a bit confused because i heard that PGP can intercept a mail form
> through SMTP and encrypt it , but that GnuPG can not?

What is confusing about the fact that different softwares can have a
different set of features?
It should however be reasonably easy to write a wrapper around GnuPG
that works as an SMTP proxy if this is really necessary. Maybe someone
can point you to an existing solution, I would be surprised if there
wasn't one already.
A quick look at <http://www.gnupg.org/related_software/frontends.html>
turned up Anubis <http://www.gnu.org/software/anubis/> but I have no
idea about the quality of that project (last update 2004 - either it's
very stable or very abandoned or both).

>  Do i have to first output my mail form into a temp folder as a .txt file,
> and then encrypt the .txt file?

You could do that, but gpg can also be used to handle piped standard
in-/output. I think, this would be the preferred way.

The command line would be roughly like:
gpg --armor --recipient KEYID --encrypt
--> write text to GnuPG stdin, terminate with EOF
<-- read "PGP MESSAGE" from GnuPG stdout

You can easily try this in the console.

>  When reaching last page, the mail form is assembled and populated and sent.

So, at this point, before passing the assembled mail body string to the
PHP mail()-function, you could just pipe it through a call to gpg.

HTH, Sven

_______________________________________________
Gnupg-users mailing list
[e-mail]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[Robert J. Hansen-3]

jramro wrote:
>  I was a bit confused because i heard that PGP can intercept a mail form
> through SMTP and encrypt it , but that GnuPG can not?

GnuPG and PGP both support the OpenPGP specification (RFC2440).  They
also each have some additional functionality.  PGP has a mail proxy as
part of its additional functionality.  GnuPG does not provide this.

I am not fond of the mail proxy idea, myself.

> Do i have to first output my mail form into a temp folder as a .txt file,
> and then encrypt the .txt file?

Probably not.  I/O redirection will probably do the job for you.



_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users