« Return to Thread: GNuPG Newb

Re: GNuPG Newb

by jramro :: Rate this Message:

The server/host I'm on already has a user/bin with the .gnupg
I've never used it before so i dont know how to test it.

The control panel only allows you to see the key pair that was generated, nothing more. there's
no access to control safe modes, etc .

Is there a simple script to test this just to send a basic test email
I've tried a few gpg scripts so far, but the mail they send is blank . it goes through to my email, but no text , nothing.

All of the websites I've researched only talk about the basics or the logic and key pairs, generating keys, or setting up gnupg on your own machine. Is there any comprehensive tutorial or scripts on how to make the gnupg intercept the mail in the in/out pipe, as you say?
If i alreayd have gnupg on the server /host, would i need to even have something like Anubis on my machine?

Sven Radde-3 wrote:

Hi!

jramro schrieb:
> I'm trying to send a php mail form and not able to get it to encrypt or do
> much of anything.

First of all, make sure that you have access to the gpg executable from
your php script and that safe mode and similar restrictions do not cause
problems.
Make also sure that the necessary keys are imported, set to trustworthy
on the machine you are running GnuPG and the like.

> I was a bit confused because i heard that PGP can intercept a mail form
> through SMTP and encrypt it , but that GnuPG can not?

What is confusing about the fact that different softwares can have a
different set of features?
It should however be reasonably easy to write a wrapper around GnuPG
that works as an SMTP proxy if this is really necessary. Maybe someone
can point you to an existing solution, I would be surprised if there
wasn't one already.
A quick look at <http://www.gnupg.org/related_software/frontends.html>
turned up Anubis <http://www.gnu.org/software/anubis/> but I have no
idea about the quality of that project (last update 2004 - either it's
very stable or very abandoned or both).

> Do i have to first output my mail form into a temp folder as a .txt file,
> and then encrypt the .txt file?

You could do that, but gpg can also be used to handle piped standard
in-/output. I think, this would be the preferred way.

The command line would be roughly like:
gpg --armor --recipient KEYID --encrypt
--> write text to GnuPG stdin, terminate with EOF
<-- read "PGP MESSAGE" from GnuPG stdout

You can easily try this in the console.

> When reaching last page, the mail form is assembled and populated and sent.

So, at this point, before passing the assembled mail body string to the
PHP mail()-function, you could just pipe it through a call to gpg.

HTH, Sven

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

« Return to Thread: GNuPG Newb