Re: Own private keyserver?

[Piero Giobbi]

Thx for answering!

I new at this and my idea with a private keyserver was to exchange keys for encrypting emails in a easier way than "manually" send keys back and forth. Apple Mail can serch for keys on an server and if im not mistaking this is the server to use for that?

Any hint or tips to set this up is greatly apreciated. I will be using a Linux/Debian for this.

Regards

p

Piero Giobbi wrote

Is that possible? If so what software should i use? I tried to find

some info on this but failed. I would like to have it on linux.. : )

Depends on what you mean by "private". ;-)

Not sure why you had difficulty finding any info, but...

The standard Opensource OpenPGP Keyserver these days is SKS. Most people
host it on a Linux box, but it builds and runs fine on *BSD and MacOS
(It /DOES/ require a bit more work on MacOS).

.DEBs are available for Debian-based systems. I "think" current RPMs are
also available.

OCaml (3.10.2+) and Berkeley DB (4.6+) packages are dependencies.

Project page: http://www.nongnu.org/sks/
List and archive at:
   Sks-devel@...
   http://lists.nongnu.org/mailman/listinfo/sks-devel

Good documentation page: http://www.keysigning.org/sks/

-- 
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
    pgp-public-keys@...

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"

------------------------------------------------------------------------------

_______________________________________________
Macgpg-users mailing list
Macgpg-users@...
https://lists.sourceforge.net/lists/listinfo/macgpg-users

[John Clizbe-3]

Piero Giobbi wrote:
> Thx for answering!
>
> I new at this and my idea with a private keyserver was to exchange keys
> for encrypting emails in a easier way than "manually" send keys back and
> forth. Apple Mail can search for keys on an server and if I'm not
> mistaken this is the server to use for that?

Yes, SKS is the predominant OpenPGP key server package these days.

But, the use-case you are describing doesn't really require you to run
you own server, just use the existing keyserver network. Configure your
applications to send to and search pool.sks-keyservers.net and you're
finished.

Your term "private keyserver" is confusing. If you are wanting to share
a small group of keys without exposing them to the public Internet, SKS
is overkill, LDAP makes more sense in a small use situation like this.
SKS in a non-public enterprise setting, makes sense with probably over
50000 keys, but even so, these enterprises probably already have an
existing LDAP infrastructure to build upon.  Nearly all SKS
implementations are configured to share the global OpenPGP key share
(presently a ~4GB keyring). Depending on configuration, it takes 6-8GB
for the database and indexes.

I'm not saying, do not build a SKS server. Just be sure you're doing it
for sensible reasons.

> Any hint or tips to set this up is greatly appreciated. I will be using a
> Linux/Debian for this.

Project page: http://www.nongnu.org/sks/
List and archive at:
   Sks-devel@... <mailto:Sks-devel@...>
   http://lists.nongnu.org/mailman/listinfo/sks-devel

Good documentation page: http://www.keysigning.org/sks/

Also, some Debian specific tips are found at
http://www.rainydayz.org/index.php?option=com_content&view=article&id=60:installing-the-opensks-keyserver&catid=34:linux&Itemid=53

A new release (1.1.1) will be released in the next few days.



--
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys@...?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"



------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Macgpg-users mailing list
Macgpg-users@...
https://lists.sourceforge.net/lists/listinfo/macgpg-users