Re: gpg

[Andre Berger <uzscd5@uni-bonn.de>]

* kmself@ix.netcom.com <kmself@ix.netcom.com>, 20010313 11:37 +0100:
> on Fri, Mar 09, 2001 at 12:49:03PM +0100, Andre Berger (uzscd5@uni-bonn.de) wrote:
> > I'm new to gpg... I've installed the gnupg-package and generated a key
> > pair with "gpg --gen-key". When I use my DSA key (in mutt), I get a
> > warning this method was depricated. What am I supposed to do now?
> 
> I'm confused.  Could you post the appropriate mutt config, and a copy of
> the message you're getting.


Here's the warning:

gpg: der Zweitschlüssel 0D6FD183 wird anstelle des Hauptschlüssels
FC456861 verwendet
gpg: No trust check due to --always-trust option
gpg: der Zweitschlüssel 0D6FD183 wird anstelle des Hauptschlüssels
FC456861 verwendet
gpg: No trust check due to --always-trust option
gpg: 0xFC456861: übersprungen: öffentlicher Schlüssel bereits vorhanden
gpg: Schreiben nach '-'
gpg: ELG-E/RIJNDAEL verschlüsselt für: 0D6FD183 Andre Berger
<andre.berger@topmail.de>
gpg: DSA Unterschrift von: FC456861 Andre Berger
<andre.berger@topmail.de>
gpg: Diese Verschlüsselungsmethode taugt nicht mehr viel; verwenden Sie
eine stärker standardisierte Methode!
Bitte drücken Sie eine Taste...

The german msgs say I should use an encryption method that's both more
recent and more standard compliant.

Here's the probably relvant part of /etc/Muttrc. I had to comment the
first options out because my mutt 1.3.15i w/ nntp- and compressed folder
patch didn't support them. Had to change the pgpwrap path as well.


# set pgp_sign_micalg=pgp-sha1 # default for DSS keys
set pgp_decode_command="gpg %?p?--passphrase-fd 0? --no-verbose --batch --output - %f"
set pgp_verify_command="gpg --no-verbose --batch --output - --verify %s %f"
set pgp_decrypt_command="gpg --passphrase-fd 0 --no-verbose --batch --output - %f"
set pgp_sign_command="gpg --no-verbose --batch --output - --passphrase-fd 0 --armor --detach-sign --textmode %?a?-u %a? %f"
set pgp_clearsign_command="gpg --no-verbose --batch --output - --passphrase-fd 0 --armor --textmode --clearsign %?a?-u %a? %f"
# set pgp_encrypt_only_command="/usr/lib/mutt/pgpewrap gpg -v --batch --output - --encrypt --textmode --armor --always-trust -- -r %r -- %f"
set pgp_encrypt_only_command="/usr/bin/pgpewrap gpg -v --batch --output - --encrypt --textmode --armor --always-trust -- -r %r -- %f"
# set pgp_encrypt_sign_command="/usr/lib/mutt/pgpewrap gpg --passphrase-fd 0 -v --batch --output - --encrypt --sign %?a?-u %a? --armor --always-trust -- -r %r -- %f"
set pgp_encrypt_sign_command="/usr/bin/pgpewrap gpg --passphrase-fd 0 -v --batch --output - --encrypt --sign %?a?-u %a? --armor --always-trust -- -r %r -- %f"
set pgp_import_command="gpg --no-verbose --import -v %f"
set pgp_export_command="gpg --no-verbose --export --armor %r"
set pgp_verify_key_command="gpg --no-verbose --batch --fingerprint --check-sigs %r"
set pgp_list_pubring_command="gpg --no-verbose --batch --with-colons --list-keys %r" 
set pgp_list_secring_command="gpg --no-verbose --batch --with-colons --list-secret-keys %r" 
set pgp_getkeys_command=""


Is this enough input?

Andre Berger                                [andre.berger@topmail.de]