====== Gnupg ======
=====GNUPG HOW-TO=====
Run the following from a linux based operating system (e.g. debian) and accept the defaults.
Note, it may take some time to generate the random information.
gpg --gen-key
To see all the keys - yours and your friends etc.:
gpg --list-keys
Example of above:
/home/you/.gnupg/pubring.gpg
----------------------------
pub 1024D/32j38dk2 2001-06-20 you
sub 1024g/289sklj3 2001-06-20 [[expires:|2002-11-14]]
All the public keys you know are stored in the file:
~/.gnupg/pubring.gpg
pub = Public Key
Public Key ID (UID) = 32j38dk2
To send your key (public) to a person:
-o is for a file name (steve)
-a is for an ascii file
gpg --export -o steve -a UID
To import a key manually from someone:
gpg --import filename
Upload Public Key to key server:
gpg --send-keys --keyserver wwwkeys.pgp.net UID
To edit keys - Typically used for signing keys
(cant change name or comment, only password and expiry)
#UID = See example above
gpg --edit-key UID
To Search for Keys:
(This Will also allow you to download and include the person)
gpg --search-key --keyserver wwwkeys.pgp.net stephen burke
To Create a gpg fingerprint so you can PRINT out your Key fingerprint:
This allows you to take away to a "Key Signing Party" and sign other keys verifying the person's identity using two forms of id.
gpg --fingerprint
==== Add User ID ====
Adding in a User ID:
gpg --edit-key UID
uid n #Toggles selection of user id with index n. Use 0 to deselect all.
list
See the * beside the Current User id. After current ID is selected type:
primary
That should be it. Upload keys with command above.
==== KeySigning Procedure ====
See original: http://www.hants.lug.org.uk/cgi-bin/wiki.pl?LinuxHints/KeySigning
gpg --search-key --keyserver wwwkeys.eu.pgp.net firstname lastname
#Send a signed and encrypted email, asking for a signed reply. When a signed reply is obtained, then:
gpg --ask-cert-level --sign-key UID
gpg --send-key UID
----
URL's:
* http://webber.dewinter.com/gnupg_howto/english/GPGMiniHowto.html
* http://www.gnome.org/projects/evolution/doc/x1700.html
* http://www.nmlug.org/faqs/gen-gpg-key.html
===== Extend GPG Expiry =====
So my gpg key recently expired and I was wondering why pine was giving out to me saying "no default key available"!
There is a great guide at: http://www.g-loaded.eu/2010/11/01/change-expiration-date-gpg-key/
Some of the main points:
gpg --list-keys
gpg --edit-key UID
{type} key 0
expire
#enter new expiry date
{type} key 1
#enter new expiry date
save
gpg --keyserver pgp.mit.edu --send-keys UID
===== Fixes =====
==== public key decryption failed: Inappropriate ioctl for device ====
After updates using gpg via pine threw up the error: gpg: public key decryption failed: Inappropriate ioctl for device
The solution is to edit /home/user/.bashrc and add:
export GPG_TTY=$(tty)
Kudos to: https://zaplanincan.wordpress.com/tag/decryption-failed/