[ILUG] gpg & encryption

[Lars Hecking]

John P. Looney writes:
>  Dammit but gpg is a lot more confusing than it used to be. How do I export
> out an ascii version of my public key ? --export just gives me binary. How

 $ gpg --help

 or even the man page

...
Options:
 
 -a, --armor                      create ascii armored output
...

> do I stop the "using insecure memory" errors every time I run the poxy
> thing ? 

 Install it suid root. Or man gpg

...
     --no-secmem-warning
               Suppress  the  warning   about   "using   insecure
               memory".
...

 [ or: add no-secmem-warning to ~/.gnupg/options. ]

 Also: BUGS section of man page.

>  I downloaded a public key as a test from 
> http://blackhole.pca.dfn.de:11371/pks/lookup?search=roessler@guug.de&op=get 
> 
>  and added it to my keys as so:
> 
> % cat file | gpg --import 
> gpg: Warning: using insecure memory!
> gpg: key C385E037: public key imported
> gpg: key CE6AC6C1: unsupported public key algorithm

 I think this is a pgp 2.6/RSA key. To handle RSA keys, you need to
 install the rsa module from the contrib directory at the gpg ftp site,
 install it into PREFIX/lib/gnupg and add load-extension rsa to
 ~/.gnupg/options.

> gpg: key CE6AC6C1: no valid user IDs
> gpg: this may be caused by a missing self-signature
> gpg: key 593238E1: unsupported public key algorithm
> gpg: key 593238E1: unsupported public key algorithm

 Probably same thing.

> gpg: key 593238E1: no valid user IDs
> gpg: this may be caused by a missing self-signature
> gpg: Total number processed: 3
> gpg:           w/o user IDs: 2
> gpg:               imported: 1
> % gpg --list-keys
> /home/jplooney/.gnupg/pubring.gpg
> ---------------------------------
> pub  1024D/BAB730E7 1999-11-25 John P. Looney <valen at tuatha.org>
> sub  1024g/B0ECACEB 1999-11-25
> 
> pub  1024D/C385E037 1998-02-09 Thomas Roessler <roessler at guug.de>
> sub  2048g/8A615B05 1998-02-09
> 
>  That looks like it worked, yeah ? Did it ? why, when I try and verify the

 These are different keys. Check the key ids.

> signature in mutt, does it say :
> 
> [-- PGP output follows (current time: Fri Nov 26 10:04:22 1999) --]
> gpg: Warning: using insecure memory!
> gpg: Signature made Thu 25 Nov 1999 12:58:51 PM GMT using ? key ID CE6AC6C1
> gpg: Can't check signature: public key not found
> [-- End of PGP output --]          
> 
>  I'm not sure, but I think it could be that the keyids just match. If so, I
> say "smeg" and wonder why yer mans key on the keyserver is different to the
> one he's signing stuff with...