Subject: Re: Pine and PGP

From: Derek Wildstar <[email-masked]>
Date: Mon, 29 Jan 2001 03:51:25 -0500 (EST)

On Mon, 29 Jan 2001, Jim wrote:

> I have installed PGP 6.5.8 for linux.  I keep hearing rumors about being
> able to use PGP with Pine.  How do I set this up?

go to www.freshmeat.net, search for "pgp4pine", use it here it works
great.  Beware of the file caching on decrypt tho...it only clears the
cache the next time it is executed for expired entries.  For this reason i
put "rm -f ~/.pgp4pine.cache" in my .logout file (tcsh).

- -dwild

- ------------ Output from gpg ------------
gpg: Signature made Mon 29 Jan 2001 03:49:03 AM EST using DSA key ID 1CB8478F
gpg: Good signature from "Derek Wildstar <[email-masked]>"

---

From: Jim <[email-masked]>
Date: Mon, 29 Jan 2001 12:15:15 -0700 (MST)

Thanks for your help, I was able to get pgp4pine installed, but I have one
question.  I checked my mail this morning and I had two copies of your
reply, one from you and one via the list.  The one from the list had the
following text, the one from you did not.  Both had your signature.

> gpg: Good signature from "Derek Wildstar <[email-masked]>"

Why did one have the output from gpg and the other did not?  Is this
something I need to change at my end?

Thanks

---

From: Derek Wildstar <[email-masked]>
Date: Mon, 29 Jan 2001 16:22:48 -0500 (EST)

> something I need to change at my end?

my bad....i had mis-forwarded to the list with the wrong from: address
(used for procmail sorting), and inadvertantly signed the second message
twice.

-dwild

---

From: Jim <[email-masked]>
Date: Mon, 29 Jan 2001 16:47:41 -0700 (MST)

-----BEGIN PGP SIGNED MESSAGE-----

I wonder now if it's something at my end.  I checked the headers of both
replies you sent.  The one you sent to the list was the second one I got
and it was the one where the signature was checked.  The one that came
directly from you had a signature, but it wasn't checked at this end.
Also pgp signed messages I got from other people were not checked either.

---

From: Derek Wildstar <[email-masked]>
Date: Tue, 30 Jan 2001 00:29:16 -0500 (EST)

Make sure you have the following in your pine config (the example in the
README is wrong, it shows "_BEGINNING" which will check pgp signatures too
often, like in a reply where the content could possibly be modified.
_LEADING will check the siguature or try to decrypt only if the first text
of the message body begins with -----BEIGN PGP, not the first text of any
line.  I guess it's just a matter of personal preference.

display-filters          =
    _LEADING("-----BEGIN PGP")_ /usr/local/bin/pgp4pine -d -i _TMPFILE_
sending-filters          =
    /usr/local/bin/pgp4pine -e -i _TMPFILE_ -r _RECIPIENTS_

Be sure to replace /usr/local/bin with the correct path to pgp4pine.

- -dwild

On Mon, 29 Jan 2001, Jim wrote:

> Date: Mon, 29 Jan 2001 16:47:41 -0700 (MST)
> From: Jim <[email-masked]>
> To: Derek Wildstar <[email-masked]>
> Cc: Pine Discussion Forum <[email-masked]>
> Subject: Re: Pine and PGP
>
> ------------ Output from gpg ------------
> gpg: Signature made Mon 29 Jan 2001 06:48:06 PM EST using RSA key ID D3365227
> gpg: requesting key D3365227 from wwwkeys.pgp.net ...
> gpg: no valid OpenPGP data found.
> gpg: Total number processed: 0
> gpg: Can't check signature: public key not found
>
>