'Re: KMail OpenPGP/MIME HOWTO'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: kmail-devel
Subject: Re: KMail OpenPGP/MIME HOWTO
From: Marc Mutz <mutz () kde ! org>
Date: 2002-10-24 23:36:02
[Download RAW message or body]

[Attachment #2 (multipart/mixed)]

On Tuesday 22 October 2002 19:35, Daniel Naber wrote:
> On Tuesday 22 October 2002 14:17, Marc Mutz wrote:
> > @Daniel Naber
> > Can you add this to the KMail HP (with all the KDE CI added)?
>
> Sure, if you attach it :-)

Arrgh ;-)

Marc

-- 
'When you see the ping of death, duck and cover.'
                        -- Bruce Schneier, Crypto-Gram Oct 2002

["kmail-pgpmime-howto.html" (text/html)]

<html>
<head><title>KMail OpenPGP/MIME HOWTO</title></head>
<body>

<h1>Using OpenPGP/MIME with KMail</h1>

KMail has long been criticized for it's lack of
&quot;compatible&quot; OpenPGP/MIME support. Not any longer! KMail 1.5
and the <a href="http://www.gnupg.org/aegypten">&Auml;gypten
Project</a> make OpenPGP/MIME available to KMail users.

<h3>Prerequisites</h3>

You need KDE 3.1 (a Beta version suffices) and GnuPG 1.0.7 or
1.2.x. You should be able to get those in pre-compiled form from your
distribution vendor.

<h3>Installing &Auml;gypten</h3>

You'll find all the gory details on the <a
href="http://www.gnupg.org/aegypten/development.en.html">development
page of the &Auml;gypten Project</a>. Here, we concentrate on a
minimal install that gives you only the OpenPGP part of
&Auml;gypten.

<p>First, get the following packages (min. version in (parantheses))
<ol>
<li><a href="ftp://ftp.gnupg.org/gcrypt/alpha/libgcrypt/">libgcrypt (>= \
1.1.10)</a></li> <li><a href="ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/">libksba (>= \
0.4.5)</a></li> <li><a \
href="ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/newpg-0.9.2.tar.gz">newpg (>= \
0.9.2)</a></li> <li><a href="ftp://ftp.gnupg.org/gcrypt/alpha/gpgme/">gpgme 0.3.x (>= \
0.3.12)</a></li> <li><a \
href="ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/pinentry-0.6.5.tar.gz">pinentry (>= \
0.6.5)</a></li> </ol>
and unpack them in a directory with <code>tar xfz file.tar.gz</code>.
</p>

<p>Now, compile and install them (note that you need much stuff here
only to make newpg's <code>configure</code> script happy):
<pre>
cd libgcrypt &amp;&amp; ./configure --enable-maintainer-mode &amp;&amp; make \
&amp;&amp; su -c &quot;make install&quot; cd libksba &amp;&amp; ./configure \
--enable-maintainer-mode &amp;&amp; make &amp;&amp; su -c &quot;make install&quot; cd \
newpg  &amp;&amp; ./configure --enable-maintainer-mode &amp;&amp; make &amp;&amp; cd \
gpg-agent &amp;&amp; su -c &quot;make install&quot; cd gpgme  &amp;&amp; ./configure \
--enable-maintainer-mode --enable-gpgmeplug &amp;&amp; make &amp;&amp; su -c \
&quot;make install&quot; cd pinentry &amp;&amp; ./configure --enable-maintainer-mode \
&amp;&amp; make &amp;&amp; su -c &quot;make install&quot; </pre>
</p>

<p>That&apos;s it!</p>

<h3>Configure GnuPG to use gpg-agent</h3>

<p>If you updated <code>gpg</code> from 1.0.6 or earlier, please make
sure to set your own key to ultimate trust yourself and run
<pre>
gpg --rebuild-keydb-caches
</pre>
</p>

<p>Add this to your <code>~/.gnupg/option</code> (GnuPG 1.0.7) or \
<code>~/.gnupg/gpg.conf</code> (GnuPG 1.2.x): <pre>
use-agent
</pre>
</p>

Add a file <code>~/.gnupg/gpg-agent.conf</code> with the following contents:
<pre>
pinentry-program /usr/local/bin/pinentry-gtk
no-grab
default-cache-ttl 1800
</pre>
(replace the path to <code>pinentry-gtk</code> depending on the prefix
you gave to the <code>./configure</code>
above). <code>pinentry-qt</code> might also work, but
<code>pinentry-gtk</code> is confirmed to work.

Before using <code>gpg</code>, you need to start <code>gpg-agent</code>:
<pre>
eval &quot;$(gpg-agent --daemon)&quot;
</pre>
(<code>gpg-agent</code> outputs a little shell script that sets the
environment variable <code>GNUPG_AGENT_INFO</code>). You may want to
add this to your <code>~/.xsession</code> so that all programs see the
environment variable.

<h3>Configure KMail to use CryptPlugs</h3>

<p>Make sure you can work with <code>gpg</code> on the command line
(should use <code>gpg-agent</code> and <code>pinentry-gtk</code>).</p>

Configure KMail's GnuPG support until it works for you (KMail from
older betas will not be aware of <code>gpg-agent</code> running, so it
will ask for a passphrase itself. Enter a bogus one and hit OK, then
<code>pinentry</code> will come up to ask for the passphrase).

Start KMail, go to Settings-&gt;Configure
Kmail-&gt;Security-&gt;Crypto Plugins and add the
<code>gpgme-openpgp.so</code> plugin. Leave the update URL empty and
set a name of OpenPGP.

<p>You should now be able to choose the OpenPGP plugin for
signing/encrypting in KMail's composer.</p>

</body>
</html>

[Attachment #6 (application/pgp-signature)]
_______________________________________________
KMail Developers mailing list
kmail@mail.kde.org
http://mail.kde.org/mailman/listinfo/kmail

[prev in list] [next in list] [prev in thread] [next in thread] 