LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 04-09-2004, 04:36 PM   #1
Ruishanko
LQ Newbie
 
Registered: Apr 2004
Posts: 3

Rep: Reputation: 0
Pgp


Hi

Sorry to ask a really dumb question...

(How) Can I import my PGP keys from XP to use in Mandrake/ Kmail (or mozilla)?

I e-mailed all my keys from XP to myself in Mozilla (and Kmail) and seemed to be able to import, but when I try to decrypt/encrypt mail, I get an error (keys not found...)

I actually prefer Kmail from an an aesthetic point of view, but I'll take anything that works well with PGP.

I'm clearly missing something...

I am running Mandrake 9.2 via VMware virtual machine on XP...

Cheers
Gavin

Last edited by Ruishanko; 04-09-2004 at 04:38 PM.
 
Old 10-07-2004, 01:27 PM   #2
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Just wondering if you ever got this going? I'm in a similar boat.
 
Old 10-07-2004, 01:59 PM   #3
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
How similar is similar?

One of the key things to bear in mind is
that you need to export the SECRET keys.


Cheers,
Tink
 
Old 10-07-2004, 02:04 PM   #4
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Yes, well, I was just about to post the question but I might as well start here.

Running XP Pro with 2 or 3 PGP keys that I'd like to export to my 2nd PC running RH Linux, particularly for use with KMail. Basically, I want to be able to encrypt/decrypt emails using the same keys I use in XP. (I'm not so concerned with PGP'g any files, etc...really only email via KMail app).

Thanks!
 
Old 10-07-2004, 02:16 PM   #5
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
And what exactly is the question or problem you
have with that? :)



Cheers,
Tink
 
Old 10-07-2004, 02:21 PM   #6
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Sorry for being unclear!

My question is HOW do I accomplish my listed goals.

I've copied the *.asc files from XP to linux.
I ran 'gpg --import file1.asc'
I ran 'gpg --import file2.asc'

Message states they were imported. Says total number processed & imported is '1' each time. (sounds good)

I also copied these *.asc files into the ~./gnupg directory.

Is that it or is there more to be done?

When I go into KMail: Settings --> Configure Kmail --> Identities --> Advanced and click on the 'change' button for 'OpenPGP key' field, the error states: "You either dont have GnuPG/PGP installed or you chose not to use GnuPG/PGP."

So...what did I do wrong?

Thanks.
 
Old 10-07-2004, 02:32 PM   #7
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
What does
gpg --list-secret-keys
give you?


Cheers,
Tink
 
Old 10-07-2004, 02:36 PM   #8
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Pretty much nothing:

[xxx@yyyy .gnupg]$ gpg --list-secret-keys
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
[xxx@yyyy .gnupg]$


Running 'gpg --list-public-keys' and 'gpg --list-keys' both show the 2 keys I imported.


Also, FYI:

[xxx@yyyy .gnupg]$ gpg --version
gpg (GnuPG) 1.2.6
Copyright (C) 2004 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256
Compression: Uncompressed, ZIP, ZLIB, BZIP2
[xxx@yyyy .gnupg]$

Last edited by dav7500; 10-07-2004 at 02:37 PM.
 
Old 10-07-2004, 02:48 PM   #9
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
Which brings us back to the question how things
were exported from PGP ...

Obviously GPG has only got the public keys
which won't do you any good.


Cheers,
Tink
 
Old 10-07-2004, 02:56 PM   #10
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Ok. I exported again from XP's PGP program, making sure to check off the option to 'include private key.' This created File3.asc. I copied this to the ~./gnupg dir on Linux. Then ran:

gpg --import File3.asc
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: key 0E4FE7C8: secret key imported
gpg: key 0E4FE7C8: public key "bla bla bla" imported
gpg: Total number processed: 2
gpg: imported: 1
gpg: secret keys read: 1
gpg: secret keys imported: 1

Which is better than before since it now includes secret keys. Now, I get this:

gpg --list-secret-keys
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
/home/dr2778/.gnupg/secring.gpg
-------------------------------
sec 1024D/0E4FE7C8 2003-07-03 bla bla bla
ssb 2048g/9D0BEAA3 2003-07-03


Yes....progress!! (thank you)

Now, I still get the same error in KMail. :-(
How would I get KMail to start using these keys?

------------------------------------------------------------

Other good news: I encrypted a text file in XP and was able to successfully decrypt it on Linux using 'gpg --decrypt filename.txt'

Last edited by dav7500; 10-07-2004 at 02:59 PM.
 
Old 10-07-2004, 03:05 PM   #11
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
Ok. I got it! In KMail, under the Configure window, I went to the SECURITY icon in left column. Then, from the OpenPGP tab, the 'Encryption Tool' option was set to "dont use..." and after I changed it to "Autodetect" it selected "GnuPG - ... "
Then, I read some encrypted emails, entered my passphrase and pow! There it was...decrypted email. Woohoo!

Thanks for your awesome help. I really appreciate it.
(and it was much easier than reading the numerous websites & How To guides on PGP)
 
Old 10-07-2004, 03:12 PM   #12
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
Ummm ... which version KMail are you using,
what encryption method did you tell it to use?

One thing is that you need to add trusts to
your own keys after having imported them,
otherwise KMail won't accept them.


It works just dandy here :} ... even using the
Aegypten plugin for PGP/MIME ...



Cheers,
Tink
 
Old 10-07-2004, 03:17 PM   #13
dav7500
Member
 
Registered: Feb 2004
Posts: 45

Rep: Reputation: 15
KMail 1.5 (Using KDE 3.1-13 Red Hat).

I have no idea what encryption method. I only did what I typed in this post...literally.
Dont know about 'adding trusts' either. KMail seems to be working ok.

When I decrypted my test text file, it mentioned below, which may answer your encryption method question but also confirms your point of adding trusts, etc.

--------------------------------------------------------------------------------------------
gpg --decrypt testfile.txt
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information

You need a passphrase to unlock the secret key for
user: "bla bla bla"
2048-bit ELG-E key, ID 9D0BEAA3, created 2003-07-03 (main key ID 0E4FE7C8)

gpg: encrypted with 2048-bit ELG-E key, ID 9D0BEAA3, created 2003-07-03
"bla bla bla"
gpg: Signature made Thu 07 Oct 2004 03:57:32 PM EDT using DSA key ID 0E4FE7C8
gpg: Good signature from "bla bla bla"
gpg: checking the trustdb
gpg: no ultimately trusted keys found
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 2101 673A 53EF 1BCB 83FD DE16 7CD3 81FA 0E4F E7C8
gpg: WARNING: message was not integrity protected
--------------------------------------------------------------------------------------------

So, I guess I have "2048-bit ELG-E key" encryption?

How would I address these two points?

gpg: no ultimately trusted keys found

gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
 
Old 10-07-2004, 03:59 PM   #14
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,978
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
gpg --edit-key <name>
and then "sign"

man gpg
for details ;)


Cheers,
Tink
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Something like pgp-disk? Cornholio Linux - General 6 01-15-2005 08:13 AM
pgp keys vexer Linux - Security 1 05-11-2004 11:06 PM
PGP signature sopiaz57 Linux - Security 2 11-25-2003 09:30 AM
Sign pgp facs Linux - General 4 09-25-2003 03:20 AM
PGP or GNUPG SkYzOpReNiCk Linux - Software 1 02-28-2001 04:49 PM


All times are GMT -5. The time now is 03:12 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration