LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   GPGP for Linux (https://www.linuxquestions.org/questions/linux-software-2/gpgp-for-linux-473425/)

HappyTux 08-15-2006 03:23 PM

Quote:

Originally Posted by Gins
I want to send the public key to a keyserver.

Let us say I want to send to the following keyserver.

http://www.keyserver.net

I guess the following command is the correct one.

[root@c83-250-110-112 nissanka]$ gpg --keyserver search.keyserver.net --send-key gorky@outgun.com

Please tell me if I am wrong.

You would want the ID of the key like ABC12EFG not the email address associated with it and just use the address of the keyserver like the pgp.mit.edu where you got the original key from earlier in the thread.

Quote:

-----------------------------------------------------

I know the commad to armour the key. Is it necessary? I guess you don't have to do it if you just send to a public key server. Because anyone could go to a public key server and collect the key.

[root@c83-250-110-112 nissanka]$ gpg --armor --export gorky@outgun.com

I have a hunch that armouring means creating a file which has .asc at the end.
Please tell me whether it is necessary to armour the key.

Yes the armour is used when exporting to a file not keyserver and again use the keyid not email address.

Gins 08-16-2006 02:48 AM

Thanks Happy Tux for taking time to reply me again.
I just want a small clarification on exporting and importing.

When you download or rather get a public key from a key server, it is not importing.

When you attach the downloaded public key to your key ring, it is called importing.
Please tell me if I am wrong.

[root@c83-250-110-112 nissanka]#gpg --import -name_of_the_file

HappyTux 08-16-2006 08:49 AM

Quote:

Originally Posted by Gins
Thanks Happy Tux for taking time to reply me again.
I just want a small clarification on exporting and importing.

When you download or rather get a public key from a key server, it is not importing.

When you attach the downloaded public key to your key ring, it is called importing.
Please tell me if I am wrong.

[root@c83-250-110-112 nissanka]#gpg --import -name_of_the_file

It is the same thing just different method the --recv-keys gets the key from the keyserver then imports it into your keyring so it is importing just not using the --import command to do it.

Gins 08-16-2006 09:38 AM

Thanks Happy Tux for helping me again.

I went to the following server and submitted my key.

http://keyserver.veridis.com:11371/import.jsp

If you look at the above site, you will see the 'Browse' button.

I used that button and went deep into the folder where I have this program.
I found a file called ' pubring.asc '. I double clicked it. Then the file appeared on the screen. Afterwards I clicked the 'submit' button

It was successful.

Now if you search in that server, my key is not there.

What went wrong?

If you searched the public key of ' Nissanka De Silva', it should be there.

However, it is not there.

HappyTux 08-16-2006 09:54 AM

Quote:

Originally Posted by Gins
Thanks Happy Tux for helping me again.

I went to the following server and submitted my key.

http://keyserver.veridis.com:11371/import.jsp

If you look at the above site, you will see the 'Browse' button.

I used that button and went deep into the folder where I have this program.
I found a file called ' pubring.asc '. I double clicked it. Then the file appeared on the screen. Afterwards I clicked the 'submit' button

It was successful.

Now if you search in that server, my key is not there.

What went wrong?

If you searched the public key of ' Nissanka De Silva', it should be there.

However, it is not there.

That page only gives me the option to sumbit an exported armored signature file there is no browse however on www.veridis.com you get a search in the keyring and your is not there. If you want a simple way to have your key distributed the use gpg --keyserver pgp.mit.edu --send-key <KEY_ID> which will send your key to one of the main keyservers and in turn once it gets mirrored through the network of keyservers will be available everywhere.

Gins 08-16-2006 10:06 AM

[root@c83-250-110-112 gnupg-1.4.4]# gpg --keyserver pgp.mit.edu --send-key Nissanka De Silva
gpg: "Silva" not a key ID: skipping
gpg: "De" not a key ID: skipping
gpg: "Nissanka" not a key ID: skipping
[root@c83-250-110-112 gnupg-1.4.4]#

Why didn't this work?

This is my key --> 6D090EE9
My key ID is --> Nissanka De Silva
Am I wrong?

---------------------------------------------------------------

Now I tried with the key. Please read the following:

[root@c83-250-110-112 gnupg-1.4.4]# gpg --keyserver pgp.mit.edu --send-key 6D090EE9
gpg: sending key 6D090EE9 to pgp.mit.edu
[root@c83-250-110-112 gnupg-1.4.4]#

I don't think it worked.

HappyTux 08-16-2006 10:29 AM

Quote:

Originally Posted by Gins
[root@c83-250-110-112 gnupg-1.4.4]# gpg --keyserver pgp.mit.edu --send-key Nissanka De Silva
gpg: "Silva" not a key ID: skipping
gpg: "De" not a key ID: skipping
gpg: "Nissanka" not a key ID: skipping
[root@c83-250-110-112 gnupg-1.4.4]#

Why didn't this work?

Because you are still trying to send/use the wrong part of the key.
Quote:

This is my key --> 6D090EE9 <<<<<----------- This is the key_id.
My key ID is --> Nissanka De Silva
Am I wrong?

---------------------------------------------------------------

Now I tried with the key. Please read the following:

[root@c83-250-110-112 gnupg-1.4.4]# gpg --keyserver pgp.mit.edu --send-key 6D090EE9
gpg: sending key 6D090EE9 to pgp.mit.edu
[root@c83-250-110-112 gnupg-1.4.4]#

I don't think it worked.
Now this succeeded because you used the proper key_id (6D090EE9) it would give you an error like in the first part if it had not worked.

Edit:And just to test your key is already available on MIT keyserver it just needs to get into the rest of the keyserver network when the next mirroring happens.

Code:

gpg --keyserver pgp.mit.edu --recv-key 6D090EE9
gpg: requesting key 6D090EE9 from hkp server pgp.mit.edu
gpg: key 6D090EE9: public key "Nissanka De Silva (Le Grand Homme) <nissanka@swipnet.se>" imported
gpg: Total number processed: 1
gpg:              imported: 1


Gins 08-16-2006 10:34 AM

Now I searched it in the following server.

http://keyserver.veridis.com:11371/s...&submit=Search

I got the following:

Your search - Nissanka De Silva - did not match any public keys.

If I succeeded, it should be there.
What is the problem?

HappyTux 08-16-2006 10:51 AM

Quote:

Originally Posted by Gins
Now I searched it in the following server.

http://keyserver.veridis.com:11371/s...&submit=Search

I got the following:

Your search - Nissanka De Silva - did not match any public keys.

If I succeeded, it should be there.
What is the problem?

Now assuming that veridis.com is part of the public keyserver network then it will definitely take some time for the key to get to it depending as to when it syncs its keys with the other keyservers, it is not going to happen immediately.

Gins 08-16-2006 11:11 AM

Thanks Happy Tux for the reply. You have taken pains to help me. I take my hat off for all the support.

Yesterday I downloaded your public key. Please read the following:

[root@c83-250-110-112 gnupg-1.4.4]# wget http://users.eastlink.ca/~stephencormier/publickey.asc
--18:01:37-- http://users.eastlink.ca/~stephencormier/publickey.asc
=> `publickey.asc'
Resolving users.eastlink.ca... 24.222.0.104
Connecting to users.eastlink.ca|24.222.0.104|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1,860 (1.8K) [text/plain]

100%[==================================================================>] 1,860 --.--K/s

18:01:38 (92.56 KB/s) - `publickey.asc' saved [1860/1860]

[root@c83-250-110-112 gnupg-1.4.4]#
----------------------------------------------------

Now I just want to test with someone by sending an email. However, you have disabled your email address. I respect to your privacy. Some people don't want to publish their email addressess on public forums like this.

In any case, I can simply import your public key to my key ring.

By the way, I searched you on that server under the name 'Stephen Cormier'. You were not there.

HappyTux 08-16-2006 11:40 AM

Quote:

Originally Posted by Gins
Thanks Happy Tux for the reply. You have taken pains to help me. I take my hat off for all the support.

Yesterday I downloaded your public key. Please read the following:

[root@c83-250-110-112 gnupg-1.4.4]# wget http://users.eastlink.ca/~stephencormier/publickey.asc
--18:01:37-- http://users.eastlink.ca/~stephencormier/publickey.asc
=> `publickey.asc'
Resolving users.eastlink.ca... 24.222.0.104
Connecting to users.eastlink.ca|24.222.0.104|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1,860 (1.8K) [text/plain]

100%[==================================================================>] 1,860 --.--K/s

18:01:38 (92.56 KB/s) - `publickey.asc' saved [1860/1860]

[root@c83-250-110-112 gnupg-1.4.4]#
----------------------------------------------------

Now I just want to test with someone by sending an email. However, you have disabled your email address. I respect to your privacy. Some people don't want to publish their email addressess on public forums like this.

In any case, I can simply import your public key to my key ring.

By the way, I searched you on that server under the name 'Stephen Cormier'. You were not there.

Sure you can send me an email my address that I use with the key are listed in the key itself either of them are fine to send too. I doubt my key would be there yet all this gpg talk finally got me to upload my key to the pgp.mit.edu yesterday instead of just providing a link to it on my webspace in my email signature.

Gins 08-16-2006 11:50 AM

Thanks Happy Tux.
I successfully imported your key to my key ring.
---------------------------------------------------------
[root@c83-250-110-112 gnupg-1.4.4]# gpg --import publickey.asc
gpg: key 28BAD9AF: public key "Stephen Cormier <s.cormier@gmx.net>" imported
gpg: Total number processed: 1
gpg: imported: 1
[root@c83-250-110-112 gnupg-1.4.4]#




[root@c83-250-110-112 gnupg-1.4.4]# gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub 1024D/6D090EE9 2006-08-15 [expires: 2056-08-02]
uid Nissanka De Silva (Le Grand Homme) <nissanka@swipnet.se>
sub 1024g/AD4FDA0A 2006-08-15 [expires: 2056-08-02]

pub 1024D/0B16D094 1997-10-04
uid Dilum Ranatunga <ranatnga@princeton.edu>
sub 2048g/BF167CB3 1997-10-04

pub 1024D/28BAD9AF 2004-03-29
uid Stephen Cormier <s.cormier@gmx.net>
uid Stephen Cormier <scormier@gmx.net>
sub 2048g/FAD240A1 2004-03-29

[root@c83-250-110-112 gnupg-1.4.4]#
---------------------------------------------------------

You have permitted me to send a message. I would do so. Not write now. I have to attend a few other things. I will try either on this Saturday or Sunday.
[ Did you see my nick name? I am Le Grand Homme. I speak some French too.]

Gins 08-16-2006 02:01 PM

Happy Tux

I hope this key signing is not essential to send you a message.
Please tell me if I must do it.

HappyTux 08-16-2006 03:18 PM

Quote:

Originally Posted by Gins
Happy Tux

I hope this key signing is not essential to send you a message.
Please tell me if I must do it.

I speak little french I could maybe read a menu in a restaurant and order that is about it. The use of my key when sending to me would be to encrypt a file/message to send so only I could decrypt it with my private key/password. When sending you would want to do what is called signing the message with your public key.

Gins 08-17-2006 12:22 PM

Happy Tux

Let us say the name of the file that I want to send is ' test1 '

I believe the following command will encrypt that file

[root@c83-250-110-112 nissanka]# gpg -e -r scormier@gmx.net test1

The above will create a file with a .gpg ending. I will send it to you.

Please tell me if I am wrong.


All times are GMT -5. The time now is 03:44 PM.