Using epg

Using epg

[Simon Josefsson]

I'm trying to use epg with Gnus.  First, if we are moving to epg as
the default PGG backend, how about the patch below?

Second, I get failures when signing.  In *Messages* I get:

byte-code: Sign failed: ((key-expired (expiration-time 15540 . 4506)) (key-expired (expiration-time 15540 . 4506)) (key-expired (expiration-time 15540 . 4506)) (key-expired (expiration-time 15540 . 4506)) (key-expired (expiration-time 15540 . 4506)) (key-expired (expiration-time 15540 . 4506)))

I suspect it is because I have some expired keys, and EPG somehow
picked the wrong key to attempt to sign with, but I don't know how to
debug this?

FWIW, GnuPG automatically selects the right key to use, and avoids the
expired ones.

--- mml2015.el	05 Sep 2006 11:53:36 +0200	7.23
+++ mml2015.el	05 Sep 2006 12:46:09 +0200	
@@ -41,6 +41,11 @@
 (defvar mml2015-use (or
 		     (progn
 		       (ignore-errors
+			 (require 'epg))
+		       (and (fboundp 'epg-sign-string)
+			    'epg))
+		     (progn
+		       (ignore-errors
 			;; Avoid the "Recursive load suspected" error
 			;; in Emacs 21.1.
 			(let ((recursive-load-depth-limit 100))
@@ -59,7 +64,7 @@
 				 (fboundp 'mc-cleanup-recipient-headers)
 				 'mailcrypt)))
   "The package used for PGP/MIME.
-Valid packages include `pgg', `gpg' and `mailcrypt'.")
+Valid packages include `epg', `pgg', `gpg' and `mailcrypt'.")
 
 ;; Something is not RFC2015.
 (defvar mml2015-function-alist

Re: Using epg

[Jochen Küpper]

Simon Josefsson <jas-2g3DOctPbj9BDgjK7y7TUQ@public.gmane.org> writes:

> Second, I get failures when signing.  In *Messages* I get:

[...]

Same (?) effect here:
,----[*Messages*]
| byte-code: Sign failed: ((key-expired (expiration-time 16007 . 32095)))
`----

Greetings,
Jochen
-- 
Einigkeit und Recht und Freiheit                http://www.Jochen-Kuepper.de
    Liberté, Égalité, Fraternité                GnuPG key: CC1B0B4D
        (Part 3 you find in my messages before fall 2003.)

Re: Using epg

[Jochen Küpper]

Jochen Küpper <jochen-+It19tn3Rl9sbm7dSapR3bNAH6kLmebB@public.gmane.org> writes:

> Simon Josefsson <jas-2g3DOctPbj9BDgjK7y7TUQ@public.gmane.org> writes:
>
>> Second, I get failures when signing.  In *Messages* I get:
>
> [...]
>
> Same (?) effect here:
> ,----[*Messages*]
> | byte-code: Sign failed: ((key-expired (expiration-time 16007 . 32095)))
> `----

Oops.  I could solve this by setting mml2015-signers.

,----[ C-h v mml2015-signers RET ]
| mml2015-signers is a variable defined in `mml2015.el'.
| Its value is 
| ("xxxxxxxxxxxxxxx")
| 
| 
| Documentation:
| A list of your own key ID which will be used to sign a message.
| 
| You can customize this variable.
| 
| [back]
`----

Sorry for the noise.

Greetings,
Jochen
-- 
Einigkeit und Recht und Freiheit                http://www.Jochen-Kuepper.de
    Liberté, Égalité, Fraternité                GnuPG key: CC1B0B4D
        (Part 3 you find in my messages before fall 2003.)

Re: Using epg

[Daiki Ueno]

>>>>> In <9ebqpu7z8e.fsf@doze.jochen-kuepper.de> 
>>>>>	Jochen Küpper <jochen@fhi-berlin.mpg.de> wrote:
> Jochen Küpper <jochen@fhi-berlin.mpg.de> writes:

> > Simon Josefsson <jas@extundo.com> writes:
> >
> >> Second, I get failures when signing.  In *Messages* I get:
> >
> > [...]
> >
> > Same (?) effect here:
> > ,----[*Messages*]
> > | byte-code: Sign failed: ((key-expired (expiration-time 16007 . 32095)))
> > `----

> Oops.  I could solve this by setting mml2015-signers.

I've just fixed it in Gnus CVS.

The old behavior was that if mml2015-signers is not set Gnus lookups a
private key by sender's email address.  Since it can easily be done by
a hook, I simply removed this feature.

Regards,
-- 
Daiki Ueno

Re: Using epg

[Simon Josefsson]

Daiki Ueno <ueno@unixuser.org> writes:

>>>>>> In <9ebqpu7z8e.fsf@doze.jochen-kuepper.de> 
>>>>>>	Jochen Küpper <jochen@fhi-berlin.mpg.de> wrote:
>> Jochen Küpper <jochen@fhi-berlin.mpg.de> writes:
>
>> > Simon Josefsson <jas@extundo.com> writes:
>> >
>> >> Second, I get failures when signing.  In *Messages* I get:
>> >
>> > [...]
>> >
>> > Same (?) effect here:
>> > ,----[*Messages*]
>> > | byte-code: Sign failed: ((key-expired (expiration-time 16007 . 32095)))
>> > `----
>
>> Oops.  I could solve this by setting mml2015-signers.
>
> I've just fixed it in Gnus CVS.
>
> The old behavior was that if mml2015-signers is not set Gnus lookups a
> private key by sender's email address.  Since it can easily be done by
> a hook, I simply removed this feature.

It seems to works fine for me now.

Thanks,
Simon

Re: Using epg

[Daiki Ueno]

>>>>> In <87bqpu7fkc.fsf@latte.josefsson.org> 
>>>>>	Simon Josefsson <jas@extundo.com> wrote:
> I'm trying to use epg with Gnus.  First, if we are moving to epg as
> the default PGG backend, how about the patch below?

The following check would be better

(condition-case nil
    (progn
      (require 'epg-config)
      (epg-check-configuration (epg-configuration))
      t)
  (error))

to prefer PGG on the circumstances where GnuPG (>= 1.4.3) is not
installed.

Regards,
-- 
Daiki Ueno

Re: Using epg

[Simon Josefsson]

Daiki Ueno <ueno@unixuser.org> writes:

>>>>>> In <87bqpu7fkc.fsf@latte.josefsson.org> 
>>>>>>	Simon Josefsson <jas@extundo.com> wrote:
>> I'm trying to use epg with Gnus.  First, if we are moving to epg as
>> the default PGG backend, how about the patch below?
>
> The following check would be better
>
> (condition-case nil
>     (progn
>       (require 'epg-config)
>       (epg-check-configuration (epg-configuration))
>       t)
>   (error))
>
> to prefer PGG on the circumstances where GnuPG (>= 1.4.3) is not
> installed.

I installed it, thanks!