> Hi Greg!

   > If I understand correctly, they already use S/MIME, right?  So, probably
   > this choice is not yours to make, but I recommend OpenPGP over S/MIME,
   > as explained in a blog entry:
   > https://blogs.fsfe.org/jens.lechtenboerger/2013/12/23/openpgp-and-smime/

I disagree. Smime is much easier for most users to use. Using a maybe
technical superior solution but having nobody to communicate with is a
mayor drawback.

   > If you get that error you can be certain that openssl code was involved,
   > which is a bug.



   > That should do it.  Alternatively, you could put
   >    (require 'epg)
   > into .emacs (early on, before other encryption-related code gets called).


   > My recommendation is to stay away from openssl.  Use gpgsm.
I agree I never got openssl to work while gpgsm works without any
problems.
If you like I can send  my private setting off list

Uwe Brauer