Re: smime setup [was: Re: nnimap + mailcrypt]

[Nicolas Kowalski <Nicolas.Kowalski@imag.fr>]

Simon Josefsson <jas@extundo.com> writes:

> Nicolas Kowalski <Nicolas.Kowalski@imag.fr> writes:
>
>> As I wrote before, I will recheck all my Gnus configuration. Perhaps
>> could someone send me an excerpt of his/her setup for smime ? Anyone ?
>
> I guess this won't help you much, but in theory the following should
> be enough.  It seems to be for me.  The first one set up trust with
> some CAs for verify, and the second indicate my identity for sign, the
> rest is UI stuff.
>
>  '(smime-CA-directory "~/.certs/")
>  '(smime-keys (quote (("simon@josefsson.org" "~/jas.key+cert") ("sj@extundo.com" "~/sj.key+cert"))))
>  '(gnus-buttonized-mime-types (quote ("multipart/encrypted" "multipart/signed")))
>  '(mm-decrypt-option (quote always))
>  '(mm-verify-option (quote always))

I now use something similar :


 '(smime-CA-directory "~/perso/certs/")
 '(smime-CA-file "\"~/perso/certs/cacert.pem\"")
 '(smime-keys (quote (("Nicolas.Kowalski@imag.fr" "~/perso/certs/niko.pem" ))))
 '(mm-decrypt-option (quote always))
 '(mm-verify-option (quote always))


> I think RedHat's OpenSSL defaults to use some CAs that is shipped with
> RedHat, so the first one probably isn't needed if you run RedHat.

I need it so (Debian GNU/Linux).

I think I understand the backtrace now : when I compose a new message
('m'), if I try to use `smime-sign-buffer', I get an empty buffer (all
text is erased) in message mode. This explains the 

`(args-out-of-range "" 0) 


ie. there is nothing to encode....