From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/44261
Path: main.gmane.org!not-for-mail
From: Nicolas Kowalski <Nicolas.Kowalski@imag.fr>
Newsgroups: gmane.emacs.gnus.general
Subject: Re: smime setup [was: Re: nnimap + mailcrypt]
Date: Fri, 12 Apr 2002 09:41:22 +0200
Sender: owner-ding@hpc.uh.edu
Message-ID: <vqoads9mkil.fsf@astazou.imag.fr>
References: <Pine.LNX.4.44.0204111702290.15921-100000@yxa.extundo.com>
	<vqo7knes1xx.fsf@astazou.imag.fr> <ilu3cy2xmv4.fsf@extundo.com>
	<vqo3cy2b4zz.fsf@astazou.imag.fr> <ilubscqvy3h.fsf@extundo.com>
	<vqo1ydmxb4r.fsf@astazou.imag.fr> <iluelhmugnv.fsf@extundo.com>
NNTP-Posting-Host: localhost.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: main.gmane.org 1018597392 30044 127.0.0.1 (12 Apr 2002 07:43:12 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Fri, 12 Apr 2002 07:43:12 +0000 (UTC)
Return-path: <owner-ding@hpc.uh.edu>
Original-Received: from malifon.math.uh.edu ([129.7.128.13])
	by main.gmane.org with esmtp (Exim 3.33 #1 (Debian))
	id 16vviC-0007oT-00
	for <ding-account@gmane.org>; Fri, 12 Apr 2002 09:43:12 +0200
Original-Received: from sina.hpc.uh.edu ([129.7.128.10] ident=lists)
	by malifon.math.uh.edu with esmtp (Exim 3.20 #1)
	id 16vvgv-0000ff-00; Fri, 12 Apr 2002 02:41:53 -0500
Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Fri, 12 Apr 2002 02:42:03 -0500 (CDT)
Original-Received: from sclp3.sclp.com (qmailr@sclp3.sclp.com [209.196.61.66])
	by sina.hpc.uh.edu (8.9.3/8.9.3) with SMTP id CAA24743
	for <ding@hpc.uh.edu>; Fri, 12 Apr 2002 02:41:50 -0500 (CDT)
Original-Received: (qmail 24788 invoked by alias); 12 Apr 2002 07:41:25 -0000
Original-Received: (qmail 24783 invoked from network); 12 Apr 2002 07:41:25 -0000
Original-Received: from imag.imag.fr (129.88.30.1)
  by gnus.org with SMTP; 12 Apr 2002 07:41:25 -0000
Original-Received: from ormelune.imag.fr (ormelune.imag.fr [129.88.43.35])
	by imag.imag.fr (8.11.6/8.11.6) with ESMTP id g3C7fNm25218;
	Fri, 12 Apr 2002 09:41:23 +0200 (MEST)
Original-Received: from astazou.imag.fr.imag.fr (astazou [129.88.43.102])
          by ormelune.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id g3C7eat07728
          ; Fri, 12 Apr 2002 09:40:37 +0200 (MET DST)
Original-To: ding <ding@gnus.org>
X-Face: #v^9{p"~.e3TDs~r\<SxBL^%CaX6JVh~g8kd]c1y~!tL!)!{yD-.A&Y`}cu/!,)VC}~|dz*
 K-zyyNbl2jh9zemO~-g'nTpXO32]$z~+a_6dp#b=(B"+20axb1%udr5eDqyDNCIxK`QkX;A^<#Tr""
 j@HC^4U;mGLScG4ZcSy;GgUmZ5i%B$/P|
In-Reply-To: <iluelhmugnv.fsf@extundo.com> (Simon Josefsson's message of
 "Thu, 11 Apr 2002 22:25:08 +0200")
Original-Lines: 42
User-Agent: Gnus/5.090006 (Oort Gnus v0.06) XEmacs/21.1 (Cuyahoga Valley,
 i686-pc-linux)
Precedence: list
X-Majordomo: 1.94.jlt7
Xref: main.gmane.org gmane.emacs.gnus.general:44261
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:44261

Simon Josefsson <jas@extundo.com> writes:

> Nicolas Kowalski <Nicolas.Kowalski@imag.fr> writes:
>
>> As I wrote before, I will recheck all my Gnus configuration. Perhaps
>> could someone send me an excerpt of his/her setup for smime ? Anyone ?
>
> I guess this won't help you much, but in theory the following should
> be enough.  It seems to be for me.  The first one set up trust with
> some CAs for verify, and the second indicate my identity for sign, the
> rest is UI stuff.
>
>  '(smime-CA-directory "~/.certs/")
>  '(smime-keys (quote (("simon@josefsson.org" "~/jas.key+cert") ("sj@extundo.com" "~/sj.key+cert"))))
>  '(gnus-buttonized-mime-types (quote ("multipart/encrypted" "multipart/signed")))
>  '(mm-decrypt-option (quote always))
>  '(mm-verify-option (quote always))

I now use something similar :


 '(smime-CA-directory "~/perso/certs/")
 '(smime-CA-file "\"~/perso/certs/cacert.pem\"")
 '(smime-keys (quote (("Nicolas.Kowalski@imag.fr" "~/perso/certs/niko.pem" ))))
 '(mm-decrypt-option (quote always))
 '(mm-verify-option (quote always))


> I think RedHat's OpenSSL defaults to use some CAs that is shipped with
> RedHat, so the first one probably isn't needed if you run RedHat.

I need it so (Debian GNU/Linux).

I think I understand the backtrace now : when I compose a new message
('m'), if I try to use `smime-sign-buffer', I get an empty buffer (all
text is erased) in message mode. This explains the 

`(args-out-of-range "" 0) 


ie. there is nothing to encode....