verifying gpg signature

verifying gpg signature

[Stephen Leake]

I'm just getting starting using gpg with email. I can sign outgoing
messages (with mml-secure-sign), but I don't see how to verify the
sigatures of incoming messages.

The Gnus manual is silent on this; it talks about verifying regions,
but I don't see how to apply that to a mail message. I tried 'apropos
verify', and didn't see anything helpful.

There must be a simple keystroke that verifies a signature attached to
a mail message.

-- 
-- Stephe

Re: verifying gpg signature

[Stephen Leake]

Stephen Leake <stephen_leake@stephe-leake.org> writes:

> I'm just getting starting using gpg with email. I can sign outgoing
> messages (with mml-secure-sign), but I don't see how to verify the
> sigatures of incoming messages.
>
> The Gnus manual is silent on this; it talks about verifying regions,
> but I don't see how to apply that to a mail message. I tried 'apropos
> verify', and didn't see anything helpful.
>
> There must be a simple keystroke that verifies a signature attached to
> a mail message.

More info:

The signature is shown as:

[2. Digital signature --- application/pgp-signature; signature.asc]...

I can hit <return> on that part, and it does nothing. Tracing that
with the elisp debugger, apparently I'm supposed to add
that mime type to gnus-article-treat-types, and then a handler to
gnus-treatment-function-alist?

The function mml2015-verify seems to be what I need to call; how to I
tell Gnus to call it?

-- 
-- Stephe

Re: verifying gpg signature

[Adam Sjøgren]

On Sun, 14 Mar 2010 03:57:48 -0400, Stephen wrote:

> I can hit <return> on that part, and it does nothing. Tracing that
> with the elisp debugger, apparently I'm supposed to add
> that mime type to gnus-article-treat-types, and then a handler to
> gnus-treatment-function-alist?

> The function mml2015-verify seems to be what I need to call; how to I
> tell Gnus to call it?

All I have in my .gnus these days concerning GPG is this:

  (setq mm-verify-option 'known
        mm-decrypt-option 'known)
  (setq gnus-buttonized-mime-types '("multipart/signed" "multipart/encrypted"))

And I get automatic checking of signatures, decryption etc.

What version of Gnus are you running? (I'm running the development
version, so your milage may vary).


  Best regards,

    Adam

-- 
 "riverrun, past Eve and Adam's, from swerve of shore         Adam Sjøgren
  to bend of bay, brings us by a commodius vicus of      asjo@koldfront.dk
  recirculation back to Howth Castle and Environs."

Re: verifying gpg signature

[Stephen Leake]

asjo@koldfront.dk (Adam Sjøgren) writes:

> On Sun, 14 Mar 2010 03:57:48 -0400, Stephen wrote:
>
>> I can hit <return> on that part, and it does nothing. Tracing that
>> with the elisp debugger, apparently I'm supposed to add
>> that mime type to gnus-article-treat-types, and then a handler to
>> gnus-treatment-function-alist?
>
>> The function mml2015-verify seems to be what I need to call; how to I
>> tell Gnus to call it?
>
> All I have in my .gnus these days concerning GPG is this:
>
>   (setq mm-verify-option 'known
>         mm-decrypt-option 'known)
>   (setq gnus-buttonized-mime-types '("multipart/signed" "multipart/encrypted"))
>

I had already set mm-verify-option and mm-decrypt-option.

> What version of Gnus are you running?

Well, it seems I was running Emacs 22.2 (blush). But now I'm running
Emacs 23.1. When I open an email with a signature attachment, that mime
part is no longer shown (it was with Emacs 23.1), and nothing else
happens.

Setting gnus-buttonized-mime-types displays the status in the button
headers, which is not what I'd expect from a button, but works for me.

--
-- Stephe

Re: verifying gpg signature

[Stephen Leake]

Stephen Leake <stephen_leake@stephe-leake.org> writes:

> asjo@koldfront.dk (Adam Sjøgren) writes:
>
>> On Sun, 14 Mar 2010 03:57:48 -0400, Stephen wrote:
>>
>>> I can hit <return> on that part, and it does nothing. Tracing that
>>> with the elisp debugger, apparently I'm supposed to add
>>> that mime type to gnus-article-treat-types, and then a handler to
>>> gnus-treatment-function-alist?
>>
>>> The function mml2015-verify seems to be what I need to call; how to I
>>> tell Gnus to call it?
>>
>> All I have in my .gnus these days concerning GPG is this:
>>
>>   (setq mm-verify-option 'known
>>         mm-decrypt-option 'known)
>>   (setq gnus-buttonized-mime-types '("multipart/signed" "multipart/encrypted"))
>>
>
> I had already set mm-verify-option and mm-decrypt-option.
>
>> What version of Gnus are you running?
>
> Well, it seems I was running Emacs 22.2 (blush). But now I'm running
> Emacs 23.1. When I open an email with a signature attachment, that mime
> part is no longer shown (it was with Emacs 23.1), and nothing else
> happens.
>
> Setting gnus-buttonized-mime-types displays the status in the button
> headers, which is not what I'd expect from a button, but works for me.

Although it would be nice if the button action was "fetch the key if it
is unknown".

-- 
-- Stephe

Re: verifying gpg signature

[Adam Sjøgren]

On Sun, 04 Apr 2010 21:40:53 -0400, Stephen wrote:

> Although it would be nice if the button action was "fetch the key if it
> is unknown".

GnuPG does this for me when I set this option:

,----[ ~/.gnupg/gpg.conf excerpt ]
| 
| keyserver-options auto-key-retrieve
| 
`----


  Best regards,

    Adam

-- 
 "But they are all following you!                             Adam Sjøgren
  No, they ain't, I'm just in front"                     asjo@koldfront.dk

Re: verifying gpg signature

[Stephen Leake]

asjo@koldfront.dk (Adam Sjøgren) writes:

> On Sun, 04 Apr 2010 21:40:53 -0400, Stephen wrote:
>
>> Although it would be nice if the button action was "fetch the key if it
>> is unknown".
>
> GnuPG does this for me when I set this option:
>
> ,----[ ~/.gnupg/gpg.conf excerpt ]
> | 
> | keyserver-options auto-key-retrieve
> | 
> `----

Excellent!

-- 
-- Stephe