Title: gpg101 Subject: Notes on using for gpg on linux ####################################################### #### Yet another gpg howto ####http://homepages.inf.ed.ac.uk/da/id/gpg-howto.shtml ####################################################### #### Outlook GNUgpg integration ####http://trilug.org/~chrish/gpg-outlook.php ####################################################### ####################################################### #### GPG Global Directory ####https://keyserver-beta.pgp.com/vkd/GetWelcomeScreen.event ####################################################### #Config files located: ls -laF /home/jstile/.gnupg/ # Step 1. Create the initial key gpg --gen-key => (1) DSA and ElGamal (default) => default keysize is 1024 bits => 0 = key does not expire => Real name: John Stile => Email address: john@stilen.com => Comment: Unix Admin with Stile => You selected this USER-ID: "John Stile (Unix Admin with Stile) " => Enter Passfrase => Reenter Passfrase # Step 2. Share your public key (armour-export): gpg --armour --export uid > uid-pubkey.asc # Step 3. Import a friends public key (import-trust-lsign-save) # Add it on the key ring gpg --import tr_fullhart_public_key.asc # Trust his key gpg --edit kayos@kayos.org Command> trust 4 = I trust fully # Sign the key Command> lsign Command> save # Step 4. Encrypting text gpg --encrypt -r john@stilen.com --armour < input.txt -o output.txt # Step 5. Decrypt the text gpg --decrypt -r kayos@kayos.org < encyrpted_message.txt ####################################################### #How to make use of a public keyserver near you. host -l pgp.net |grep www | perl -e '@_=; print @_;' host -l pgp.net |grep www | perl -e 'while { print /.*\w(\W$)/; }' ####################################################### # Sending your key to the server 1. Edit ~/.gnupg/options, setting the keyservers to use keyserver wwwkeys.nl.pgp.net keyserver wwwkeys.1.us.pgp.net keyserver wwwkeys.2.us.pgp.net keyserver wwwkeys.3.us.pgp.net 2. Publish your key to the servers gpg --send-keys john@stilen.com 3. Verify that the key is out there http://www.cam.ac.uk.pgp.net/pgpnet/pks-commands.html#extract Server: 1.us - wwwkeys.1.us.pgp.net Search String: John Stile Click "Do The Search!" ####################################################### # Sign a friends key:and upload to public key server 1. Search a public key server for friends key http://gpgkeys.mit.edu Search for your friend and verify the ID 2. Get the key gpg --recv-key 0xE9C2A61D 3. List the keys to see if you really downloaded it, and verify the fingerprint gpg --list-keys --fingerprint 4. Check finger print, check, sign , save gpg --edit-key 0xE9C2A61D > fpr > sign > save 5. Upload the signed key back to server gpg --send-key 0xE9C2A61D #######################################################