Re: [mv] PGP (such a favorite subject)

[David Babler <dbabler@rigel.orionsys.com>]

******    message to minivend-users from David Babler <dbabler@Rigel.orionsys.com>     ******



On Thu, 18 May 2000, Barry Treahy wrote:

> ******    message to minivend-users from Barry Treahy <Barry@BSTent.com>     ******
> 
> David, I had problems getting PGP working and if it doesn't work, MV behaves badly.  I was using
> 5e of PGP and I needed a wrapper to define the environment variable PGPPATH prior to running pgp
> so pgp could find the security ring.  Basically:

Thanks, but nothing like that seems to fix whatever this problem is. It
would be useful if the "debug" output produced useful information, but it
doesn't. I either get the pgp invocation with no errors indicated (but no
encryption of any kind) or, now, all I get is a line saying:

"/usr/local/bin/pgp -fate owner@here.com: not found"

Where 'owner@here.com' is the store-owner's address (or public key id -
I've tried both, and yes, the command works fine either way when run by
the minivend account) and no pgp text at all, so it looks like whatever it
is that actually calls (or tries to call) pgp is mangling something beyond
my comprehension. I'm using pgp 2.6.2 BTW. The docs claim that the
"default" encryption program is "/usr/bin/pgpe" but I have no idea just
how it assumes that as a default, or how it is overwritten or what
incantation it performs with the various parameters in the catalog.cfg
('simple') file. So far, I've tried:

    Variable ENCRYPTOR "/usr/local/bin/pgp -fate owner@here.com"
    Route main encrypt_program __ENCRYPTOR__
    Route main pgp_cc_key "" -and- "owner@here.com"

with ENCRYPTOR as shown and appended with "2>/dev/null", and...

    Route main encrypt_program "/usr/local/bin/pgp -fate owner@here.com"
    Route main pgp_cc_key ""

-and-

    Route main encrypt_program "/usr/local/bin/pgp -fate %s"
    Route main pgp_cc_key "owner@here.com"

and probably several permutations that I have forgotten. All I can get is
either an "encrypted" attachment with the credit card number that is
actually plain text or an empty email or no email and an error as
indicated above. I'm running out of voodoo.

Since I'm trying to set this up as an ISP, this is set up with multi
access and the catalog owner's public key is added to the minivend user's
keyring. I suspect that many users are running this as all owned by the
same user, so that may be a factor here (nowhere in the docs, for
instance, do I see any references to having to add keys to keyrings).

-Dave

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list