Re: [mv] PGP (such a favorite subject)

[David Babler <dbabler@rigel.orionsys.com>]

******    message to minivend-users from David Babler <dbabler@Rigel.orionsys.com>     ******


Okay, problem solved, so to close the loop for the archive...

On Fri, 19 May 2000, David Babler wrote:

> On Thu, 18 May 2000, Barry Treahy wrote:
> > 
> > David, I had problems getting PGP working and if it doesn't work, MV behaves badly.  I was using
> > 5e of PGP and I needed a wrapper to define the environment variable PGPPATH prior to running pgp
> > so pgp could find the security ring.  Basically...

> Thanks, but nothing like that seems to fix whatever this problem is...
> I either get the pgp invocation with no errors indicated (but no
> encryption of any kind) or, now, all I get is a line saying:
> 
> "/usr/local/bin/pgp -fate owner@here.com: not found"
[...]
> ... So far, I've tried:
> 
>     Variable ENCRYPTOR "/usr/local/bin/pgp -fate owner@here.com"
>     Route main encrypt_program __ENCRYPTOR__
>     Route main pgp_cc_key "" -and- "owner@here.com"

The first problem is that the line in catalog.cfg does not like quotes.
Not sure where I got the idea they were needed. The error message is
somewhat misleading, since it just strips the quotes from the string and
says it can't find it, but by removing the quotes from the catalog.cfg
line for ENCRYPTOR, it can be made to work. In summary, the fix was:

1. The real line in catalog.cfg is:

  Variable ENCRYPTOR /usr/local/bin/pgp_sh -fate owner@here.com 2>/dev/null

   redirecting to /dev/null is required because otherwise it interprets it
   as an error no matter the exit status.

2. using a simple wrapper as suggested by Barry Treahy. Mine is written
   to /usr/local/bin/pgp_sh and is:

   #/bin/sh
   PGPPATH=/home/minivend/.pgp; export PGPPATH
   /usr/local/bin/pgp $1 $2 $3 $4 $5 $6

   In my case, PGPPATH has to point to the minivend user's .pgp directory
   so it can find the keys and keyring (the catalog owner(s) are not the
   minivend user).

I uncommented the debug log statements (and added a few extra, since it
was failing between log entries) in /usr/local/minivend/lib/Vend.pm
in order to see what was going on.
   
-Dave

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list