[ic] GPG how-to for hosted servers

Honest to Goodness interchange-users@interchange.redhat.com
Thu Feb 21 15:53:01 2002


I almost have encrypted email orders flowing flawlessy thanks to the
excellent how-to started by Patrick J. Walsh. I have a couple of things
to add and one last problem to work through.

My hosted store is also administered using cpanel and that is also the
name of the user that ic runs as. And my overworked admin is too busy to
stick a gpg key on cpanel's keyring. That's fine since I want to be able
change the key often to throw off any crackers anyway. To get the gpg
command line working I had to do a couple of simple things.

I set the permission on my keyring in
/home/user-account-name/.gnupg/pubring.gpg to world readable, and I set
the directory .gnupg to world executable. This allowed ic as user cpanel
to enter that directory and access the keyring. These settings might be
too liberal and I'll inch them back later to only what works.

The emails I am receiving are nicely decrypted by my gpg aware kmail
client but they contain 2 more gpg blocks within them. This is the
credit card number and I don't want it to be encrypted. So in
catalog.cfg in the Route main section I set credit_card to 0, and in
Preferences, Encryption I even set PGP_CC_KEY to blank and I still get
an encrpyted credit card number. Any suggestions?