On 09/05/18 19:44, Rudolf Sykora wrote:
> I want a small thing, hence Thunderbird is out.
> Similarly, mutt does way too many things (it's not just MUA),
> similarly (al)pine. (And both use ncurses, which I also
> want to avoid).
> 
> For me mmh, mblaze or similar (eg. plan9 tools) is the way to go.
> Even snail is way too complex.

Agreed, it depends on your use case, but for sure Thunderbird is a
heavy-weight.  Turn on message filtering, and it has a particularly
nasty memory-leak I find: brings my desktop at work (with 16GB RAM) to
its knees after about 3 days running.

> So for now I sign and send email (prepared in message.txt) with this:
> 
> openssl smime -sign -in message.txt -text -signer sec/certCVUT.mycrt.pem \
> -inkey sec/certCVUT.mykey.pem -certfile sec/certCVUT.caChain.pem \
> -from rudolf.syk...@cvut.cz -to rsyk...@disroot.org \
> -subject "HI" | sendmail -t
> 
> where certCVUT.mycrt.pem contains my certificate,
> certCVUT.mykey.pem contains my private key, and
> certCVUT.caChain.pem contains the chain of ca's.
> All these can be obtained from the .p12 file using
> appropriate openssl commands.

As I say, it depends on whether you're after S/MIME or OpenPGP; and
Tony's advice was for OpenPGP.  Thunderbird on its own can do S/MIME.

For completeness; signing and encrypting an email using GnuPG and sendmail:

prepare message.txt; headers.txt, then

$ gpg --encrypt --clear-sign -a -r rsyk...@disroot.org < message.txt \
  | cat headers.txt - \
  | sendmail -t

would probably do the trick.  (Untested)
-- 
Stuart Longland (aka Redhatter, VK4MSL)

I haven't lost my mind...
  ...it's backed up on a tape somewhere.

Reply via email to