Re: using gpg with private keys from openssl certificates?

2008-12-18 Thread Morton D. Trace
arghman wrote: > I'm experimenting w/ using the "freemail" certificates from thawte & was just > wondering if there is a way I can use them with gpg (openpgp, NOT S/MIME). I > can figure out how to use openssl to extract the rsa public key / private > key from the exported PKCS12 file, but I'm not

Re: using gpg with private keys from openssl certificates?

2008-12-18 Thread John Clizbe
Robert J. Hansen wrote: > arghman wrote: >> So (and here's where I'm less clear) if I wanted to link the assertions made >> by my X.509 certificates and my OpenPGP keys, there's no way to >> automatically do this. But if I were to use the same private/public key in >> both cases, I can assert to a

Re: [Enigmail] Different gpg2 versions in gpg2 --version and when signing with TB+EM - Linux Ubuntu 8.10_64bits

2008-12-18 Thread Charly Avital
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Patrick Brunschwig wrote: [...] >> This is what I have found, I am not quoting all the output, just the >> beginning. > >> Initializing Enigmail service ... EnigmailAgentPath=/usr/bin/gpg2 > > I think this says it all: Enigmail uses GnuPG from /us

Re: How encrypt data/text stream instead of a file?

2008-12-18 Thread David Shaw
On Thu, Dec 18, 2008 at 09:49:41AM -0800, don rhummy wrote: > OK, so I need to put the data into the out stream. Can you give some sample > code from C doing this? I'm not 100% clear on the order, etc of calling gpg > and sending the data to "out." Thanks! I don't want to do a full pipe/fork/exe

Re: How encrypt data/text stream instead of a file?

2008-12-18 Thread don rhummy
OK, so I need to put the data into the out stream. Can you give some sample code from C doing this? I'm not 100% clear on the order, etc of calling gpg and sending the data to "out." Thanks! --- On Thu, 12/18/08, David Shaw wrote: > From: David Shaw > Subject: Re: How encrypt data/text stre

Re: How encrypt data/text stream instead of a file?

2008-12-18 Thread Robert J. Hansen
David Shaw wrote: > GnuPG is designed to be able to accept a stream or a file. My bad. I was reading that as the OP needed GnuPG to function as a stream cipher. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinf

Re: How encrypt data/text stream instead of a file?

2008-12-18 Thread David Shaw
On Dec 18, 2008, at 1:14 AM, don rhummy wrote: All the examples of using GnuPG are of giving it a local filename to encrypt or decrypt. How do I pass it data, either as a stream or byte by byte? GnuPG is designed to be able to accept a stream or a file. To do a stream instead of a file,

Re: using gpg with private keys from openssl certificates?

2008-12-18 Thread Robert J. Hansen
arghman wrote: > So (and here's where I'm less clear) if I wanted to link the assertions made > by my X.509 certificates and my OpenPGP keys, there's no way to > automatically do this. But if I were to use the same private/public key in > both cases, I can assert to a third party that the entity in

Re: using gpg with private keys from openssl certificates?

2008-12-18 Thread arghman
Faramir-2 wrote: > > Rather than using the same key pair with x.509 and PGP, I would > suggest to use your x.509 certificate as a "proof" of your identity, and > if people accept that as a valid proof, then they would sign your pgp > key too. > Interesting, I'll look into that... >> The pa

Re: How encrypt data/text stream instead of a file?

2008-12-18 Thread Robert J. Hansen
don rhummy wrote: > How do I pass it data, either as a stream or byte by byte? Painfully. While technically possible, it is almost certainly a better idea to use some other technology. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gn

Re: using gpg with private keys from openssl certificates?

2008-12-18 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert J. Hansen escribió: > Andre Amorim wrote: >>> X.509 (the standard used by freemail certs) and OpenPGP use the same >>> underlying algorithms, but the protocols are dramatically different. >>> Making them interoperate is hard, and is usually no