RE: Migrating from PGP to GPG question

2010-03-09 Thread Smith, Cathy
Folks A quick question about signing the imported PGP public keys. One of the options under gpg --edit-key is enable. Do I need to enable the key or is that the default? Thanks for your help. Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory Phone:  509.375.2687 F

RE: Migrating from PGP to GPG question

2010-03-09 Thread Smith, Cathy
Folks I'm at the next step of signing the keys and creating the trust model. I've signed 3 keys and set the trust. When I list the keys, I get the following: [...@app1 ~]$ gpg --list-keys gpg: checking the trustdb gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0

Re: Migrating from PGP to GPG question

2010-03-05 Thread John Clizbe
Daniel Kahn Gillmor wrote: > On 03/05/2010 01:30 AM, Smith, Cathy wrote: >> The gpg --list-sig shows that the keys are signed. Do I need to create a >> new signature key, and re-sign all the public keys that I imported? > > I think the simplest thing for you to do is to modify the ownertrust of >

RE: Migrating from PGP to GPG question

2010-03-05 Thread Smith, Cathy
-users-boun...@gnupg.org] On Behalf Of David Shaw Sent: Friday, March 05, 2010 6:00 AM To: John W. Moore III Cc: Smith, Cathy Subject: Re: Migrating from PGP to GPG question On Mar 5, 2010, at 7:39 AM, John W. Moore III wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > L

Re: Migrating from PGP to GPG question

2010-03-05 Thread Daniel Kahn Gillmor
On 03/05/2010 01:30 AM, Smith, Cathy wrote: > The gpg --list-sig shows that the keys are signed. Do I need to create a > new signature key, and re-sign all the public keys that I imported? I think the simplest thing for you to do is to modify the ownertrust of your old signing key on the new in

Re: Migrating from PGP to GPG question

2010-03-05 Thread David Shaw
On Mar 5, 2010, at 7:39 AM, John W. Moore III wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Laurent Jumet wrote: >> >> Hello Smith, ! >> >> "Smith, Cathy" wrote: >> >>> I've tried using the --yes option without success to suppress this >>> interactive prompt doesn't pop up.

Re: Migrating from PGP to GPG question

2010-03-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Laurent Jumet wrote: > > Hello Smith, ! > > "Smith, Cathy" wrote: > >> I've tried using the --yes option without success to suppress this >> interactive prompt doesn't pop up. This encryption does need to run in a >> batch job. What do I need t

RE: Migrating from PGP to GPG question

2010-03-04 Thread Laurent Jumet
Hello Smith, ! "Smith, Cathy" wrote: > I've tried using the --yes option without success to suppress this > interactive prompt doesn't pop up. This encryption does need to run in a > batch job. What do I need to do in order all interactive prompts are > surpressed, and that the assumption is

RE: Migrating from PGP to GPG question

2010-03-04 Thread Smith, Cathy
Email: cathy.sm...@pnl.gov -Original Message- From: Smith, Cathy Sent: Thursday, March 04, 2010 10:09 PM To: gnupg-users@gnupg.org Subject: RE: Migrating from PGP to GPG question Folks I'm at the next step. The PGP public keys imported without a problem. However, they ar

RE: Migrating from PGP to GPG question

2010-03-04 Thread Smith, Cathy
Phone:  509.375.2687 Fax:    509.375.2330 Email: cathy.sm...@pnl.gov -Original Message- From: gnupg-users-boun...@gnupg.org [mailto:gnupg-users-boun...@gnupg.org] On Behalf Of Smith, Cathy Sent: Thursday, February 25, 2010 2:18 PM To: gnupg-users@gnupg.org Subject: RE: Migrating from PGP t

RE: Migrating from PGP to GPG question

2010-03-04 Thread Smith, Cathy
Folks This may related to my earlier question about signing the imported PGP public keys. When I run gpg --list-sig, the imported public keys show that they are signed. However, when I run a test to encrypt a file with a key, I get the following message: [...@hrapp1 /tmp]$ gpg -e -r 0xEC3A

Re: Migrating from PGP to GPG question

2010-03-03 Thread vedaal
On Mar 2, 2010, at 9:18 PM, Smith, Cathy wrote: > gpg: WARNING: key 96B12847 contains preferences for unavailable > gpg: algorithms on these user IDs: > gpg: "pss": preference for cipher algorithm 1 > gpg: it is strongly suggested that you update your preferences and > gpg: re-d

Re: Migrating from PGP to GPG question

2010-03-03 Thread Laurent Jumet
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hello Smith, ! "Smith, Cathy" wrote: > The gpg --import option worked without any problems for importing the > OpenPGP public keyring. When I try to import the secret keyring, I get the > following message: > [app1 ~/.gnupg]$ gpg --import se

Re: Migrating from PGP to GPG question

2010-03-02 Thread David Shaw
On Mar 2, 2010, at 9:18 PM, Smith, Cathy wrote: > Folks > > The gpg --import option worked without any problems for importing the OpenPGP > public keyring. When I try to import the secret keyring, I get the following > message: > > [app1 ~/.gnupg]$ gpg --import secring.skr > gpg: key B4A839CC

Re: Migrating from PGP to GPG question

2010-03-02 Thread Robert J. Hansen
> What are the ramifications of just saying "yes" to the prompt - update > preferences? How potentially serious is the algorithm mismatch? I'd like to > better understand exactly what is happening. Ever since the very early days, PGP has supported a cryptographic algorithm called IDEA. Back

RE: Migrating from PGP to GPG question

2010-02-25 Thread Laurent Jumet
Hello Smith, ! "Smith, Cathy" wrote: > Another question about this migration. Is it possible to do a mass import > of a single user's keyring or do I have to do it for each individual key. > I've not been able to find anything so far about anything that addresses > this. I would try gpg

Re: Migrating from PGP to GPG question

2010-02-25 Thread David Shaw
On Feb 25, 2010, at 5:17 PM, Smith, Cathy wrote: > Folks > > Another question about this migration. Is it possible to do a mass import of > a single user's keyring or do I have to do it for each individual key. I've > not been able to find anything so far about anything that addresses this.

RE: Migrating from PGP to GPG question

2010-02-25 Thread Smith, Cathy
Folks Another question about this migration. Is it possible to do a mass import of a single user's keyring or do I have to do it for each individual key. I've not been able to find anything so far about anything that addresses this. Thanks. Cathy --- Cathy L. Smith IT Engineer Pacific Nort

RE: Migrating from PGP to GPG question

2010-02-25 Thread Smith, Cathy
[mailto:jroll...@finestructure.net] Sent: Wednesday, February 24, 2010 8:11 PM To: Smith, Cathy; gnupg-users@gnupg.org Subject: Re: Migrating from PGP to GPG question On Wed, 24 Feb 2010 18:46:33 -0800, "Smith, Cathy" wrote: > We are starting to migrate from OpenPGP to Gnu

RE: Migrating from PGP to GPG question

2010-02-25 Thread Jameson Rollins
On Wed, 24 Feb 2010 20:33:14 -0800, "Smith, Cathy" wrote: > We are migrating from OpenPGP which is a freeware version of PGP. Sorry for > the confusion. I'm not familiar with OpenPGP, the software. I'm familiar with the PGP Corporation's implementation (which I think is just called "PGP"), but

RE: Migrating from PGP to GPG question

2010-02-24 Thread Smith, Cathy
Rollins [mailto:jroll...@finestructure.net] Sent: Wednesday, February 24, 2010 8:11 PM To: Smith, Cathy; gnupg-users@gnupg.org Subject: Re: Migrating from PGP to GPG question On Wed, 24 Feb 2010 18:46:33 -0800, "Smith, Cathy" wrote: > We are starting to migrate from OpenPGP to Gnu

Re: Migrating from PGP to GPG question

2010-02-24 Thread Jameson Rollins
On Wed, 24 Feb 2010 18:46:33 -0800, "Smith, Cathy" wrote: > We are starting to migrate from OpenPGP to GnuPG. Just for clarification, GnuPG is software tool that is actually an implementation of the OpenPGP specification [0]. OpenPGP is not actually a piece of software itself, nor is GnuPG a spe

Re: Migrating from PGP to GPG question

2010-02-24 Thread David Shaw
On Feb 24, 2010, at 9:46 PM, Smith, Cathy wrote: > Folks > > We are starting to migrate from OpenPGP to GnuPG. One of the batch jobs I > have to convert uses: > pgp +force > > This is supposed to assume a "yes" to any interactive questions. I wasn't > clear after reading the man pages