Re: Scripting GPG without retaining keys

2016-04-05 Thread Werner Koch
On Tue, 5 Apr 2016 16:59, j...@sprig.gs said: > Is this a failure in my understanding of the gpg command line, or have > I missed some fundamental part of the documentation somewhere? auto-key-retrieve This option enables the automatic retrieving of keys from a keyserver when _verif

Scripting GPG without retaining keys

2016-04-05 Thread Jon Spriggs
Hi all, I'm trying to write a script which encrypts against keys retrieved from a keyserver but doesn't cache them. I've got the following: gpg --no-options --trust-model always --no-default-keyring --keyserver ldap://keyserver.example.com --keyserver-options auto-key-retrieve --recipient u...@e

Re: Scripting GPG Encryption

2011-08-10 Thread David Tomaschik
On 08/10/2011 12:32 PM, Smith, Greg E wrote: > > Hello, > > > > I am having an issue where we have set a custom home directory for GPG > and configured the registry entry for HKCU\GNU\GNUPG\HomeDir=... The > script functions fine when someone is logged into the system with the > user account exe

Scripting GPG Encryption

2011-08-10 Thread Smith, Greg E
Hello, I am having an issue where we have set a custom home directory for GPG and configured the registry entry for HKCU\GNU\GNUPG\HomeDir=... The script functions fine when someone is logged into the system with the user account executing the script. However the script fails, when no one is

Re: scripting gpg

2011-05-06 Thread Jon Drukman
On Wed, May 4, 2011 at 5:44 PM, Jerome Baum wrote: > On Thu, May 5, 2011 at 02:19, Jon Drukman wrote: > >> putenv('HOME=/tmp/gpg'); >> @mkdir('/tmp/gpg'); >> > > At this point, you should be watching carefully. What if another user has > created this directory to spoof the key? > There are no o

Re: scripting gpg

2011-05-05 Thread Jerome Baum
On Thu, May 5, 2011 at 19:21, Jon Drukman wrote: > On Wed, May 4, 2011 at 5:44 PM, Jerome Baum wrote: > >> Again, what if the keyring is already in place? Could even be yourself -- >> you create the keyring once, import the public key at the time, then later >> update the public key and import a

Re: scripting gpg

2011-05-04 Thread Jerome Baum
On Thu, May 5, 2011 at 02:19, Jon Drukman wrote: > putenv('HOME=/tmp/gpg'); > @mkdir('/tmp/gpg'); > At this point, you should be watching carefully. What if another user has created this directory to spoof the key? Use the appropriate command for creating a unique temporary directory. Should be

Re: scripting gpg

2011-05-04 Thread Jon Drukman
David Shaw jabberwocky.com> writes: > You're looking for the "--trust-model always" option. Add that to your options, and the trust model > becomes "if it's on my keyring, it's fully trusted". It's up to you to make sure that only keys that are fully > trusted are on your keyring, of course. :

Re: scripting gpg

2011-05-04 Thread David Shaw
On May 4, 2011, at 7:01 PM, Jon Drukman wrote: > I need to do the following: > > - when a new machine is created, automatically import a public key and give it > full trust > > - be able to encrypt files with that public key without any interactive > prompting (from a shell script/cron job) > >

scripting gpg

2011-05-04 Thread Jon Drukman
I need to do the following: - when a new machine is created, automatically import a public key and give it full trust - be able to encrypt files with that public key without any interactive prompting (from a shell script/cron job) in other words, a machine has to go from virgin state (OS + softw