GPG email woes

craftymind

I'm following a tutorial from a book for sending secure email.
I've tried modifying it to what I believe it should look like, but have hit a wall getting it to work.
some things I'm not sure on.
1. putenv("GNUPGHOME=../.gnupg");
The php file that is sending the mail is located in the directory av123.
The directory .gnup is located in the same folder as av123.
I don't really understand if I'm doing this correctly or not.

The command line is definitely not working.
The example uses
$command = "/usr/local/bin/gpg -a \
but doesn't say whether or not I need to change this to target a path on my server.
I can get the encryption to work on a file if I run the command by accessing my server through ssh, so I'm assuming the --recipient and --encrypt commands are set correctly in my php.
I do know the tempnam, fopen, and fwrite are all working correctly.

$to_email = "sean@mustardlab.com";

  // Tell gpg where to find the key ring
  putenv("GNUPGHOME=../.gnupg");

  //create a unique file name 
  $infile = tempnam("/images_dynamic/", "pgp");  

  $outfile = $infile.".asc";

  //write the user's text to the file
  $fp = fopen($infile, "w");
  fwrite($fp, $body);
  fclose($fp);

  //set up our command
  $command =  "/usr/local/bin/gpg -a \\\\
               --recipient 'Sean Christmann <sean@mustardlab.com>' \\\\
               --encrypt -o $outfile $infile";

  // execute our gpg command 
  system($command, $result);

  //delete the unencrypted temp file
  unlink($infile);

Please help

craftymind

bump

I hope someone can help me with this.

keakathleen

Wow, maybe I should have read your post before posting mine. I am also having GPG woes. I do know that on my web server I can run GPG globally. Thus, on the command line, I need no directory. I just type gpg -a --recipient...

As for your .gnupg folder, if it is in your av123 folder then make sure you have the whole pathway to get to your av123 directory. For example, /home/foo/www/av123/.gnupg or whatever pathway your web server uses. Since your PHP script is probably executing as nobody, you need the entire pathway so that the server knows where to find your keyring.

I do know that you definitely have to run this script using a secure server through an SSL connection. I have to use the same web server that the shopping carts use in my case. However, after this, I am stuck. My result from my system command comes back as 2. However, I can also run the GPG command on my command line no problem. If you get this to work, let me know too. I am thinking that there is some sort of permission issue dealing with my .gnupg folder. Like, the web server is executing the script as nobody and nobody does not have access to my keyring folder.

Are you using the PHP and MySQL Web Development book?

keakathleen

Another problem I was also having is you have to sign your key by more than just your own key. I simply made a signing key only and signed my public key with my signing only key.

craftymind

kea, thanks for the info

I was just now emailed this document.
http://www.zend.com/zend/tut/tutorial-brogdon.php

which you may want to look at, I've kinda put this project back a day so I haven't had time to look at it yet and see if it will help us.

I'm also waiting for an email from someone who has done this sort of stuff before so I'll be sure to let you know anything I find out.