PGP Email.

Kold

Hi.

I have a script that sends details to a mailbox, but the person it is being sent to wants it encrypted using PGP.

The server is CentOS 4.3, PHP, Apache etc.

I can probably use exec() to get the encrypted code, but I'm not really sure about it all.

Will the mail format be the same? I.E. is the email message [ using mail() ] body just the encrypted text? i.e. are different headers needed?

Any advice will be very much appreciated!!
Thanks!
K.

MarkR

Investigate how to use the PGP (Or indeed, GPG) command line interface. Once you've established how to send a PGP encrypted / signed (as necessary) message using the CLI, and can send it from the server to your own mail client and be able to read it, then you will be in a position to consider integrating it into PHP.

My thinking would be that you'd probably need some complicated options to pick up the public and private keys from the appropriate place (private keys are stored in the user's home directory, which will not be where you want them to be in a production web server). You'll also need to store the private keys unencrypted as the user won't be able to enter a password inside the server process.

Mark

Kold

Hi.
Its been a while but I'm finally round to working again.

I am using gpg, seems easy enough. I am only dealing with public keys for the time being.

I have a problem!!

echo exec("gpg --help"); // Works absolutely fine
echo exec("gpg --list-keys"); //Returns NOTHING in the browser.

gpg --list-keys works fine in the shell.

Also, PHP is running as 'nobody' [ found using exec("whoami") ] I have worked around this by adding nobody to another group and the public keys are in that group. When I log in as nobody (was tricky but I managed it :-) ) everything worked seemingly fine.

Does anyone have any ideas??
Thanks!

Kold

It looks like it was all due to permissions! I'm not entirely sure how, but it works now.

My next problem is that I need to pass a long string to be encrypted, however it will contain spaces, quotes etc. This, I believe, gets interpreted in the shell as regex's etc. How can I escape everything that will affect the shell?

Thanks!