PGPENVELOPE(1)

NAME
pgpenvelope - Filter for Pine to handle GnuPG operations

DESCRIPTION
The purpose of pgpenvelope is to allow easy use of GnuPG to encrypt/sign/decrypt/verify messages using Pine's sending/displaying filters.

USAGE
Simply make the appropriate filter entries in one's Pine configuration, and run Pine as normal. When sending mail, choose the pgpenvelope_encrypt filter. Additionally, one can use it as a procmail filter, as described below.

  Pine configuration
These settings should be made in the Pine configuration menu. To access this, from the main menu, select Setup, then Config.

    display-filters =
      _BEGINNING("-----BEGIN PGP ")_ (path_to)/pgpenvelope_decrypt

    sending-filters =
      (path_to)/pgpenvelope_encrypt _RECIPIENTS_

Please note that each filter is one full line, and there are spaces between any words which are at the end of one line and the beginning of the next. Make sure you include the space at the end of "-----BEGIN PGP ", or else you might get into infinite loops with Pine. Also make sure you substitute (path_to) with the absolute path to the pgpenvelope executable. Make sure you remove the parentheses, and have a space between pgpenvelope_encrypt and _RECIPIENTS_.

For instance, one could the following for a sending-filter:

"/usr/local/bin/pgpenvelope_encrypt _RECIPIENTS_"

  Procmail configuration
Put the following lines near or at the top of your $HOME/.procmailrc.

    :0 BDc
    * ^-----BEGIN PGP
    pgpenvelope-backup

    :0 bfw
    | (path_to)/pgpenvelope_decrypt --filter

Again, make sure you substitute (path_to) with the absolute path to the pgpenvelope executable. These lines will store a backup of signed messages into the mailbox signed-backup, in addition to verifying a signed message. Having these lines lets pgpenvelope verify signed messages once so you don't have to everytime you open a signed email. This filter does not affect encrypted messages.

Your message will be recovered in its original state by procmail if pgpenvelope or GnuPG fails, but the backup is still handy for purposes such as forwarding mail to others and allowing them to verify the message's signature.

FILES

$HOME/.pgpenvelope/prefs
$HOME/.pgpenvelope/prefs.default
    prefs contains your preferences; this is the file read by pgpenvelope. prefs.default contains documented defaults, and is currently re-created if a differing version of the defaults file is found from the running version of pgpenvelope.

TIPS
Use the procmail bit. It's quite nice and handy.

If you wish to have pgpenvelope_encrypt as your default sending filter, select

    [X] compose-send-offers-first-filter

in one's pine configuration and have pgpenvelope_encrypt be the first filter listed in your filter list.

This is not directly related to pgpenvelope, but if you define a keyserver in $HOME/.gnupg/options GnuPG will automatically download unidentified keys when verifying signatures.

SECURITY NOTES
Both pgpenvelope_encrypt and pgpenvelope_encrypt use temporary files to be able to pass off large messages to GnuPG without buffering problems. The temporary files are created from the call IO::File->new_tmpfile() (see "new_tmpfile" in IO::File for details>. Any temporary files created are zeroed out after use. Zeroing out files should not be taken as assurance that the file is not recoverable.

Your passphrase is entered directly into GnuPG, so there is no need to worry about pgpenvelope remembering it.

BUGS

  Pine 4.32
Pine 4.32 has a bug in it where quotes don't work inside Pine's display-filter setting. This means that filter recommended above will not work. Instead, one should use:

  _BEGINNING(-----BEGIN)_ (path_to)/pgpenvelope_decrypt

This bug was fixed in Pine 4.33, so upgrading Pine is another option.

AUTHOR
Frank J. Tobin <ftobin@uiuc.edu>

OpenPGP fingerprint:
    4F86 3BBB A816 6F0A 340F 6003 56FF D10A 260C 4FA3

COPYRIGHT
Copyright (C) 2000 Frank J. Tobin <ftobin@uiuc.edu>

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, visit the following URL: http://www.gnu.org/copyleft/gpl.html