From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Angel de Vicente Newsgroups: gmane.emacs.help Subject: Re: Verifying signed mail in Gnus Date: Mon, 31 Oct 2022 12:30:35 +0000 Message-ID: <878rkwxjis.fsf@gmail.com> References: <87a65cz3xl.fsf@gmail.com> <87pme8w6w5.fsf@disroot.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="21827"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) To: help-gnu-emacs@gnu.org Cancel-Lock: sha1:fPYIMsSuqzJUCagC+IDgAF9wBfs= Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Mon Oct 31 13:31:08 2022 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1opTwa-0005VI-AA for geh-help-gnu-emacs@m.gmane-mx.org; Mon, 31 Oct 2022 13:31:08 +0100 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1opTwN-0000ws-Dn; Mon, 31 Oct 2022 08:30:55 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1opTwK-0000wa-9s for help-gnu-emacs@gnu.org; Mon, 31 Oct 2022 08:30:54 -0400 Original-Received: from ciao.gmane.io ([116.202.254.214]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1opTwI-0003Li-Nh for help-gnu-emacs@gnu.org; Mon, 31 Oct 2022 08:30:52 -0400 Original-Received: from list by ciao.gmane.io with local (Exim 4.92) (envelope-from ) id 1opTwG-0005Cf-Hu for help-gnu-emacs@gnu.org; Mon, 31 Oct 2022 13:30:48 +0100 X-Injected-Via-Gmane: http://gmane.org/ Received-SPF: pass client-ip=116.202.254.214; envelope-from=geh-help-gnu-emacs@m.gmane-mx.org; helo=ciao.gmane.io X-Spam_score_int: 3 X-Spam_score: 0.3 X-Spam_bar: / X-Spam_report: (0.3 / 5.0 requ) BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, FORGED_GMAIL_RCVD=1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, NML_ADSP_CUSTOM_MED=0.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: "help-gnu-emacs" Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane-mx.org+geh-help-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.help:140535 Archived-At: --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, Akib Azmain Turja writes: > Angel de Vicente writes: >> but now I got an e-mail from someone using S/MIME, and despite reading >> that GnuPG should be able to handle S/MIME certificates, I'm not sure >> how to do it. Is there something similar to `epa-search-keys` but for >> certificates? I guess since we are dealing with certificates here, I >> don't need to get the individual certificate of this person, but just >> the certificate for the Certification Authority, but how to find the >> certificate, and how to do the equivalent of the signing above, so trust >> will go from "undefined" to "full"? This part I found how to do. Basically Gnus+GnuPG already imported the certificate for me, which I could verify by doing "gpgsm -k", and then I just had to set the root CA as trustworthy in the file "~/.gnupg/trustlist.txt"=20 With that, I now get (trust full) for this person. ,---- | [[S/MIME Signed Part:Good signature from | DD733F6DFA9EBA0303F699xxxxxxxxxxxxxxxxxx /CN=3Dxxxxx xxxxxx xxxxxx | xxxxxxxx/O=3DInstituto de Astrofisica de Canarias/STREET=3DCalle V=C3=ADa | L=C3=A1ctea, s\x2fn/ST=3DSanta Cruz de Tenerife/C=3DES (trust full)]] `---- Actually, it looks like S/MIME is much more convenient than GPG, since I only have to deal with giving trust to the root CA, and then all certificates given by that CA will have full trust immediately? Maybe when digital certificates were not so common, PGP/MIME was a better option, but now it looks like S/MIME should be easier for key/certificates management? (I have one day of experience with this, so don't take my word for it :-) ) > How did you make Gnus display those nice messages? My Gnus doesn't do > that (but ask me for password for decrypting mails). I think you get those by setting gnus-buttonized-mime-types: '(gnus-buttonized-mime-types '("multipart/encrypted" "multipart/signed")) Cheers, =2D-=20 =C3=81ngel de Vicente -- (GPG: 0x64D9FDAE7CD5E939) Research Software Engineer (Supercomputing and BigData) Instituto de Astrof=C3=ADsica de Canarias (https://www.iac.es/en) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQHUBAEBCAA+FiEEGQyM5qDLpMcIDuMKZNn9rnzV6TkFAmNfv+sgHGFuZ2VsLnZp Y2VudGUuZ2Fycmlkb0BnbWFpbC5jb20ACgkQZNn9rnzV6TngbQv/Rsjh/Vd0eYj6 G4YS0MqodHeBMWpIsYa6mBBa1gGSi5e4YIZwnLBUWqOkFXfzjAaxqCDrbtWAR2wr MsAZJha1RpWOH8RxsZShASf1EXteJodfhKfCUlNPJ6ZUQq9s9hXumw+eTWZA0tSC EVDSMw3B4hxMiCiHjFzAF/MaGYt9PxiK1fFzyTYSgVAzVywskHSzFPZxGpkPbs65 F8ej68xzEwfpVKEITmbpjM5xjka6OH28vRUSWjtFjs8MVzv+vC1Ch4FzOQ4+FUMs bhX444FnhpxPjpxhgJS3DSZs+wqJQwnpt4WggR6IVAAl+KYB+7gx3NYCEAD28g7a y8QL6hxAJxkrc9mRApNE+JbjFPfTuHJ4kxCMXTDKQOtmQiVlf1lKAk0cKICz+vYI c+pWBcLCFsIbjdnuID2LpYAHMpUSi30CxMxJ+9X67PJlyhcn03tHAsD39RWelwFi MipiTg4NBeKuUG0Pg95Y+c6fhiQ6hrUFYL97L1G+h8qNKNSeVI9U =ZehU -----END PGP SIGNATURE----- --=-=-=--