blob: 918305fea9c2add8e56d7a11d473af2a768ff0bb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
<!--
$FML: post_check_pgp_signature.sgml,v 1.2 2005/09/24 13:53:41 fukachan Exp $
-->
<sect1 id="config.post.check.pgp">
<title>
Case Study: PGP/PGP Based Authentication In Posting
</title>
<caution>
<para>
Please install Crypt::OpenPGP perl module firstly. It is better to use
OS dependent pacakge system since Crypt::OpenPGP depends a lot of
other packages.
</para>
</caution>
<sect2>
<title>
Recipes
</title>
<qandaset>
<qandaentry>
<question>
<para>
PGP/PGP Based Authentication In Posting
</para>
</question>
<answer>
<para>
check_pgp_signature options enables PGP/GPG based auth.
If the degital signature is confirmed, the user can post articles.
<screen>
article_post_restrictions = reject_system_special_accounts
check_pgp_signature
reject
</screen>
This function is disabled by default.
Change article_post_restrictions if use.
</para>
</answer>
</qandaentry>
</qandaset>
</sect2>
<sect2>
<title>
Key Operations
</title>
<para>
PGP KEY RING directories are separeted for each purpose. For example,
the keyring dir for article pgp auth is
$ml_home_dir/etc/pgp-article-post-auth/ directory, the keyring dir for
remote administration by command mail is
$ml_home_dir/etc/pgp-admin-command-mail-auth/ directory.
</para>
<para>
Use pgp2, pgp5 and gpg commands to edit keys under them
It is useful to use the following fmlpgp wrapper command.
The wrapper sets up proper environment variables.
<screen>
[Example] operations for elena ML
fmlpgp elena --article-post-auth -kg
</screen>
the command line options available:
<screen>
--article-post-auth (auth for post article)
--command-mail-auth (auth for command mail)
--admin-command-mail-auth (auth for admin command mail)
--article-post-encrypt (article encryption)
</screen>
</para>
<para>
Available wrappers follow:
</para>
<para>
pgp2:
fmlpgp
</para>
<para>
pgp5:
fmlpgp5
fmlpgpe
fmlpgpk
fmlpgps
fmlpgpv
</para>
<para>
gpg:
fmlgpg
fmlgpgv
</para>
</sect2>
</sect1>
|
