commit 1a1ca0efebc076154540878acaaab9aa33474354 parent 7dd35a4a5fcd454f5f602f61cd6584e53de9c6d4 Author: hhvn <dev@haydenvh.com> Date: Tue, 6 Apr 2021 02:53:40 +0100 .c/n/gpg: get encrypt(+sign) working Diffstat:
| M | .config/neomutt/gpg | | | 33 | +++++++-------------------------- |
1 file changed, 7 insertions(+), 26 deletions(-)
diff --git a/.config/neomutt/gpg b/.config/neomutt/gpg @@ -1,8 +1,10 @@ +# vim: set syntax=neomuttrc : + # Common Crypto Options set crypt_autoencrypt = no # Automatically encrypt all mail set crypt_autopgp = yes # Allow automatic pgp functions set crypt_autosign = yes # Automatically sign all mail -set crypt_autosmime = yes # Allow automatic smime functions +set crypt_autosmime = no # Allow automatic smime functions set crypt_confirmhook = yes set crypt_opportunistic_encrypt = no set crypt_replyencrypt = yes @@ -43,9 +45,8 @@ set pgp_timeout = 21600 # Remember PGP passphrase for 6 hours set pgp_clearsign_command = "gpg2 --batch --output - %?p?--passphrase-fd 0? --armor --textmode --clearsign %?a?-u %a? %f" set pgp_decode_command = "gpg2 --status-fd=2 %?p?--passphrase-fd 0? --quiet --batch --output - %f" set pgp_decrypt_command = "gpg2 --status-fd=2 %?p?--passphrase-fd 0? --quiet --batch --output - %f" -set pgp_encrypt_only_command = "pgpewrap gpg2 --batch --quiet --output - --encrypt --textmode --armor --always-trust -- -r %r -- %f" -set pgp_encrypt_sign_command = "pgpewrap gpg2 %?p?--passphrase-fd 0? --batch --quiet --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust -- -r %r -- %f" -set pgp_encrypt_sign_command = "pgpewrap gpg2 %?p?--passphrase-fd 0? --batch --quiet --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust -- -r %r -- %f" +set pgp_encrypt_only_command = "gpg2 --batch --quiet --output - --encrypt --textmode --armor --always-trust -r %r -- %f" +set pgp_encrypt_sign_command = "gpg2 %?p?--passphrase-fd 0? --batch --quiet --textmode --output - --encrypt --sign %?a?-u %a? --armor --always-trust -r %r -- %f" set pgp_export_command = "gpg2 --export --armor %r" set pgp_getkeys_command = "" set pgp_import_command = "gpg2 --import -v %f" @@ -55,25 +56,5 @@ set pgp_sign_command = "passgpg2 --comment 'Key: gopher://hhvn.uk/0/.pub set pgp_verify_command = "gpg2 --status-fd=2 --quiet --batch --output - --verify %s %f" set pgp_verify_key_command = "gpg2 --verbose --batch --fingerprint --check-sigs %r" -# S/MIME Options -set smime_ask_cert_label = yes -set smime_ca_location = "~/.smime/ca-bundle.crt" -set smime_certificates = "~/.smime/certificates" -set smime_timeout = 21600 # Remember S/MIME passphrase for 6 hours -set smime_decrypt_use_default_key= yes -set smime_default_key = "XXXXXXXXXX" -set smime_encrypt_with = "aes256" -set smime_is_default = no -set smime_keys = "~/.smime/keys" - -# S/MIME Commands -set smime_decrypt_command = "openssl smime -decrypt -passin stdin -inform DER -in %f -inkey %k -recip %c" -set smime_encrypt_command = "openssl smime -encrypt -%a -outform DER -in %f %c" -set smime_get_cert_command = "openssl pkcs7 -print_certs -in %f" -set smime_get_cert_email_command = "openssl x509 -in %f -noout -email" -set smime_get_signer_cert_command= "openssl smime -verify -in %f -noverify -signer %c -out /dev/null" -set smime_import_cert_command = "smime_keys add_cert %f" -set smime_pk7out_command = "openssl smime -verify -in %f -noverify -pk7out" -set smime_sign_command = "openssl smime -sign -signer %c -inkey %k -passin stdin -in %f -certfile %i -outform DER" -set smime_verify_command = "openssl smime -verify -inform DER -in %s %C -content %f" -set smime_verify_opaque_command = "openssl smime -verify -inform DER -in %s %C || openssl smime -verify -inform DER -in %s -noverify 2>/dev/null" +# SMIME sucks +bind compose S pgp-menu