User:Chronomex

From GSLUG

Jump to: navigation, search

I'm Duncan Smith.

website

I want to have weekly keysignings at GSLUG meetings. To participate, you need a key, and a paper copy of your key's fingerprint.

Contents

[edit] To Make a Key

Run gpg --gen-key and follow the prompts. It is vitally important that you choose a strong passphrase that you will remember. Without it, your key is useless. This is a feature.

[edit] To Distribute your Key

Your key is also rather useless if others don't know the public part.

Add this line to ~/.gnupg/options:

keyserver hkp://subkeys.pgp.net/

Then do:

gpg --send-keys [your email address]

[edit] To Retrieve Other Peoples' Keys

Assuming you've done the above, run the following command:

gpg --search-keys [part of their email address or name]

Select the key you want to download.

[edit] To Bring your Key for Signing

You can do this two ways:

  • gpg --fingerprint [your email address] should show something like the following, which you want to print out and bring with you:
pub   1024D/5C8CA60D 2006-02-09 [expires: 2012-02-05]
      Key fingerprint = D82E 2DF8 CEAD 4C10 37FB  2C64 4060 0363 5C8C A60D
uid                  Duncan Smith <duncan.b.smith@gmail.com>
uid                  Duncan Smith <slimey.limey@gmail.com>
uid                  Duncan Smith <f@u.washington.edu>
uid                  Duncan Smith <duncans@ticalc.org>
uid                  Duncan Smith <chronomex@gmail.com>
sub   2048g/18504A55 2006-02-09
  • gpg --armor --export [your email address] should show something resembling the following, which you want to email to me (any of the above addresses will work):
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.6 (GNU/Linux)

mQGiBEPqtiQRBACmt+fWupeLd/1xZygLXJYD/bduFCRxmougi4M4vkGfiJPpzWqB
5mtzizlm6FcAi/BBQGt9t90YBCMg6yy5ZSWrKdUsSh6xODJvwMa4n3VMqwC7CpTp
8PI3uV0JdBDA2UcIwsXM6f7L+kFON025/hlEIGdMyEXU6Ksd4IXQ6dCmkwCgqJg7
[ ... many lines omitted ... ]
ffdvvz2hRyL+hDwwKlwTlzQTEk633QDEYaPcmUn/iengfeGISQQYEQIACQUCQ+q2
MAIbDAAKCRBAYANjXIymDbU3AJ0XRb0F3cQUN9wLzPEJWPKsOS3eXgCfTaFCPgSD
dcXYnHeeSkhed0OxI10=
=Fr8b
-----END PGP PUBLIC KEY BLOCK-----

[edit] To Sign a Key

gpg --sign-key [part of their email address or name]

[edit] Then

You have two options, do what the owner wishes.

[edit] Mail the Key to the Owner

gpg --armor --export-key [part of their email address or name]

Email that to them.

[edit] Put the Key Directly on the Keyserver

gpg --send-keys [part of their email address or name]

Please, only do this if the owner asks you to.

Personal tools
Linux