[gentoo-user] Getting to grips with S/MIME in Kmail

[gentoo-user] Getting to grips with S/MIME in Kmail

[Mick]

Hi All,

I am trying to set up S/MIME in Kmail.  When I select the 'S/MIME
Singing Certificate' field in Kmail/Identities/Cryptography/ it fails
to find my key.

The error pop up says:
=============================
Key Listing Failed - Kmail
An error occurred while fetching the keys from the backend:
General error
=============================

I click OK and:
=============================
No backends found for listing keys. Check your installation.
=============================

I generated my key pair following the Gentoo Gnupg user guide and had
no problem entering the key in 'OpenPGP Signing Key' and 'OpenPGP
encruption key', under the same Kmail crypto configuration tab.

Are there any additional steps I need to undertake to make Kmail work
with S/MIME?  Does it need different keys?  What backend is the above
error referring to?
-- 
Regards,
Mick
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[gentuxx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mick wrote:
> Hi All,
>
> I am trying to set up S/MIME in Kmail.  When I select the 'S/MIME
> Singing Certificate' field in Kmail/Identities/Cryptography/ it fails
> to find my key.
>
> The error pop up says:
> =============================
> Key Listing Failed - Kmail
> An error occurred while fetching the keys from the backend:
> General error
> =============================
>
> I click OK and:
> =============================
> No backends found for listing keys. Check your installation.
> =============================
>
> I generated my key pair following the Gentoo Gnupg user guide and had
> no problem entering the key in 'OpenPGP Signing Key' and 'OpenPGP
> encruption key', under the same Kmail crypto configuration tab.
>
> Are there any additional steps I need to undertake to make Kmail work
> with S/MIME?  Does it need different keys?  What backend is the above
> error referring to?
My understanding is that these are different key types.  S/MIME is
typically used for PKI type certificates, not GnuPG certificates.  You
would need a DoD or Verisign (or some other publicly recognized CA)
certificate to use S/MIME.  Depending on what you're trying to do,
GnuPG should be sufficient.

- --
gentux
echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239  D840 4CF0 39E2
18D3 4A9E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEi0mMTPA54hjTSp4RAsN3AKDDCthjIr2WeDP82i1jdG4BdR20vACghKN3
eOIC+DtaPrn/b1/KeweTYX0=
=WCT7
-----END PGP SIGNATURE-----

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] ctrl-alt-f(123456) dono worky so good

[Jason A. Booth]

[-- Attachment #1: Type: text/plain, Size: 550 bytes --]

Apologies if this is silly, but google didn't do it for me.

I've recently updated a lot of things, and am doing emerge -u world right 
now.. but from my user account, I lost the ability to get back to a tty. 
seems really odd and there aren't any kde key bindings in my way (that I know 
of). Anyone seen this?

----------------------------------------------------------------
Jason A. Booth 
PGP public key(85D1F7FC):
http://hyperintelligent.net/~jbooth/jbooth_key.asc
------------------------------------------------------------------

[-- Attachment #2: Type: application/pgp-signature, Size: 191 bytes --]

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[gentuxx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jason A. Booth wrote:
> Apologies if this is silly, but google didn't do it for me.
>
> I've recently updated a lot of things, and am doing emerge -u world
> right now.. but from my user account, I lost the ability to get
> back to a tty. seems really odd and there aren't any kde key
> bindings in my way (that I know of). Anyone seen this?
>
> ----------------------------------------------------------------
> Jason A. Booth PGP public key(85D1F7FC):
> http://hyperintelligent.net/~jbooth/jbooth_key.asc
> ------------------------------------------------------------------

First of all, you should start a new thread when you have a new
question.  I'm probably being a hypocrite, just because I don't know
how to break/change the thread-ID in Thunderbird without creating an
entirely new mail.  But, it's not proper "net-iquette" to reply to
someone else's message with a /completely/ new topic without creating
a new thread.

That being said, if you're saying what I think you're saying, I
haven't been able to switch terminals as you suggest once X and a
window manager (like KDE or Gnome) is up and running.  Don't know if
it's because of X, or KDE, or GDM, or whatever.  But, you're not
alone.  ;-)  It's not a problem for me, I usually have about 5-10
different terminal sessions going at any given time, they just happen
to be managed by KDE.  I manually start gdm when I want to go into a
GUI session, and everything works fine as far as CTRL+ALT+F[123456789]
before I start the X session.

- --
gentux
echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239  D840 4CF0 39E2
18D3 4A9E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEi7UPTPA54hjTSp4RAoNgAJ9FsrCRZO9pUKc98D1690S3rc79BgCfarn9
lDQeQUubJDkW5dvDdNkHKWI=
=0Zw6
-----END PGP SIGNATURE-----

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[Jason A. Booth]

[-- Attachment #1: Type: text/plain, Size: 2413 bytes --]

On Saturday 10 June 2006 23:15, gentuxx wrote:
> Jason A. Booth wrote:
> > Apologies if this is silly, but google didn't do it for me.
> >
> > I've recently updated a lot of things, and am doing emerge -u world
> > right now.. but from my user account, I lost the ability to get
> > back to a tty. seems really odd and there aren't any kde key
> > bindings in my way (that I know of). Anyone seen this?
> >
> > ----------------------------------------------------------------
> > Jason A. Booth PGP public key(85D1F7FC):
> > http://hyperintelligent.net/~jbooth/jbooth_key.asc
> > ------------------------------------------------------------------
>
> First of all, you should start a new thread when you have a new
> question. 
 ctrl-alt-f(123456) dono worky so good -- doesn't qualify?

> I'm probably being a hypocrite, just because I don't know 
I'll tell ya then: yep

> how to break/change the thread-ID in Thunderbird without creating an
> entirely new mail.  But, it's not proper "net-iquette" to reply to
> someone else's message with a /completely/ new topic without creating
> a new thread.
well i don't see=(view) it that way, i see a totally new thread.. maybe i do 
need schooling in kmail

>
> That being said, if you're saying what I think you're saying, I
> haven't been able to switch terminals as you suggest once X and a
> window manager (like KDE or Gnome) is up and running.  Don't know if
> it's because of X, or KDE, or GDM, or whatever.  But, you're not
> alone.  ;-)  
well then it's not only unacceptable to me then
> It's not a problem for me, I usually have about 5-10 
> different terminal sessions going at any given time, they just happen
> to be managed by KDE.  
/me gives you props

> I manually start gdm when I want to go into a 
> GUI session, and everything works fine as far as CTRL+ALT+F[123456789]
> before I start the X session.
>
> --
> gentux
> echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'
you didn't answer my question, but:
 <that> is still hella cute ;-)
>
> gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239  D840 4CF0 39E2
> 18D3 4A9E

-- 
------------------------------------------------------------------
Jason A. Booth 
(303) 642-0499 
PGP public key(85D1F7FC):
http://hyperintelligent.net/~jbooth/jbooth_key.asc
------------------------------------------------------------------

[-- Attachment #2: Type: application/pgp-signature, Size: 191 bytes --]

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[Hemmann, Volker Armin]

On Sunday 11 June 2006 09:35, Jason A. Booth wrote:

> > First of all, you should start a new thread when you have a new
> > question.
>
>  ctrl-alt-f(123456) dono worky so good -- doesn't qualify?

you did not start a new thread, you captured on.
Don't click on reply and change subject/text, click on new mail!

>
> > I'm probably being a hypocrite, just because I don't know
>
> I'll tell ya then: yep
>
> > how to break/change the thread-ID in Thunderbird without creating an
> > entirely new mail.  But, it's not proper "net-iquette" to reply to
> > someone else's message with a /completely/ new topic without creating
> > a new thread.
>
> well i don't see=(view) it that way, i see a totally new thread.. maybe i
> do need schooling in kmail

I am using kmail. And you took over the thread. In the future, click on new 
mail if you want to start a new thread. 


>
> > That being said, if you're saying what I think you're saying, I
> > haven't been able to switch terminals as you suggest once X and a
> > window manager (like KDE or Gnome) is up and running.  Don't know if
> > it's because of X, or KDE, or GDM, or whatever.  But, you're not
> > alone.  ;-)
>
> well then it's not only unacceptable to me then

Have you checked your xorg.conf and kdmrc?
You can turn it of in xorg.conf and maybe in kdmrc. Have you done etc-update?

   Option "DontVTSwitch"  "boolean"
              This  disallows  the  use  of the Ctrl+Alt+Fn sequence (where Fn
              refers to one of the numbered function keys).  That sequence  is
              normally used to switch to another "virtual terminal" on operat-
              ing systems  that  have  this  feature.   When  this  option  is
              enabled,  that key sequence has no special meaning and is passed
              to clients.  Default: off.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] hijacking and unhijacking

[Benno Schulenberg]

Jason A. Booth wrote:
> On Saturday 10 June 2006 23:15, gentuxx wrote:
> > First of all, you should start a new thread when you have a new
> > question.
>
>  ctrl-alt-f(123456) dono worky so good -- doesn't qualify?

Changing the subject line doesn't mean you started a new thread.  
You replied to a message, probably by pressing R, which creates 
a 'link' to previous messages.  Press V now, look at 
the "References:" header, _that_ is the threading.

When you start getting bothered by others hijacking threads, make a 
filter rule, say "Snip Threading", with zero criteria and as Filter 
Actions: Remove Header References, and Remove Header In-Reply-To, 
and assign it (under Advanced) a shortcut, say Ctrl+Shift+X.

Benno
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[Bo Ørsted Andresen]

[-- Attachment #1: Type: text/plain, Size: 329 bytes --]

On Sunday 11 June 2006 09:35, Jason A. Booth wrote:
> > First of all, you should start a new thread when you have a new
> > question.
>
>  ctrl-alt-f(123456) dono worky so good -- doesn't qualify?

It is called hijacking a thread [1]. Don't do it.

[1] http://en.wikipedia.org/wiki/Thread_Hijacking

-- 
Bo Andresen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[Justin R Findlay]

On Sat, Jun 10, 2006 at 11:45:35PM -0700, Jason A. Booth wrote:
> Apologies if this is silly, but google didn't do it for me.
> 
> I've recently updated a lot of things, and am doing emerge -u world right 
> now.. but from my user account, I lost the ability to get back to a tty. 
> seems really odd and there aren't any kde key bindings in my way (that I know 
> of). Anyone seen this?

I have.  In my case it locks up the whole X session and I have to log in
remotely and restart kdm.  The 'solution' I've adopted for now is to use
gdm.


Justin
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] ctrl-alt-f(123456) dono worky so good

[Bo Ørsted Andresen]

[-- Attachment #1: Type: text/plain, Size: 468 bytes --]

On Sunday 11 June 2006 10:40, Justin R Findlay wrote:
> I have.  In my case it locks up the whole X session and I have to log in
> remotely and restart kdm.  The 'solution' I've adopted for now is to use
> gdm.

In the past when X has frozen on my computer I have often had luck with 
logging on remotely and then running

# chvt 1

as root. Then I could kill the app that was causing the freeze (amarok used to 
do that occasionally).

-- 
Bo Andresen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[Mick]

On 10/06/06, gentuxx <gentuxx@gmail.com> wrote:

> My understanding is that these are different key types.  S/MIME is
> typically used for PKI type certificates, not GnuPG certificates.  You
> would need a DoD or Verisign (or some other publicly recognized CA)
> certificate to use S/MIME.  Depending on what you're trying to do,
> GnuPG should be sufficient.

Thanks gentuxx.  Would you know what missing backend kmail is
complaining about?  I am using gpg-agent (which is now part of gnupg)
- can't his handle S/MIME certificates?
-- 
Regards,
Mick
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[Bo Ørsted Andresen]

[-- Attachment #1: Type: text/plain, Size: 544 bytes --]

On Sunday 11 June 2006 12:23, Mick wrote:
> Thanks gentuxx.  Would you know what missing backend kmail is
> complaining about?  I am using gpg-agent (which is now part of gnupg)
> - can't his handle S/MIME certificates?

Which versions of gnupg and kmail do you use? Did you look under Settings -> 
Configure KMail -> Security -> Crypto Backends ? On my computer it says it 
uses gpgsm as S/MIME backend.

$ equery belongs gpgsm
[ Searching for file(s) gpgsm in *... ]
app-crypt/gnupg-1.9.20-r3 (/usr/bin/gpgsm)

-- 
Bo Andresen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[Mick]

On 11/06/06, Bo Ørsted Andresen <bo.andresen@zlin.dk> wrote:

> Which versions of gnupg and kmail do you use? Did you look under Settings ->
> Configure KMail -> Security -> Crypto Backends ? On my computer it says it
> uses gpgsm as S/MIME backend.

Same here.  It shows:
=======================
Available backends:

Gpg(ME)
  OpenPGP (gpg)
  S/MIME (gpgsm)

Chiasmus
  Chiasmus (failed)
=======================
OpenPGP seems to work a treat, but S/MIME complains of a missing backend.

> $ equery belongs gpgsm
> [ Searching for file(s) gpgsm in *... ]
> app-crypt/gnupg-1.9.20-r3 (/usr/bin/gpgsm)

Yep, I have the same package installed.

PS.  Your signature on this message is shown as an attachment called
"noname" in Gmail gui.  Some other sigs are shown as "signature.asc".
How can one control this?
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[gentuxx]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mick wrote:
> On 11/06/06, Bo Ørsted Andresen <bo.andresen@zlin.dk> wrote:
>
>> Which versions of gnupg and kmail do you use? Did you look under
>> Settings ->
>> Configure KMail -> Security -> Crypto Backends ? On my computer it
>> says it
>> uses gpgsm as S/MIME backend.
>
> Same here.  It shows:
> =======================
> Available backends:
>
> Gpg(ME)
>  OpenPGP (gpg)
>  S/MIME (gpgsm)
>
> Chiasmus
>  Chiasmus (failed)
> =======================
> OpenPGP seems to work a treat, but S/MIME complains of a missing
> backend.
>
>> $ equery belongs gpgsm
>> [ Searching for file(s) gpgsm in *... ]
>> app-crypt/gnupg-1.9.20-r3 (/usr/bin/gpgsm)
>
> Yep, I have the same package installed.
>

I don't know why Kmail is giving you that particular message.  I
normally used Thunderbird, but I loaded up Kmail yesterday when I
responded to your question.  I got basically the same thing (backend =
/usr/bin/gpgsm).

Answer me this question, do you *have* a cert that has been issued by
Verisign or some other reckognized signing authority?

> PS.  Your signature on this message is shown as an attachment called
> "noname" in Gmail gui.  Some other sigs are shown as "signature.asc".
> How can one control this?


- --
gentux
echo "hfouvyyAhnbjm/dpn" | perl -pe 's/(.)/chr(ord($1)-1)/ge'

gentux's gpg fingerprint ==> 5495 0388 67FF 0B89 1239  D840 4CF0 39E2
18D3 4A9E
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEjFcDTPA54hjTSp4RAmxwAKDkqE7nAVK+5UiEdbLlNXdu6vQtbwCg39YT
4ufvxxdRpeIcdwFKfmvitD8=
=9Yi7
-----END PGP SIGNATURE-----

-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Getting to grips with S/MIME in Kmail

[Mick]

gentuxx wrote:

> Answer me this question, do you *have* a cert that has been issued by
> Verisign or some other reckognized signing authority?

No I do not have a CA issued certificate and will not try to get one
*unless* I can make it work in my Linux setup.
-- 
Regards,
Mick

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Getting to grips with S/MIME in Kmail

[Bo Ørsted Andresen]

[-- Attachment #1: Type: text/plain, Size: 1339 bytes --]

On Sunday 11 June 2006 18:44, Mick wrote:
> Same here.  It shows:
> =======================
> Available backends:
>
> Gpg(ME)
>   OpenPGP (gpg)
>   S/MIME (gpgsm)
>
> Chiasmus
>   Chiasmus (failed)
> =======================

This is identical to mine.

> OpenPGP seems to work a treat, but S/MIME complains of a missing backend.

I have no explanation for that. Mine doesn't complain about missing backend.

I do have an S/MIME certificate that my government has had issued for me. I 
have imported it in KDE Control Center -> Security & Privacy -> Crypto -> 
Your Certificates. In Kmail in Configure KMail -> Identities -> Modify -> 
Cryptography it shows up when I select an S/MIME signing/encryption 
certificate for my identity with the matching email address.

But until now I have never tried to actually use it in KMail. ;) When I try to 
do so it gives me the following very informative error message:

"Signing failed: General error"

;)

[SNIP]

> PS.  Your signature on this message is shown as an attachment called
> "noname" in Gmail gui.  Some other sigs are shown as "signature.asc".
> How can one control this?

I use an OpenPGP signature. I have no clue how Gmail handles signatures since 
I use Kmail. In KMail it shows up as a:

"Detached OpenPGP Signature"

-- 
Bo Andresen

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

[gentoo-user] Re: Getting to grips with S/MIME in Kmail

[Mick]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bo Ørsted Andresen wrote:

> I use an OpenPGP signature. I have no clue how Gmail handles signatures
> since I use Kmail. In KMail it shows up as a:
> 
> "Detached OpenPGP Signature"

Yep, but in Knode is shown as a little padlock with "unnamed" next to it.
- -- 
Regards,
Mick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEjIAw5Fp0QerLYPcRAsSOAKCNclfFwkXEGxiM6q3R//bKti8LKQCfScXu
i0iRTlEMJn0Qz6jVSfASlrY=
=i/uP
-----END PGP SIGNATURE-----

-- 
gentoo-user@gentoo.org mailing list