installing GPG contrib

[suba]

Well, this is the main error:
gpg: info@prometheustsln.com: skipped: public key not found

not finding the key is probably cos it can't find the pubring

what you can do is execute that gpg commandline in the shell, eg;

$gpgpath --homedir $gpghome --verbose --verbose -r $gpgrecipient --encrypt -a -z 0 $plainTxt

replace the above strings (everything that's $xxx) with your actual paths and filenames, something like;

/usr/bin/gpg --homedir /home/username --verbose --verbose -r email@somewhere.com --encrypt -a -z 0 somefile.txt

it should create a somefile.txt.asc

if that fails with can't find key, try
/usr/bin/gpg --homedir /home/username/.gnupg --verbose --verbose -r email@somewhere.com --encrypt -a -z 0 somefile.txt

If either of the above work but still doesnt from the web then you can then see if it's a http permission problem.

Also note that https also has a seperate config for php and that safe mode may be on in https but off in http.

[pichardotech]

OK I was able to run the second command in the shell and get the somefile.txt.asc

/usr/bin/gpg --homedir /home/username/.gnupg --verbose --verbose -r email@somewhere.com --encrypt -a -z 0 somefile.txt

The result on the shell was:

gpg: Warning: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: loaded digest 2
gpg: using secondary key 364C0E39 instead of primary key 676AF441
gpg: key 576AF441: accepted as trusted key
gpg: This key belongs to us
gpg: reading from '/home/username/.gpnupg/somefile.txt'
gpg: writing to '/home/username/.gpnupg/somefile.txt.asc'
gpg: ELG-E/AES encrypted for 364COE39 info (info) <info@prometheustsln.com>

So it works but it's using some secondary key (364C0E39) I don't know where is coming from. The key I created was 576AF441 . I decrypted the file iin the shell and this what I got:

gpg --decrypt /home/bakerspl/.gpnug/somefile.txt.asc
gpg: Warning: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information

You need a passphrase to unlock the secret key for
user: "info (info) <info@prometheustsln.com>"
1024-bit ELG-E key, ID 364COE39, created 2004-05-21 (main key ID 676AF441)

gpg: encrypted with 1024-bit ELG-E key, ID 364COE39, created 2004-05-21
info (info) <info@prometheustsln.com>"
This is a test for gpg.

I'm baffled with the origin of the second key. Is it possible that gpg creates a different key that is kept off limits from the user and then uses it to encrypt the file? I tried to decrypt the file on my local compuer. It recognized the main key ID and asked me for the password. Then all I got was a blank document. Does this make sense?

[pichardotech]

After spending sometime reading the GNUP doccumentation I found out about the subkeys. Thus now I know where that extra key is coming from. I'm testing on the command line import/export of the keys to see it that's the crux of the issue.

[suba]

If that worked, then like me, you probably need to use;
$gpghome = "/home/username/.gnupg";

in gpgcc.php

[pichardotech]

IT WORKS! Two weeks of hard work just paid off. A MILLION thanks suba for helping. Once I figure out how the keys and subkeys work I was able to encrypt/send/decrypt the orders. The path that ended up working on my system for $gpghome is "/home/username". I only have two more issues to work on and the shop is ready to go. I have to figure out how to send the expiration date (month/year) along with the cc number and how to decrypt the information on the email client.

[suba]

There are multiple ways to decrypt. Personally I like Windows Privacy Tray as it's application independent:
http://www.winpt.org
But the gnupg site has links to a number of email client plugins.

As for the date I haven't tried this but I'd expect you can do something like this -
in function before_process() add the line;
$this->cc_expire_date = "exp (m/y): " . $HTTP_POST_VARS['cc_expires_month'] . $HTTP_POST_VARS['cc_expires_year'];

then modify after_process() ;
$message = 'Order #' . $insert_id . "\n\n" . 'Number: ' . $this->cc_complete . "\n". $this->cc_expire_date . "\n";

[pichardotech]

Thanks again for the advise. I used both lines for the script but I had to change the first one to:

cc_expire_date = "exp (m/y): " . $HTTP_POST_VARS['cc_expires'];

It works like a charm! As for the decryption I tried different combinations of

1) Encryption/Decryption: PGP 8, GPG Exchange .9.1, WinPT and Enigmail.

2) Outlook, Outlook Express, Eudora, and Thunderbird

The combo that ended up being the most user fiendly was Thunderbird/Enigmail/WinPT.

Now we're planning to go live with the shop.

[tom344]

I am getitng blank emails when I try to use this contrib... here is my log file

gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: using PGP trust model
gpg: key 68CB1A37: accepted as trusted key
gpg: key C705BEB2: accepted as trusted key
gpg: using subkey A307613F instead of primary key C705BEB2
gpg: This key belongs to us
gpg: can't open `/var/www/vhosts/username/tmp/cc1e0c5e888f2f7fa90fe7e035e93e51anca': No such file or directory
gpg: /var/www/vhosts/username/tmp/cc1e0c5e888f2f7fa90fe7e035e93e51anca: encryption failed: file open error

the directory tmp is created and is chmod 777

any help on this would be appreciated