GnuPG old notes
Intro
Un très bon point de départ: http://www.gnupg.org/gph/fr/manual.html
Une introduction a GnuPG(vulgaristation): http://www.vilya.org/gpg/
Mes clés
On peut les trouver un peu partout.
gpg --keyserver wwwkeys.pgp.net --recv-key 0x7A135F579AD7E3DB
Serveurs publics
- http://wwwkeys.pgp.net
- A list...
- http://pgp.mit.edu (very slow)
Key Signing Coordination
Distance entre clés
Par exemple
http://keyserver.kjsl.com/~jharris/gpgwww.cgi?from=135EA668&to=9AD7E3DB
http://keyserver.kjsl.com/~jharris/gpgwww.cgi?from=449FA3AB&to=9AD7E3DB
Remplacer les IDs des clés pour essayer d'autres chemins.
Update: les URLs précédentes ne fonctionnent apparemment plus, vous pouvez essayer avec celles-ci:
http://pgp.cs.uu.nl/mk_path.cgi?FROM=135EA668&TO=9AD7E3DB&PATHS=trust+paths
http://pgp.cs.uu.nl/mk_path.cgi?FROM=449FA3AB=9AD7E3DB&PATHS=trust+paths
http://www.cs.uu.nl/people/henkp/henkp/pgp/pathfinder/mk_path.cgi?STAT=9AD7E3DB&STATS=statistics
Strong Set
Une analyse globale est disponible ici: http://pgp.cs.uu.nl/plot/
J'y suis rentré en août 2002 avec une distance moyenne de 6.9916 (merci adulau ;-)
Des analyses mensuelles sont disponibles ici: http://keyserver.kjsl.com/~jharris/ka
Date | Mean dist | World class | From Set to ID | From ID to Set | Max hops | Strong set | Average mean |
6.9916 | >1000 | - | - | 15 | 14159 | 6.5105 | |
5.7041 | >1000 | - | - | 14 | 14353 | 6.5222 | |
5.6948 | >1000 | - | - | 14 | 14586 | 6.5327 | |
5.6979 | >1000 | - | - | 14 | 14797 | 6.5561 | |
5.6648 | >1000 | - | - | 14 | 14973 | 6.5084 | |
5.6414 | >1000 | - | - | 14 | 15169 | 6.5101 | |
5.6296 | >1000 | 9 | 12 | 14 | 15370 | 6.5037 | |
5.5183 | >1000 | 19 | 27 | 13 | 15575 | 6.5045 | |
5.4787 | >1000 | 24 | 27 | 13 | 15787 | 6.5017 | |
5.4420 | >1000 | 24 | 27 | 13 | 15949 | 6.4797 | |
5.4373 | >1000 | 24 | 27 | 13 | 16174 | 6.4806 | |
5.3922 | >1000 | 24 | 27 | 13 | 16305 | 6.4931 | |
5.3865 | >1000 | 24 | 27 | 13 | 16474 | 6.4804 | |
5.2183 | >1000 | 24 | 27 | 13 | 16673 | 6.4706 | |
5.2173 | >1000 | 24 | 27 | 13 | 16951 | 6.4849 | |
4.7102 | 496 | 43 | 63 | 13 | 17338 | 6.4773 | |
4.7024 | 507 | 45 | 63 | 13 | 17620 | 6.4711 | |
4.6933 | 500 | 46 | 63 | 13 | 17861 | 6.4675 | |
4.6794 | 481 | 47 | 63 | 13 | 18197 | 6.6484 | |
4.6373 | 367 | 51 | 67 | 13 | 19075 | 6.6624 | |
4.6281 | 358 | 51 | 67 | 13 | 19372 | 6.6584 | |
4.6027 | 330 | 51 | 67 | 13 | 19641 | 6.6410 | |
4.6002 | 331 | 51 | 67 | 13 | 19833 | 6.6261 | |
4.5854 | 335 | 52 | 68 | 13 | 20095 | 6.6038 | |
4.5700 | 330 | 52 | 68 | 13 | 20305 | 6.5954 | |
4.5531 | 327 | 52 | 68 | 13 | 20602 | 6.5762 | |
4.5189 | 419 | 52 | 68 | 13 | 20814 | 6.5251 | |
4.4803 | 440 | 52 | 68 | 13 | 21025 | 6.4861 | |
4.4676 | 461 | 58 | 75 | 13 | 21333 | 6.4784 | |
4.4565 | 462 | 59 | 76 | 13 | 21487 | 6.4721 | |
4.4456 | 482 | 59 | 76 | 13 | 21843 | 6.4762 | |
4.4435 | 1761 | 16 | 91 | 14 | 40282 | 5.98? | |
4. | - | 0 | 0 | 0 | - | 6. |
#!/bin/bash
# gpg-setstats retrieves stats about the strongset & your key
REF="http://skylane.kjsl.com/~jharris/ka"
MYKEY=${1:-"9AD7E3DB"}
for URL in $(lynx -dump $REF|grep "$REF/200"|cut -c 7-53); do
select q in "Stats for the ${URL#$REF}" "Skip" "Quit";do
if [ "$q" == "Stats for the ${URL#$REF}" ]; then
echo =======================================
echo Retrieve infos for ${URL#$REF}:
wget -O - -q ${URL}other.txt
wget -O - -q ${URL}status.txt|grep "strongly connected"
wget -O - -q $URL${MYKEY:0:2}/$MYKEY|grep "^KeyID\|^Total\|^Mean\|^Farthest"
echo -n "World Class:"
lynx -dump ${URL}top1000table.html|grep $MYKEY|grep -v kjsl
echo =======================================
break; fi
if [ "$q" == "Skip" ]; then
break; fi
if [ "$q" == "Quit" ]; then
exit; fi
echo test $URL
done
done
Tips
Pour fetcher ttes les UIDs qui ont signé une clé
for key in $(gpg --list-sigs $1|grep ^sig|cut -c 13-20|sort|uniq); do gpg --recv-key $key done
quintuple-agent
eval `q-agent &` q-client put 9AD7E3DB -t 3600 or directly use agpg instead of gpg
Support de OpenPGP dans KMail:
wget ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/debian/libksba0_0.4.3-1_i386.deb dpkg -i libksba0_0.4.3-1_i386.deb wget ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/debian/pinentry-gtk_0.6.3-1_i386.deb dpkg -i pinentry-gtk_0.6.3-1_i386.deb wget ftp://ftp.gnupg.org/gcrypt/alpha/aegypten/debian/gpgsm_0.3.9-1_i386.deb dpkg -i gpgsm_0.3.9-1_i386.deb gpg --rebuild-keydb-caches
Editer ~/.gnupg/gpg.conf -> use-agent
Dans KMail, Settings->Configure KMail->Security->Crypto Plugins et ajouter gpgme-openpgp.so plugin.
Laisser "update URL" vide et mettre un nom comme par ex. "OpenPGP", "location": /usr/lib/cryptplug/gpgme-opengpg.so
/usr/local/bin/gpg-kmail:
#!/bin/bash
launch_me(){
eval "$(gpg-agent --pinentry-program /usr/bin/pinentry-gtk --no-grab --default-cache-ttl 1800 )"
kmail $* --nofork
echo $GPG_AGENT_INFO|cut -d: -f2|xargs kill
}
launch_me $* &
exit 0
Support of Enigmail in Firefox
A promising solution for webmails...
See http://www.camrdale.org/GoogleSoC.html