Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-03-28 01:08:10 -04:00
Code Issues Packages Projects Releases Wiki Activity

UserDoc/SplitGpg changed

Browse Source 
Latest Enigmail requires qubes-gpg-split-2.0.7-1 or later
This commit is contained in:
Joanna Rutkowska 2014-07-30 07:42:19 +00:00
parent 1952536704
commit 8c0e9fabee
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
UserDoc/SplitGpg.md
View File

@ -76,6 +76,8 @@ ssb 4096R/30498E2A 2012-11-15
Note that running normal `gpg -K` in the demo above shows no private keys stored in this AppVM.
### Configuring [Thunderbird/Enigmail?](/wiki/UserDoc/Thunderbird/Enigmail) for use with Split GPG
However, when using Thunderbird with Enigmail extension it is not enough, because Thunderbird doesn't preserve the environment variables. Instead it is recommended to use a simple script provided by `/usr/bin/qubes-gpg-client-wrapper` file by pointing Enigmail to use this script instead of the standard GnuPG binary:
[![No image "tb-enigmail-split-gpg-settings-2.png" attached to UserDoc/SplitGpg](/chrome/common/attachment.png "No image "tb-enigmail-split-gpg-settings-2.png" attached to UserDoc/SplitGpg")](/attachment/wiki/UserDoc/SplitGpg/tb-enigmail-split-gpg-settings-2.png)
@ -87,6 +89,8 @@ The script also sets the QUBES\_GPG\_DOMAIN variable automatically based on the
[user@work ~]$ echo "work-gpg" > /rw/config/gpg-split-domain
```
*NOTE*: A recent engimail update, version `thunderbird-enigmail-1.7-1`, introduced changes in how Enigmail expects to execute GPG binary and so requires an updated split-gpg package with version \>= `qubes-gpg-split-2.0.7-1`. As of 30/07/2014 this package is available in the current-testing repo.
### Importing public keys
Use `qubes-gpg-import-key` in the client AppVM to import the key into the GPG backend VM. Of course a (safe, unspoofable) user consent dialog box is displayed to accept this.