Disroot
/
gpg-lacre
9
15
Fork 4
Code Issues 29 Pull Requests 1 Releases 2 Wiki Activity

change styling, reword some parts

This commit is contained in:
Hoang Xuan Phu 2013-11-03 14:45:15 +07:00
parent 9dac9da325
commit c853df74a4
1 changed files with 38 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
INSTALL.md
View File

@ -1,38 +1,45 @@
1) Ensure that GPG is installed and configured. 1. Ensure that GPG is installed and configured. Also make sure public keys for
a) Make sure public keys for all of your potential recipients are all of your potential recipients are available in the GPG home directory
available in the GPG home directory you use in step 2 used for `keyhome` in step 2.
2) Configure /etc/gpg-mailgate.conf based on the provided sample config 2. Configure `/etc/gpg-mailgate.conf` based on the provided
3) Place gpg-mailgate.py in /usr/local/bin/ `gpg-mailgate.conf.sample`
4) Place the GnuPG directory in /usr/lib/python2.7/ (replace 2.7 with your Python version) 3. Place `gpg-mailgate.py` in `/usr/local/bin/`
5) Add the following to the end of /etc/postfix/master.cf 4. Place the GnuPG directory in `/usr/lib/python2.7/` (replace 2.7 with your
Python version)
5. Add the following to the end of `/etc/postfix/master.cf`
gpg-mailgate unix - n n - - pipe gpg-mailgate unix - n n - - pipe
flags= user=nobody argv=/usr/local/bin/gpg-mailgate.py ${recipient} flags= user=nobody argv=/usr/local/bin/gpg-mailgate.py ${recipient}
127.0.0.1:10028 inet n - n - 10 smtpd 127.0.0.1:10028 inet n - n - 10 smtpd
-o content_filter= -o content_filter=
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_helo_restrictions= -o smtpd_helo_restrictions=
-o smtpd_client_restrictions= -o smtpd_client_restrictions=
-o smtpd_sender_restrictions= -o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8 -o mynetworks=127.0.0.0/8
-o smtpd_authorized_xforward_hosts=127.0.0.0/8 -o smtpd_authorized_xforward_hosts=127.0.0.0/8
6) Add the following to /etc/postfix/main.cf 6. Add the following to `/etc/postfix/main.cf`
content_filter = gpg-mailgate content_filter = gpg-mailgate
7) Restart postfix. 7. Restart postfix.
Note 1: it is also possible to create a dedicated user to store the PGP public keys
1) useradd -s /bin/false -d /var/gpg -M gpgmap ## Note 1
2) mkdir -p /var/gpg/.gnupg
3) chown -R gpgmap /var/gpg It is possible to create a dedicated user to store the PGP public keys with
4) chmod 700 /var/gpg/.gnupg these example commands:
5) sudo -u gpgmap /usr/bin/gpg --import /home/youruser/public.key --homedir=/var/gpg/.gnupg
a) replace the path with the location of your public key useradd -s /bin/false -d /var/gpg -M gpgmap
b) the path can be deleted after importation mkdir -p /var/gpg/.gnupg
6) Confirm that it's working: sudo -u gpgmap /usr/bin/gpg --list-keys --homedir=/var/gpg/.gnupg chown -R gpgmap /var/gpg
7) Use keyhome = /var/gpg/.gnupg in gpg-mailgate.conf chmod 700 /var/gpg/.gnupg
sudo -u gpgmap /usr/bin/gpg --import /home/youruser/public.key --homedir=/var/gpg/.gnupg
- Replace `/home/youruser/public.key` with the location of your public key
- `/home/youruser/public.key` can be deleted after importation
- Confirm that it's working: `sudo -u gpgmap /usr/bin/gpg --list-keys --homedir=/var/gpg/.gnupg`
- Use `keyhome = /var/gpg/.gnupg` in `gpg-mailgate.conf`