Re: [bug-anubis] Questions about gpg-encrypt

[Dominique Bordereaux]

Good day Sergey,


> Thanks a lot, Dominique: you've discovered a bug :) We have already
> fixed it, the updated version of the package will be available on
> mirddin tonight.
I am 'out of town' till Monday but I will test it then.

> It will also contain support for the special command
> gpg-sign-encrypt. I will let you know when it is available.
Great news: if you want to the call of 'gpg -se' via the
external-body-processor command, you need to figure out a way to pass
your passphrase to this command line.
If you have another rule that signs some e-mails via gpg-sign, you
end-end with your passphrase at different places in your anubisrc.
With your adding this command, I guess it disappears.
Definitely great news!


Side question (probably to be posted also on another list)
Is there in the GnuPG world something similar to the SSH_ASKPASS in the
SSH world?

SSH_ASKPASS
             If ssh needs a passphrase, it will read the passphrase from the
             current terminal if it was run from a terminal.  If ssh
does not
             have a terminal associated with it but DISPLAY and SSH_ASKPASS
             are set, it will execute the program specified by
SSH_ASKPASS and
             open an X11 window to read the passphrase.  This is
particularly
             useful when calling ssh from a .Xsession or related script.
             (Note that on some machines it may be necessary to redirect the
             input from /dev/null to make this work.)

With such a thing, we could have:

    * Anubis responsible of enforcing policies via its rule set
    * and this 'GPG_ASK_PASS' to collect the passphrase whenever needed.



>> English is not my mother language.
> No problems. A propos, nous pouvons causer en français, si vous
> voulez :^) J'aime beaucoup cette langue magnifique.
Très heureux de savoir que nous avons un autre point commun !

Best regards,
--
Dominique