ac/609b2734a9d73c39c9eed9c348376634a505b8

   1 Return-Path: <dkg@fifthhorseman.net>\r
   2 X-Original-To: notmuch@notmuchmail.org\r
   3 Delivered-To: notmuch@notmuchmail.org\r
   4 Received: from localhost (localhost [127.0.0.1])\r
   5         by olra.theworths.org (Postfix) with ESMTP id 17FF7431FBD\r
   6         for <notmuch@notmuchmail.org>; Fri, 28 Jun 2013 08:13:27 -0700 (PDT)\r
   7 X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
   8 X-Spam-Flag: NO\r
   9 X-Spam-Score: 0\r
  10 X-Spam-Level: \r
  11 X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]\r
  12         autolearn=disabled\r
  13 Received: from olra.theworths.org ([127.0.0.1])\r
  14         by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
  15         with ESMTP id 8cg-SO+y2RnT for <notmuch@notmuchmail.org>;\r
  16         Fri, 28 Jun 2013 08:13:19 -0700 (PDT)\r
  17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
  18         by olra.theworths.org (Postfix) with ESMTP id E6FE6431FB6\r
  19         for <notmuch@notmuchmail.org>; Fri, 28 Jun 2013 08:13:18 -0700 (PDT)\r
  20 Received: from [192.168.23.229] (dsl254-070-154.nyc1.dsl.speakeasy.net\r
  21         [216.254.70.154])\r
  22         by che.mayfirst.org (Postfix) with ESMTPSA id B6901F979;\r
  23         Fri, 28 Jun 2013 11:13:16 -0400 (EDT)\r
  24 Message-ID: <51CDA80A.9050700@fifthhorseman.net>\r
  25 Date: Fri, 28 Jun 2013 11:13:14 -0400\r
  26 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
  27 User-Agent: Mozilla/5.0 (X11; Linux x86_64;\r
  28         rv:17.0) Gecko/20130518 Icedove/17.0.5\r
  29 MIME-Version: 1.0\r
  30 To: David Bremner <david@tethera.net>\r
  31 Subject: Re: Emacs not finding keys to verify signatures\r
  32 References:\r
  33  <87sj07a72g.fsf@thinkpad.i-did-not-set--mail-host-address--so-tickle-me>\r
  34         <87sj028ovv.fsf@zancas.localnet> <87ehbmpeg5.fsf@mbp.dbpmail.net>\r
  35         <87zjua9sxi.fsf@convex-new.cs.unb.ca>\r
  36 In-Reply-To: <87zjua9sxi.fsf@convex-new.cs.unb.ca>\r
  37 X-Enigmail-Version: 1.5.1\r
  38 Content-Type: multipart/signed; micalg=pgp-sha512;\r
  39         protocol="application/pgp-signature";\r
  40         boundary="----enig2OHGJQORHRDAFGBXAMMAP"\r
  41 Cc: notmuch@notmuchmail.org\r
  42 X-BeenThere: notmuch@notmuchmail.org\r
  43 X-Mailman-Version: 2.1.13\r
  44 Precedence: list\r
  45 List-Id: "Use and development of the notmuch mail system."\r
  46         <notmuch.notmuchmail.org>\r
  47 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
  48         <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
  49 List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
  50 List-Post: <mailto:notmuch@notmuchmail.org>\r
  51 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
  52 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
  53         <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
  54 X-List-Received-Date: Fri, 28 Jun 2013 15:13:27 -0000\r
  55 \r
  56 This is an OpenPGP/MIME signed message (RFC 4880 and 3156)\r
  57 ------enig2OHGJQORHRDAFGBXAMMAP\r
  58 Content-Type: text/plain; charset=UTF-8\r
  59 Content-Transfer-Encoding: quoted-printable\r
  60 \r
  61 On 06/28/2013 11:05 AM, David Bremner wrote:\r
  62 > Daniel Patterson <dbp@dbpmail.net> writes:\r
  63 >=20\r
  64 >> One thing I forgot to mention - I have notmuch running on a remote\r
  65 >> server through ssh. I don't really imagine this would be an issue, but=\r
  66 \r
  67 >> maybe? (I also have the library installed locally, for emacs).\r
  68 >=20\r
  69 > The verification of the message happens in the notmuch CLI, so on the\r
  70 > the remote host. I guess the downloading is happening on the local host=\r
  71 ,\r
  72 > so that is quite possibly the problem.\r
  73 \r
  74 i'm quite sure this is the problem, that was a relevant bit of info to\r
  75 include :)\r
  76 \r
  77 Daniel: on your remote host, have you tried fetching the relevant keys\r
  78 into your gpg keyring?  you don't need to create any secret key material\r
  79 on the remote host, just fetch the keys as you normally would any other\r
  80 user's public key material; then you'll want to mark your own key as\r
  81 "ultimately" trusted on the remote host.\r
  82 \r
  83 So, for example, on the remote host:\r
  84 \r
  85  gpg --keyserver ha.pool.sks-keyservers.net --recv\r
  86 0x36EEAD9EA53D20B79C383EED2747EC48A98D4AF0\r
  87 \r
  88  gpg --edit-key 0x36EEAD9EA53D20B79C383EED2747EC48A98D4AF0 trust\r
  89 \r
  90 you'll want to maintain this public keyring on that host to be able to\r
  91 verify the messages, but you don't need to do anything else with it.\r
  92 \r
  93 this makes me wonder if the actions that get triggered on those\r
  94 "unverified" crypto buttons in the display interface need to be\r
  95 customizable to send the commands to a remote gpg as well, instead of\r
  96 assuming that they are local.\r
  97 \r
  98 please report back with how that works for you!\r
  99 \r
 100         --dkg\r
 101 \r
 102 \r
 103 ------enig2OHGJQORHRDAFGBXAMMAP\r
 104 Content-Type: application/pgp-signature; name="signature.asc"\r
 105 Content-Description: OpenPGP digital signature\r
 106 Content-Disposition: attachment; filename="signature.asc"\r
 107 \r
 108 -----BEGIN PGP SIGNATURE-----\r
 109 Version: GnuPG v1.4.12 (GNU/Linux)\r
 110 Comment: Using GnuPG with Icedove - http://www.enigmail.net/\r
 111 \r
 112 iQJ8BAEBCgBmBQJRzagMXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w\r
 113 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB\r
 114 NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpc//MP/RaS0FTtnfPoMxc97/4gUJq2\r
 115 QmJC7RK/uES6Vdmg+/LrykkU3a6085u5QwWM3ZzdUJYLUgveCb/bMHAGS3tKTxoy\r
 116 P2lHBwv5K+OQc+yoiciWQhq6DT0YsvQEM3v51QI+43MQmomqIN2UU7x2L7wveAfX\r
 117 hV1DtKy7WkWV11GKn7c28LoiUQTcWJPHkTBxuHddgwf1SEpWu+YJ8rAg60DqIJzZ\r
 118 CDPhHzO1Rk96drTvXll5KFGOIl7deEOWd4N5bmiwnfSvoxf56B2aGoIbaQ8M1NWS\r
 119 h4SWVIYIvPbO6CwbIJw9wlEZZtTEGtKqjQBmoq47gLqSNmFO6whdlUm1OeqZz+Qe\r
 120 ElY9UZeEk17ipWi9L1YkwHArxPKrZ0w4ctbfwTc7Ja3O5GgF9EcGMWNlamWhCi7X\r
 121 34dGjthCJExVkIo7uBDyjI+HkQCIOl0+at4Oc88aRF6hCz3hETxYl6G/RKAzawd+\r
 122 OOVfkKGefUYyJ1z1VGUyCp/m3MVd7V+U7h4RTKVo/OV1PubNdZUGDfpR60i0PYeB\r
 123 bnQNyDnlqdxfjLBBbxzrhr/MojmDDftAEHxH7dqfq7w/cwo5wy85fK8HGdvill9f\r
 124 22sOJpo0pW/l1LXwVYfQ7LDYHvAewouEugczqcucOnPqu4g7JlY+aiAcbDwrvCt9\r
 125 2QpktiEAWTQvYcPI488V\r
 126 =ZtS/\r
 127 -----END PGP SIGNATURE-----\r
 128 \r
 129 ------enig2OHGJQORHRDAFGBXAMMAP--\r