How to:

Set up PC-Pine with PGP

Assuming PC-Pine and GnuPG are installed and private key is known.

• go to the PC-Pine configuration-screen (S, C)
• search for «display-filters» (W, display-filters)
• at "display filters" add
  _LEADING("-----BEGIN PGP")_ c:\progra~1\GNU\GnuPG\pine_decrypt.bat _RESULTFILE_ _TMPFILE_
• at "sending filters" add
  C:\progra~1\GNU\GnuPG\pine_encrypt.bat _RECIPIENTS_ _TMPFILE_
• create two batch-files your GnuPG-folder (below C:\progra~1\GNU\GnuPG  is used)
  1. pine_decrypt.bat

     @echo off c:\progra~1\gnu\gnupg\gpg.exe --output %1 --decrypt %2

  2. pine_encrypt.bat^*

     @echo off choice Do you want to sign your message to %1 if errorlevel 2 goto encrypt c:\progra~1\gnu\gnupg\gpg.exe -o %TEMP%\tmp.sig --clearsign %2 copy %TEMP%\tmp.sig %2 > nul del %TEMP%\tmp.sig :encrypt choice Do you want to encrypt your message to %1 if errorlevel 2 goto end c:\progra~1\gnu\gnupg\gpg.exe -o %TEMP%\pine.tmp -a -r %1 -e %2 if errorlevel 1 goto lookup del %2 move %TEMP%\pine.tmp %2 goto end :lookup c:\progra~1\gnu\gnupg\gpg.exe --keyserver minsky.surfnet.nl --search-keys %1 c:\progra~1\gnu\gnupg\gpg.exe -o %TEMP%\pine.tmp -a -r %1 -e %2 del %2 move %TEMP%\pine.tmp %2 :end

• done

Issues to be resolved:

• send encrypted message to several recipients
• encrypt/decrypt attachments (now this needs to be done manually)
• check signature from unknown senders (these need to be added manually)
• encrypt to self with own private key (now the encrypted message with the recipients private key is being stored, thus rendered unreadable)

A note on security

When you are composing an email you wish to send encrypted, it is wise to compose and send it at once. When you have your Pine "remotely" configured, and you postpone (CTRL-O)  your message, the message will be sent unencrypted over an open internet connection to your mailserver, to be stored in the Drafts folder, which is a compromise in security.

 

Choice in Win2k

Choice.com is not standard implemented in Win2k. Download a Windows 2000 compliant version here, extract it to your GnuPG-folder and alter in the pine_decrypt.bat the choice lines into:

• c:\progra~1\gnu\gnupg\choice Do you want to sign your message to %1
• c:\progra~1\gnu\gnupg\choice Do you want to encrypt your message to %1