<!--
   $FML: post_check_pgp_signature.sgml,v 1.2 2005/09/24 13:53:41 fukachan Exp $
-->


<sect1 id="config.post.check.pgp">
	<title>
	Case Study: PGP/PGP Based Authentication In Posting
	</title>

<caution>
<para>
Please install Crypt::OpenPGP perl module firstly. It is better to use
OS dependent pacakge system since Crypt::OpenPGP depends a lot of
other packages.
</para>
</caution>

<sect2>
	<title>
	Recipes
	</title>

<qandaset>

<qandaentry>

<question>
<para>
PGP/PGP Based Authentication In Posting
</para>
</question>

<answer>

<para>
check_pgp_signature options enables PGP/GPG based auth.
If the degital signature is confirmed, the user can post articles.
<screen>
article_post_restrictions       =       reject_system_special_accounts
                                        check_pgp_signature
                                        reject
</screen>
This function is disabled by default.
Change article_post_restrictions if use.
</para>

</answer>

</qandaentry>

</qandaset>

</sect2>


<sect2>
	<title>
	Key Operations
	</title>

<para>
PGP KEY RING directories are separeted for each purpose. For example,
the keyring dir for article pgp auth is
$ml_home_dir/etc/pgp-article-post-auth/ directory, the keyring dir for
remote administration by command mail is
$ml_home_dir/etc/pgp-admin-command-mail-auth/ directory.
</para>

<para>
Use pgp2, pgp5 and gpg commands to edit keys under them
It is useful to use the following fmlpgp wrapper command.
The wrapper sets up proper environment variables. 
<screen>
[Example] operations for elena ML

fmlpgp elena --article-post-auth -kg
</screen>
the command line options available:
<screen>
--article-post-auth       (auth for post article)
--command-mail-auth       (auth for command mail)
--admin-command-mail-auth (auth for admin command mail)
--article-post-encrypt    (article encryption)
</screen>
</para>

<para>
Available wrappers follow:
</para>

<para>
pgp2: 
fmlpgp
</para>

<para>
pgp5:
fmlpgp5
fmlpgpe
fmlpgpk
fmlpgps
fmlpgpv
</para>

<para>
gpg: 
fmlgpg
fmlgpgv
</para>

</sect2>


</sect1>
