GnuPG signing and encrypting script

[chgerwig]

Hi all,

since I posted my verifying and decryting script here is the counterpart my signing and encryting script:

Code: Select all

{ ### GnuPG (Version 1.2.4) sign and encrypt Mail Body
{ by Christian Gerwig <christian@gerwig.com> last change: 16.09.04
{ Script to sign an outgoing message with the ability to control the script via
{ the User Header.
{ By default every message will be signed. If you don't like this feature uncomment line 19
{ If no secret key is available for the address the script aborts
{ If you want to control it go to the optional tab in the compose
{ window and in the "User Header" field enter
{       pgp: n  -> no pgp for the message
{       pgp: s  -> for signing the message
{       pgp: e  -> for encrypting the message
{
{ !!! Make sure to update the path to your gpg.exe in the next line for your system!!!
set $GPGexe "c:\programme\gnupg\gpg.exe"

ReadHeader $pgp "pgp:" %message
If "n" ^ $pgp then end
If "s" ^ $pgp then sign_message
If "e" ^ $pgp then encrypt_message
{Exit

:sign_message
ReadRawBody $a %message
AddStrings $SIGFile $ScriptPath "sigtemp.txt"
SaveBody $a $SIGFile
ReadEmail $From
set $command "--default-key "
AddStrings $command $From " --clearsign " $ScriptPath "sigtemp.txt"
ExecuteAndWait $GPGexe $command #error
if #error > 0 then error_sign
AddStrings $ASCFile $ScriptPath "sigtemp.asc"
OpenBody $a $ASCFile
AssignBody %message $a
DeleteFile $SIGFile
DeleteFile $ASCFile
Exit

:encrypt_message
ReadRawBody $a %message
AddStrings $SIGFile $ScriptPath "sigtemp.txt"
SaveBody $a $SIGFile
ReadTo $t %message
GetLine $To 0 $t
Set $Email $To
set $command "-r "
AddStrings $command $To " -a --encrypt " $ScriptPath "sigtemp.txt"
ExecuteAndWait $GPGexe $command #error
if #error > 0 then error_encrypt
AddStrings $ASCFile $ScriptPath "sigtemp.asc"
OpenBody $a $ASCFile
AssignBody %message $a
DeleteFile $SIGFile
DeleteFile $ASCFile
Exit

:error_sign
Set $e "Signing ERROR! No secret key found for "
AddStrings $e $From
MessageBox $e
DeleteFile $SIGFile
Exit

:error_encrypt
Set $e "Encryting ERROR! No public key found for "
AddStrings $e $To
MessageBox $e
DeleteFile $SIGFile

:end
Exit

You only have to place in the user defined header fields pgp and the letter what you want to do with this message. By default all messages are signed. I think this is a good idea during these days where spam and viruses are filling our mailboxes.
Do not forget to set the filter for all outgoing mails to run this script.

I hope you like it. Suggestions and corrections are welcome.

[Michael]

Two comments:

1. You could save the user from having to edit the script by changing the Set $GPGexe to use the External command (e.g.,

   Code: Select all

   External $GPGexe "Enter path and name of the GPG executable" "C:\Programme\GNupg\gpg.exe"

   Note: This should be tested, I seem to recall problems with setting path variables in this way, from what I remember the backslashes are treated as escape characters, you could use forward slashes instead.
2. I notice that you set the "$EMail" variable (line 44) but never actually use it.

[Hogyt]

It looks good! I like the fact you're examining the return code with ExecuteAndWait. Along similar lines to Michaels comments, you could use an External to control the "By default every message will be signed" option instead of editing the code. You could also add a general error handler using "Set $OnErrorGoTo". I'd use double backslashes instead of using single ones or forward slashes.

Keep up the good work!!

[evilc77]

"You only have to place in the user defined header fields pgp and the letter what you want to do with this message. By default all messages are signed. "

Sorry but you have lost me with the above, I can't get it to work please help .

[chgerwig]

Hi evilc77!

Here is my latest script where you have only to put a 'y' in the Setup Script and your path to the gpg.exe than it should work.

Code: Select all

{ ### GnuPG (Version 1.2.4) sign and encrypt Mail Body
{ by Christian Gerwig <christian@gerwig.com> last change: 17.09.04
{ Script to sign or encrypt an outgoing message with the ability to control the script via
{ the User Header.
{
{ !!! Make sure to update the path to your gpg.exe in script setup !!!
{ In the sript setup you can choose if you want to sign every message by default or not.
{
{ If no secret key is available for the address the script aborts and gives you a message
{ If you want to control it go to the optional tab in the compose
{ window and in the "User Header" field enter
{       pgp: n  -> no pgp for this message
{       pgp: s  -> for signing this message
{       pgp: e  -> for encrypting this message
{
External $GPGexe "Enter the path and filename of your gpg.exe" "c:\\programme\\gnupg\\gpg.exe"
External $SignAll "Do you wish to sign all your messages by default? (Yes or No)" "Yes"

ReadHeader $pgp "pgp:" %message
If "n" ^ $pgp then end
If "s" ^ $pgp then sign_message
If "e" ^ $pgp then encrypt_message

:sign_message
If "No" ^ $SignAll then end
ReadRawBody $a %message
AddStrings $SIGFile $ScriptPath "sigtemp.txt"
SaveBody $a $SIGFile
ReadEmail $From
set $command "--default-key "
AddStrings $command $From " --clearsign " $ScriptPath "sigtemp.txt"
ExecuteAndWait $GPGexe $command #error
if #error > 0 then error_sign
AddStrings $ASCFile $ScriptPath "sigtemp.asc"
OpenBody $a $ASCFile
AssignBody %message $a
DeleteFile $SIGFile
DeleteFile $ASCFile
Exit

:encrypt_message
ReadRawBody $a %message
AddStrings $SIGFile $ScriptPath "sigtemp.txt"
SaveBody $a $SIGFile
ReadTo $t %message
GetLine $To 0 $t
set $command "-r "
AddStrings $command $To " -a --encrypt " $ScriptPath "sigtemp.txt"
ExecuteAndWait $GPGexe $command #error
if #error > 0 then error_encrypt
AddStrings $ASCFile $ScriptPath "sigtemp.asc"
OpenBody $a $ASCFile
AssignBody %message $a
DeleteFile $SIGFile
DeleteFile $ASCFile
Exit

:error_sign
Set $e "Signing ERROR! No secret key found for "
AddStrings $e $From
MessageBox $e
DeleteFile $SIGFile
Exit

:error_encrypt
Set $e "Encryting ERROR! No public key found for "
AddStrings $e $To
MessageBox $e
DeleteFile $SIGFile

:end
Exit

[evilc77]

Thanks the new script seems to work, now all I have to do is figure out why I get "Signing ERROR! No secret key found". I know Gnupg works as I have used it with other email progs.
Thanks again for the quick response.

[chgerwig]

You have to know that the GPG looks at the senders email address and take the relevant key for it.

So you will get this error, when you try to send and sign an email with an email address where you do not have a secret key for it.

[NoName]

Hi,

thanks for posting this pocoscript I need a few minutes to get a Message encrypted and it works.

After I send the message, the message is also encyptet at my sent - box.
For Exampel:

-----BEGIN PGP MESSAGE----- Version: GnuPG v1.2.1 (MingW32) hQIOA2n2CHCaGyZAEAf9Hd3t9+Ubm/OmKh/OxoVVNbYl0SneKFs7hVxrp5qRSE+t h3QeES9whsM9wgtm5cm4O2PUtWDp7jsZMvMHnj3ymkq9aOUxlEqnYB3DmY4ztQJJ bMa5X1C28rKA4MUVPfIf5flz13SqyMA5HsoCUdWg4czRw0Tu24NEjVLBMkxsgbYN Lp+iY7nOncoTqFIuO77Q6CzVUVb7 =75eR -----END PGP MESSAGE-----

The problem is now, if I have to change something or I have to read the message again how can I decrypt the old message ?

Thanks in advance

[tryforsure]

Thanks the new script seems to work, now all I have to do is figure out why I get "Signing ERROR! No secret key found". I know Gnupg works as I have used it with other email progs.
Thanks again for the quick response.

I had this as well and i solved it by using quotes in the long file name thats created

In the script just add escaped quotes ie: change line 31 to
AddStrings $command $From " --clearsign " """ $ScriptPath "sigtemp.txt" """

Also my gpg, 1.4.3-cvs, always creates a new file with these default options i had to change line 34 to
AddStrings $ASCFile $ScriptPath "sigtemp.txt.asc"

note the .asc at the end

sorry forgot to say you have to do this with the encrypt section as well lines 48 and 51!