Loading...
 

Security OpenPGP tab

Related Topics
Overview
Use this tab to configure Tiki to use OpenPGP.
To Access
From the Security Admin page, click the OpenPGP tab.



Option Description Default
PGP/MIME encrypted email messaging Use OpenPGP PGP/MIME-compliant encrypted email messaging. All email messaging, notifications, and newsletters are sent as PGP/MIME-encrypted messages, signed with the signer key, and are completely opaque to outsiders. All user accounts need to be properly configured in a gnupg keyring with public keys associated with their tiki-account-related email addresses.
Enable only if gpg, keyring, and tikiaccounts are properly configured for PGP/MIME functionality. NOTE: Requires that all accounts have their public-keys configured into gnupg-keyring, so do not allow non-administred registrations (or e.g. non-configured emails for newsletters etc) to site if this feature turned on.
Disabled
Path to gnupg keyring Full directory path to gnupg keyring (default /home/www/.gnupg/ ). The directory, related subdirectories (e.g., a subdirectory 'signer'), and files must have proper permissions for tiki to access/read the directories/files, and create/delete necessary temporary workfiles there. /home/www/.gnupg/
Path to gpg executable Full path to gpg executable. /usr/bin/gpg
Read signer pass phrase from prefs or from a file Read GnuPG signer pass phrase from preferences or from a file (default is 'file' ). With file option, configure other preference for the full path including the filename of the file containing the GnuPG signer private-key pass phrase.
preferences | file
Preferences
Signer pass phrase GnuPG signer private-key passphrase. Define pass phrase either here or in a signer pass phrase file.
leave empty if read from file
None
Path to signer pass phrase filename Full path including the filename of the file containing the GnuPG signer private-key pass phrase. The directory and file must have proper permissions for tiki to access/read the signer pass phrase file. /home/www/.gnupg/signer/sig...
Option Description Default
PGP/MIME encrypted email messaging Use OpenPGP PGP/MIME-compliant encrypted email messaging. All email messaging, notifications, and newsletters are sent as PGP/MIME-encrypted messages, signed with the signer key, and are completely opaque to outsiders. All user accounts need to be properly configured in a gnupg keyring with public keys associated with their tiki-account-related email addresses.
Enable only if gpg, keyring, and tikiaccounts are properly configured for PGP/MIME functionality. NOTE: Requires that all accounts have their public-keys configured into gnupg-keyring, so do not allow non-administred registrations (or e.g. non-configured emails for newsletters etc) to site if this feature turned on.
Disabled
Path to gnupg keyring Full directory path to gnupg keyring (default /home/www/.gnupg/ ). The directory, related subdirectories (e.g., a subdirectory 'signer'), and files must have proper permissions for tiki to access/read the directories/files, and create/delete necessary temporary workfiles there. /home/www/.gnupg/
Path to gpg executable Full path to gpg executable. /usr/bin/gpg
Read signer pass phrase from prefs or from a file Read GnuPG signer pass phrase from preferences or from a file (default is 'file' ). With file option, configure other preference for the full path including the filename of the file containing the GnuPG signer private-key pass phrase.
preferences | file
Preferences
Signer pass phrase GnuPG signer private-key passphrase. Define pass phrase either here or in a signer pass phrase file.
leave empty if read from file
None
Path to signer pass phrase filename Full path including the filename of the file containing the GnuPG signer private-key pass phrase. The directory and file must have proper permissions for tiki to access/read the signer pass phrase file. /home/www/.gnupg/signer/sig...
Option Description Default
PGP/MIME encrypted email messaging Use OpenPGP PGP/MIME-compliant encrypted email messaging. All email messaging, notifications, and newsletters are sent as PGP/MIME-encrypted messages, signed with the signer key, and are completely opaque to outsiders. All user accounts need to be properly configured in a gnupg keyring with public keys associated with their tiki-account-related email addresses.
Enable only if gpg, keyring, and tikiaccounts are properly configured for PGP/MIME functionality. NOTE: Requires that all accounts have their public-keys configured into gnupg-keyring, so do not allow non-administred registrations (or e.g. non-configured emails for newsletters etc) to site if this feature turned on.
Disabled
Path to gnupg keyring Full directory path to gnupg keyring (default /home/www/.gnupg/ ). The directory, related subdirectories (e.g., a subdirectory 'signer'), and files must have proper permissions for tiki to access/read the directories/files, and create/delete necessary temporary workfiles there. /home/www/.gnupg/
Path to gpg executable Full path to gpg executable. /usr/bin/gpg
Read signer pass phrase from prefs or from a file Read GnuPG signer pass phrase from preferences or from a file (default is 'file' ). With file option, configure other preference for the full path including the filename of the file containing the GnuPG signer private-key pass phrase.
preferences | file
Preferences
Signer pass phrase GnuPG signer private-key passphrase. Define pass phrase either here or in a signer pass phrase file.
leave empty if read from file
None
Path to signer pass phrase filename Full path including the filename of the file containing the GnuPG signer private-key pass phrase. The directory and file must have proper permissions for tiki to access/read the signer pass phrase file. /home/www/.gnupg/signer/sig...



Documentation for Tiki OpenPGP support - developing issues here: https://dev.tiki.org/OpenPGP

List Slides