read.me

pgp加密例子

    environment variable is set correctly.  (If PGPPATH is set, PGP
    does not need to be in your PATH.)
5.  Run PGP manually through both public key encryption to yourself
    and decryption of what you encrypted BEFORE using this interface.
    (You must of course first generate your own secret-public key pair.)
6.  Encrypt and send a message to yourself with this interface to test
    operation BEFORE using it for real email.

Simple use instructions for this interface:

1.  Get PGP working manually BEFORE trying to use this interface!
    (Do NOT ask me for help on PGP!)
2.  To Encrypt messages to a given recipient, or to Verify incoming
    Digital Signatures, you MUST have that person's public key on your
    PGP Key Ring (which is maintained by PGP).  When you have a PGP
    PUBLIC KEY BLOCK (it will say just that) that you want to Add to
    your PGP Key Ring:
    a.  Select a message in a WinPMail Folder or open a message in the
        WinPMail Reader.
    b.  Use the Folder or Reader menu Special | Key Management to open
        my Key Management dialog.
    c.  If you selected or opened a message that contains a PGP PUBLIC
        KEY BLOCK, it will automatically appear in the Key Management
        dialog box.  Otherwise you can use the Windows Clipboard to
        paste a PGP Public Key Block into the dialog box.
    d.  Click on "Add Key to Ring".
    e.  Click on "Close" when you are done with Key Management.
    f.  The recipient's public key is normally selected automatically
        by the recipient's email address (NOT the recipient's name), 
        so make sure that the recipient includes the email address in
        the PGP PUBLIC KEY BLOCK (together with any alternates that
        you might need/want to use).
3.  To check to see if a given person's public key is on your PGP Key
    Ring (which is maintained by PGP):
    a.  Select a message in a WinPMail Folder or open a message in the
        WinPMail Reader.
    b.  Use the Folder or Reader menu Special | Key Management to open
        my Key Management dialog.
    c.  Type in the name or email address, or paste it in from the
        Windows Clipboard.  (You can only check one at a time.)
    d.  Click on "Check for Key".
    e.  Click on "Close" when you are done with Key Management.
    f.  The recipient's public key is normally selected automatically
        by the recipient's email address (NOT the recipient's name), 
        so make sure that the recipient includes the email address in
        the PGP PUBLIC KEY BLOCK (together with any alternates that
        you might need/want to use).
4.  To actually Encrypt a message that you have composed:
    a.  Click the "Encrypt..." check box on the header of the Message
        composer window to bring up the Message Encryptions dialog
        box.
    b.  Select "(JN) PGP Public Key" next to "Encryption method."  If
        you don't see "(JN) PGP Public Key" in the list of available
        encryptors, then YOU HAVE NOT INSTALLED MY INTERFACE PROPERLY.
    c.  You normally do NOT have to enter a "Password"!  The recipient
        email address is normally used to automatically select the
        recipient's public key.  (You can use the "Password" field to
        override the email address for looking up the public key if
        you KNOW that the email address won't work properly.)
    d.  "Encrypt message" should already be checked.
    e.  Click on "OK".
    f.  Remember that attachments to encrypted messages are NOT
        supported.
    g.  Send the message as usual.
    h.  Note:  If you are using WinPMail in an off-line environment,
        encryption will not occur until the message is actually being
        transmitted.  If PGP cannot find your recipient's Public Key,
        an error dialog will appear and a blank message will be sent.
5.  To add a Digital Signature to a message that you have composed:
    a.  To use the Digital Signature feature you MUST have created
        your own secret/public key pair.  See the PGP documentation
        for how to do this.  (Do NOT ask me for help on PGP!)
    b.  Click the "Encrypt..." check box on the header of the Message
        composer window to bring up the Message Encryptions dialog
        box.
    c.  Select "(JN) PGP Public Key" next to "Encryption method."  If
        you don't see "(JN) PGP Public Key" in the list of available
        encryptors, then YOU HAVE NOT INSTALLED MY INTERFACE PROPERLY.
    d.  If you have defined a "secret pass phrase" for your own PGP
        secret key, and if you have not set the PGPPASS environment
        variable, you MUST enter your "secret pass phrase" in the
        "Password" control.  (See the Release Notes above for how to
        set PGPPASS in your AUTOEXEC.BAT file.)
    e.  UNcheck "Encrypt message" and check "Add digital signature".
    f.  Click on "OK".
    g.  Remember that attachments to digitally-signed messages are
        NOT supported.
    h.  Send the message as usual.
    i.  Note:  If you are using WinPMail in an off-line environment,
        digital signing will not occur until the message is actually
        being transmitted.  If your "secret pass phrase is invalid",
        an error dialog will appear and a blank message will be sent.
6.  To BOTH Encrypt and add a Digital Signature to a message that
    you have composed, combine the above procedures.  Note that
    you will not be able to override the recipient's email address
    with the "Password" control, since that is reserved for your
    "secret pass phrase" (even if you don't have one).
7.  Decryption:  When you try to open (or otherwise access; e.g.,
    a folder Find) an encrypted message that you have received,
    WinPMail will automatically open the "Enter key to decrypt
    message" dialog box.  If you have defined a "secret pass phrase"
    for your own PGP secret key, and if you have not set the PGPPASS
    environment variable, you MUST enter your "secret pass phrase"
    (each time) in the "Password" control.  (See the Release Notes
    above for how to set PGPPASS in your AUTOEXEC.BAT file.)
8.  To Verify an incoming Digital Signature (which is strictly an
    explicit MANUAL process):
    a.  You MUST have that sender's public key on your PGP Key Ring
        (which is maintained by PGP).  See above for how to add a
        PGP PUBLIC KEY BLOCK to your PGP Key Ring.
    b.  From either the Folder (with the message selected) or Reader
        menus, use the menu item Special | Find/verify digital
        signature...

Troubleshooting:

1.  If you get the error dialog "File error, Cannot find PGPJN.DLL",
    then you did not install this interface correctly!  Go back over
    the installation instructions and make sure the directory you 
    created is EXACTLY as specified (i.e., PGPJN).
2.  If you get the error dialog "PGP Interface, TEMP environment
    variable not set properly!" then you failed to set the TEMP
    environment variable to a valid directory where this interface
    can create temporary files.  Go back over the installation
    instructions.
3.  If when decrypting you get the error dialog:
       This message can only be read by:
       xxxxx
       You do not have the secret key needed to decrypt this file.
    where "xxxxx" is your email address, check to be sure that it
    does appear that way on your Key Ring with Key Management |
    Check for Key.  If it does, you may have FORGOTTEN TO ENTER
    YOUR SECRET PASS PHRASE, or ENTERED YOUR SECRET PASS PHRASE
    INCORRECTLY.
4.  Signing of messages by default uses the LAST secret key that you
    created (i.e., the first key on your secret keyring).  If you
    have created more than one secret key, this can cause signing to
    fail.  The work-around is to specify the secret key to use for
    signing with the "MyName" option in your PGP CONFIG.TXT file.
5.  Setting non-default options in your PGP CONFIG.TXT file may
    cause problems.  Restore the defaults and retest your problem.
6.  You can only verify digital signatures if you have the sender's
    public key on your Key Ring!
7.  A public key that you can add to your Key Ring is framed with
    "PGP PUBLIC KEY BLOCK", not "PGP SIGNATURE".  The latter are
    digital signatures that cannot be added to your Key Ring.
8.  While I do NOT provide support (particularly for PGP), I do
    welcome bug/problem reports.  Please be sure to COMPLETELY
    REREAD THIS ENTIRE FILE *BEFORE* submitting a bug/problem
    report -- you may have overlooked the answer to your problem.
9.  If an error dialog from this Interface is involved in any way,
    please be SURE to use the Windows clipboard to copy the text
    from the error dialog into your problem report.

John Navas <[e-mail]>