[ic] Debian start-stop-daemon and PGP

Stefan Hornburg Racke interchange-users@interchange.redhat.com
Thu Mar 7 15:38:00 2002


Bill Carr <bill@worldwideimpact.com> writes:

> Debian/woody, Perl 5.6.1, IC 4.8.3
> 
> I am using racke's Interchange start-stop script. I have USER=interch in
> the script. When I use this script to start IC, interchange starts and
> is owned by interch.
> 
> The problem arises during encryption. I see error files created in
> ScratchDir indicating the encryption program trying to open root's key
> ring:
> gpg: /root/.gnupg/secring.gpg: can't create keyring: Permission denied
> gpg: keyblock resource `/root/.gnupg/secring.gpg': file open error
> gpg: /root/.gnupg/pubring.gpg: can't create keyring: Permission denied
> gpg: keyblock resource `/root/.gnupg/pubring.gpg': file open error
> gpg: bill@worldwideimpact.com: skipped: public key not found
> gpg: [stdin]: encryption failed: public key not found
> 
> In the past I have just set the EncryptProgam in catalog.cfg and made
> sure I indicated the home directory for interchange. Now I want to be
> modern and just set EncryptKey.
> 
> If I start interchange like the following, I do not have the problem.
> # su - interch
> $ ./bin/interchange -u 
> 
> Any ideas? I apologize if this issue is more suited to a Debian list.

As user of the Debian packages I noticed this problem too 
and found the following workaround for it: add something
like

export GNUPGHOME=/home/interch/.gnupg

to the init script.

As maintainer of the Debian packages I'm not sure how to handle this
in a graceful way. Any suggestions are welcome :-)

Ciao
        Racke

-- 
Think of it !

For projects and other business stuff please refer to COBOLT NetServices
(URL: http://www.cobolt.net; Email: info@cobolt.net; Phone: 0041-1-3884400)