NOTE: If you are interested in Enigform in a more server-oriented scenario, check out The Enigform, mod_openpgp and Enigform for Wordpress Definitive Guide.
Table of Contents
I tested this on Windows XP SP3, with latest Firefox (3.0.7) and latest Stable gpg4win (1.1.4) at the time of this writing (2009-March-16). As long as GnuPG and Firefox can run on your platform, Enigform should run. Enigform itself is Firefox 1.5+ compatible.
TESTER WANTED - You use Mac OSX? Shoot me an email: buanzo at buanzo.com.ar
2. GNU Privacy Guard Installation
- Open your browser and visit http://gpg4win.org/download.html. There are many downloads available, but you should click on the first one (gpg4win 1.1.x in red letters).
- Save the file to the desktop or any other location you can easily find later on.
- Once the download finishes, close the browser. Go to the Desktop or folder where gpg4win-1.1.x.exe file has been downloaded to.
- Double click it to commence installation:
- If a warning dialog from Windows regarding 'publisher can't be verified' appears, click 'Run'.
- Click next. Read and accept (if you do) the license.
- Select with modules to install. The default selection is OK, but make sure WinPT gets installed as well.
- Click next.
- Now you're asked for the Destination Folder. Change it if you wish, but you don't need to remember it. Enigform for Firefox on Windows will read the Registry and determine the installation location. The default for an English setup is: C:\Program Files\GNU\GnuPG
- Now select where Gpg4win shall install links. Click next.
- Choose the Start Menu Folder. Default is 'GnuPG For Windows'. Click Install.
- Click Next when the button becomes available.
- Click Finish. There's an option to show the README file. That's up to you :)
3. OpenPGP Key Pair Creation using Windows Privacy Tray
- In the Start Menu, find the 'GnuPG for Windows' folder. It might be under 'All Programs' or 'Programs'.
- Click the WinPT item. A small windows with title 'WinPT First Start' will appear. It has 3 options: Generate a GnuPG key pair, Copy GnuPG keyrings from another location and Generate key pair on a Smart Card. For this tutorial, we will only cover the first option. Make sure that's the selected choice (Generate a GnuPG key pair), then click OK.
- Input your complete, real name, and your primary eMail address. Make sure 'Prefer RSA keys' is *NOT* checked. Then click OK.
- Another Window appears, asking you to Enter Passphrase. This passphrase is more than just a password. Is a secret phrase you have to CORRECTLY remember. If you ever forget this passphrase, your keypair will be UNUSABLE. Use your best discretion when creating the passphrase. Make sure you can remember it. Once you are finished, click OK.
- Input the same passphrase, for verification. Then click OK. A dialog will appear showing the progress of keypair generation. Once it's finished (it might take minutes depending on a number of factors, but usually takes moments),
- A new dialog stating that Key Generation was completed will appear. Click OK.
- A new dialog asking you to Backup your keyrings will appear. This is up to you, but I recommend you click Yes and follow the instructions. Make sure that backup is not accesible by a 3rd party, and store two copies of it. One near you, another in a safe location elsewhere.
4. Send the Public Key to a Keyserver
In the Tray, you'll notice a new icon. Hover the mouse over it, until you can identify the 'Windows Privacy Tray'. Double click it.
The Key Manager window appears. First, we must add a new Keyserver:
- In the Key Manager, from the main menu bar, click on "Keyserver". A small dialog appears.
- Click with the secondary mouse button on the white area. A menu should appear (if it does not, click on a different region just in case).
- Click 'Add'. Make sure TYPE equals 'HKP'. In the host name, input "hkp://keys.gnupg.net". Leave port unchanged. Click 'Add'.
It should now appear on the keyserver list. Set it as default, then Close the window.
Now we will send your new public key to a keyserver:
- Click on the newly created key using the secondary mouse button. A context menu will appear.
- From the 'Send to Keyserver' submenu, click on 'hkp://keys.gnupg.net'.
- A verification window appears, asking if you really want to send the key. Click Yes.
- A dialog stating 'Key was successfully sent' should appear.
5. Installing Enigform for Windows
- Open up Firefox.
- Visit this page: https://addons.mozilla.org/en-US/firefox/addon/4531
- Click 'Add to Firefox' (the green button in the middle of the page).
- A dialog will appear. The 'Install Now' button will become available in 5 seconds. Click it when it is.
- Now click 'Restart Firefox'.
When Firefox comes back up, a dialog will let you know Enigform has been installed. Dismiss it.
We can do a quick Enigform test:
- Visit http://maotest.buanzo.org
- Click on the last link, 'Click Here to Login'. Your passphrase will be asked. You might wish to click 'Do not ask again'.
NOTE: On windows, there doesn't seem to be a GPG Agent available. Sorry.
After you input your passphrase, a secure sesion will be attempted. A dialog saying that the server does not recognize your public key will appear. This is OK.
The resulting page will attempt to import your key from keys.gnupg.net. Refresh (CTRL+R) a few times, until this block of text appears on the page:
gpg: requesting key xxxxxxxxxxxx from hkp server keys.gnupg.net
gpg: key xxxxxxxxx: public key "xxxxxx" imported
gpg: Total number processed: 1
gpg: imported: 1
Now, go back to http://maotest.buanzo.org. Again, click on the last link, 'Click Here to Login'. This time, the server will recognize your public key, and welcome you to the site. (Welcome back, YOUR_REAL_NAME! - We missed you!).
Congratulations, Enigform is working for you :)