PHP and MySQL Web Development 4th Ed-tqw-_darksiderg

422 Chapter 18 Implementing Secure Transactions with PHP and MySQL
Type
cd ~
mkdir .gnupg
The user nobody needs a signing key of her own.To create this key, run this command
again:
gpg --gen-key
Because your nobody user probably receives very little personal email, you can create a
signing-only key for her.This key’s only purpose is to allow you to trust the public key
you extracted earlier.
To import the pubic key exported earlier, use the following command:
gpg --import filename
To tell GPG that you want to trust this key, you need to edit the key’s properties using
this command:
gpg --edit-key ‘Luke Welling ’
On this line, the text in single quotation marks is the name of the key. Obviously, the
name of your key will not be ‘Luke Welling ’, but a
combination of the name, comment, and email address you provided when generating it.
Options within this program include help, which describes the available commands:
trust, sign, and save.
Type trust and tell GPG that you trust your key fully.Type sign to sign this public
key using nobody’s private key. Finally, type save to exit this program, keeping your
changes.
Testing GPG
GPG should now be set up and ready to use. Creating a file containing some text and
saving it as test.txt will allow you to test it.
Typing the following command (modified to use the name of your key)
gpg -a --recipient ‘Luke Welling ’ --encrypt test.txt
should give you the warning
gpg: Warning: using insecure memory!