Index of /~campbell
This is the web directory of Taylor `Riastradh' Campbell, containing
miscellaneous frobbotzim that have accrued over the years with no
rhyme or reason. Well, sometimes they rhyme.
If you like any of what I do and would like to support it by sending
me Bitcoins, send me mail saying so and I'll reply with a Bitcoin
address.
I welcome signed and encrypted OpenPGP and S/MIME mail. This README
file has an OpenPGP detached signature in README.pgp and a PKCS#7/CMS
detached signature in README.p7s made with the same keys I use for
email.
* OpenPGP
My OpenPGP keys are at <http://mumble.net/~campbell/riastradh.pgp> and
on the key servers. The key you should use is:
pub 4096R/7EF3D01B 2010-12-31 [expires: 2020-12-31]
Key fingerprint = FD8A F90D EEB3 04CD 8F21 28A4 D4BB 4629 7EF3 D01B
uid Taylor R Campbell (Riastradh) <campbell@mumble.net>
This should match the output you see from the command
gpg --with-fingerprint --list-keys campbell@mumble.net
If you use GnuPG, then after you import my OpenPGP key with
gpg --import riastradh.pgp
the detached signature README.pgp on this file README should be
accepted by the command
gpg --verify README.pgp README
which should say `Good signature from "Taylor R Campbell (Riastradh)
<campbell@mumble.net>"'.
If not, something is wrong! If so, everything may be right, provided
that you verified my OpenPGP key over a secure channel.
* S/MIME
My S/MIME key is at <http://mumble.net/~campbell/riastradh.pem>. The
certificate's SHA-1 fingerprint is
88d3 886f 562e a96d 4284 3e6d af37 7943 cc90 e550,
which should match the output of the command
openssl x509 -fingerprint -noout < riastradh.pem
The public key id is
6838 7d83 67dc 1b31 9388 4d79 8158 bc8a eb41 4d78,
which should match the `X509v3 Subject Key Identifier' field in the
output of the command
openssl x509 -text -noout < riastradh.pem
The detached signature README.p7s on this file README should be
accepted by the command (or perhaps incantation[*])
openssl smime -verify -noverify -nointern -inform PEM
-certfile riastradh.pem -content README
< README.p7s > /dev/null
which should say `Verification successful'.
If not, something is wrong! If so, everything may be right, provided
that you verified my x.509 certificate over a secure channel.
[*] In this incantation,
. `-verify' means `verify the signature README.p7s on the file README';
. `-noverify' means `don't verify the certificate in riastradh.pem'
(since it is a self-signed certificate); and
. `-nointern' means `ignore any certificates in README.p7s and use only
the one riastradh.pem for key material'.