InternetNZ communication uses PGP signed messages. To enable PGP signing and verification, you need to create PGP keys, enter your keys in plug-in configuration form, and send your public key to InternetNZ. PGP keys should be generated using gpg command. To generate a key, log in to HSPcomplete VE and type
gpg --gen-key
Follow the instructions the gpg application gives you. Choose a 'DSA and ElGamal' type key, with keysize '1024', and '0' expiry. Provide you real name, comments and email. When asked for a passphrase specify a random password or leave the field blank. However, it is highly recommended to safeguard your secure key privacy by a password. Save the password into a secure place (store in a file or put it down on a piece of paper): you will need it for the plug-in configuration and other operations.
Once the key is generated, you can export it by typing:
gpg --export --armour <username>
Username is either the 'Real Name', 'Email Address' or both, that you have entered for the key a few steps before (type: 'gpg --list-keys' to view usernames for your keys).
This command prints out your public key:
gpg --export --armour <username> > <filename>
where <filename>
is the name of the file where you have exported the public key
InternetNZ will provides you with its PGP public key as well. To find out InternetNZ public key ID, import InternetNZ into gpg key ring using command: gpg --import <filename>
where <filename>
is a file with InternetNZ public key. Then, by typing gpg --list-keys
you will get a list of available keys, among which InternetNZ key, e.g.:
pub 1024D/FA4077A6 2002-04-08
uid SRS Application (Test srs-wgtn key) <srsapp@srs-wgtn.wgtn.cat-it.co.nz>
sub 1024g/CC17E4DF 2002-04-08
where FA4077A6
is the public key ID.
To enable InternetNZ, fill in configuration form at PCC > Service Director > Domain Manager > Setup > InternetNZ.
To configure the InternetNZ plug-in:
gpg --export --armour <username> > filename
where <username>
is either email or name you used when generated your keys and filename
is the name of the file where your PGP public key is stored. gpg --export-secret-key --armour <username> > filename.
Note: It is highly advised to export and save your secret key into a external secure place to avoid possible hacker ravage.
gpg --homedir /etc/hspc/gpg --list-keys
Click the OK button to save the plug-in configuration.