|
|
.muttrc Options That You May Find Useful
PGP-related (straight from /etc/Muttrc)
Highlights: (recommended by me)
- set pgp_replyencrypt = yes
- set pgp_replysign = yes
- set pgp_replysignencrypted = yes
set pgp_autosign = no
Name: pgp_autosign
Type: boolean
Default: no
Setting this variable will cause Mutt to always attempt to PGP/MIME
sign outgoing messages. This can be overridden by use of the pgp-
menu, when signing is not required or encryption is requested as
well.
set pgp_autoencrypt = no
Name: pgp_autoencrypt
Type: boolean
Default: no
Setting this variable will cause Mutt to always attempt to PGP/MIME
encrypt outgoing messages. This is probably only useful in connection
to the send-hook command. It can be overridden by use of the
pgp-menu, when encryption is not required or signing is
requested as well.
set pgp_entry_format="%4n %t%f %4l/0x%k %-4a %2c %u"
Name: pgp_entry_format
Type: string
Default: "%4n %t%f %4l/0x%k %-4a %2c %u"
This variable allows you to customize the PGP key selection menu to
your personal taste. This string is similar to ``index_format'', but
has its own set of printf()-like sequences:
%n number
%k key id
%u user id
%a algorithm
%l key length
%f flags
%c capabilities
%t trust/validity of the key-uid association
%[<s>] date of the key where <s> is an strftime(3)
expression
set pgp_long_ids = no
Name: pgp_long_ids
Type: boolean
Default: no
If set, use 64 bit PGP key IDs. Unset uses the normal 32 bit Key IDs.
set pgp_replyencrypt = yes
Name: pgp_replyencrypt
Type: boolean
Default: no
If set, automatically PGP encrypt replies to messages which are
encrypted.
set pgp_replysign = yes
Name: pgp_replysign
Type: boolean
Default: no
If set, automatically PGP sign replies to messages which are signed.
Note: this does not work on messages that are encrypted
and signed!
set pgp_replysignencrypted = no
Name: pgp_replysignencrypted
Type: boolean
Default: no
If set, automatically PGP sign replies to messages which are
encrypted. This makes sense in combination with
``pgp_replyencrypt'', because it allows you to sign all messages
which are automatically encrypted. This works around the problem
noted in ``pgp_replysign'', that mutt is not able to find out
whether an encrypted message is also signed.
set pgp_retainable_sigs = no
Name: pgp_retainable_sigs
Type: boolean
Default: no
If set, signed and encrypted messages will consist of nested
multipart/signed and multipart/encrypted body parts.
This is useful for applications like encrypted and signed mailing
lists, where the outer layer (multipart/encrypted) can be easily
removed, while the inner multipart/signed part is retained.
set pgp_show_unusable = yes
Name: pgp_show_unusable
Type: boolean
Default: yes
If set, mutt will display non-usable keys on the PGP key selection
menu. This includes keys which have been revoked, have expired, or
have been marked as ``disabled'' by the user.
set pgp_sign_as=""
Name: pgp_sign_as
Type: string
Default: ""
If you have more than one key pair, this option allows you to specify
which of your private keys to use. It is recommended that you use the
keyid form to specify your key (e.g., ``0xABCDEFGH'').
set pgp_sign_micalg="pgp-md5"
Name: pgp_sign_micalg
Type: string
Default: "pgp-md5"
This variable contains the default message integrity check algorithm.
Valid values are ``pgp-md5'', ``pgp-sha1'', and ``pgp-rmd160''. If you
select a signing key using the sign as option on the compose menu,
mutt will automagically figure out the correct value to insert here,
but it does not know about the user's default key.
So if you are using an RSA key for signing, set this variable to
``pgp-md5'', if you use a PGP 5 DSS key for signing, say ``pgp-sha1''
here. The value of this variable will show up in the micalg parameter
of MIME headers when creating RFC 2015 signatures.
set pgp_strict_enc = yes
Name: pgp_strict_enc
Type: boolean
Default: yes
If set, Mutt will automatically encode PGP/MIME signed messages as
quoted-printable. Please note that unsetting this variable may
lead to problems with non-verifyable PGP signatures, so only change
this if you know what you are doing.
set pgp_timeout=300
Name: pgp_timeout
Type: number
Default: 300
The number of seconds after which a cached passphrase will expire if
not used.
set pgp_verify_sig = yes
Name: pgp_verify_sig
Type: quadoption
Default: yes
If ``yes'', always attempt to verify PGP/MIME signatures. If ``ask'',
ask whether or not to verify the signature. If ``no'', never attempt
to verify PGP/MIME signatures.
set pgp_sort_keys=address
Name: pgp_sort_keys
Type: sort oder
Default: address
Specifies how the entries in the `pgp keys' menu are sorted. The
following are legal values:
address sort alphabetically by user id
keyid sort alphabetically by key id
date sort by key creation date
trust sort by the trust of the key
If you prefer reverse order of the above values, prefix it with
`reverse-'.
set pgp_create_traditional = no
Name: pgp_create_traditional
Type: quadoption
Default: no
This option controls whether Mutt generates old-style PGP encrypted
or signed messages under certain circumstances.
Note that PGP/MIME will be used automatically for messages which have
a character set different from us-ascii, or which consist of more than
a single MIME part.
Also note that using the old-style PGP message format is strongly
deprecated.
set pgp_decode_command="gpg %?p?--passphrase-fd 0? --no-verbose --batch -o - %f"
Name: pgp_decode_command
Type: string
Default: ""
This format strings specifies a command which is used to decode
application/pgp attachments.
The PGP command formats have their own set of printf-like sequences:
%p Expands to PGPPASSFD=0 when a pass phrase
is needed, to an empty string otherwise.
Note: This may be used with a %? construct.
%f Expands to the name of a file containing
a message.
%s Expands to the name of a file containing
the signature part of a multipart/signed
attachment when verifying it.
%a The value of pgp_sign_as.
%r One or more key IDs.
For examples on how to configure these formats for the various versions
of PGP which are floating around, see the pgp*.rc and gpg.rc files in
the samples/ subdirectory which has been installed on your system
alongside the documentation.
set pgp_getkeys_command=""
Name: pgp_getkeys_command
Type: string
Default: ""
This command is invoked whenever mutt will need public key information.
%r is the only printf-like sequence used with this format.
set pgp_verify_command="gpg --no-verbose --batch -o - --verify %s %f"
Name: pgp_verify_command
Type: string
Default: ""
This command is used to verify PGP/MIME signatures.
set pgp_decrypt_command="gpg --passphrase-fd 0 --no-verbose --batch -o - %f"
Name: pgp_decrypt_command
Type: string
Default: ""
This command is used to decrypt a PGP/MIME encrypted message.
set pgp_clearsign_command="gpg --no-verbose --batch -o - --passphrase-fd 0 --armor --textmode --clearsign %?a?-u %a? %f"
Name: pgp_clearsign_command
Type: string
Default: ""
This format is used to create a "clearsigned" old-style PGP attachment.
Note that the use of this format is strongly deprecated.
set pgp_sign_command="gpg --no-verbose --batch -o - --passphrase-fd 0 --armor --detach-sign --textmode %?a?-u %a? %f"
Name: pgp_sign_command
Type: string
Default: ""
This command is used to create the detached PGP signature for a
multipart/signed PGP/MIME body part.
set pgp_encrypt_sign_command="/usr/lib/mutt/pgpewrap gpg --passphrase-fd 0 -v --batch -o - --encrypt --sign %?a?-u %a? --armor --always-trust -- -r %r -- %f"
Name: pgp_encrypt_sign_command
Type: string
Default: ""
This command is used to combinedly sign/encrypt a body part.
set pgp_encrypt_only_command="/usr/lib/mutt/pgpewrap gpg -v --batch -o - --encrypt --textmode --armor --always-trust -- -r %r -- %f"
Name: pgp_encrypt_only_command
Type: string
Default: ""
This command is used to encrypt a body part without signing it.
set pgp_import_command="gpg --no-verbose --import -v %f"
Name: pgp_import_command
Type: string
Default: ""
This command is used to import a key from a message into
the user's public key ring.
set pgp_export_command="gpg --no-verbose --export --armor %r"
Name: pgp_export_command
Type: string
Default: ""
This command is used to export a public key from the user's
key ring.
set pgp_verify_key_command="gpg --no-verbose --batch --fingerprint --check-sigs %r"
Name: pgp_verify_key_command
Type: string
Default: ""
This command is used to verify key information from the key selection
menu.
set pgp_list_secring_command="gpg --no-verbose --batch --with-colons --list-secret-keys %r"
Name: pgp_list_secring_command
Type: string
Default: ""
This command is used to list the secret key ring's contents. The
output format must be analogous to the one used by
gpg --list-keys --with-colons.
This format is also generated by the pgpring utility which comes
with mutt.
set pgp_list_pubring_command="gpg --no-verbose --batch --with-colons --list-keys %r"
Name: pgp_list_pubring_command
Type: string
Default: ""
This command is used to list the public key ring's contents. The
output format must be analogous to the one used by
gpg --list-keys --with-colons.
This format is also generated by the pgpring utility which comes
with mutt.
# End PGP/GPG ####
|