Email GPG Encryption

newmee 07 Oct, 2011
First of all, I just wanted to thank the creators and supporters of this component. We just got it, and we're using it to replace several different form components (we originally had a different component for every type of action-contact form, newsletter, etc...) It's fantastic that Chronoforms can take over all of this.

I was wondering, though, if you could provide a tutorial on how to use/setup the encryption. I'm not very familiar with servers, scripting, etc... so I can't figure out how to use the email encryption. First, I was wondering where to get the GPG secret key. Is it through the hosting provider? I attempted to go to the CPanel and created a "GnuPG Key" but it just said that the key was generated. I can't find any part of the code to insert in the Chronoforms field. Also, what does it mean to load the GPG class in the PHP?

And, is validation required in order to use the encryption? It's fine if it is, I'm planning on purchasing a license after I get everything setup because we need to use the Paypal-redirect anyway, but I just wanted to know if we shouldn't enable the emails until we've validated the installation (which will probably be in about 3 weeks).
GreyHead 08 Oct, 2011
Hi newmee ,

I know very very little about this. It's a new feature that Max added in the latest release.

I think that you PHP installation has to include the GnuPG library - you can check from the Site Admin | System Info to see if it is already installed (it's not on my host).

I don't know what you do with the keys :-(

If Max reads this maybe he can help.

Bob
ericv 17 Mar, 2014
Answer
Hi, I know this is an old thread, but I wanted to comment because after a long time trying I got it to work with Chronoforms.

A couple of things that need to be done. GPG needs to be installed on the server and Crypt_GPG needs to be installed as well. Without these it won't work.

In the email.php file under administrator/components/com_chronoforms/form_actions/email you need to add
require_once 'Crypt/GPG.php';
Reference wherever your GPG is installed

Without this require_once the check for the class fails and it never even tries to encrypt.

Next you need to install the public key onto the server. If you have cpanel then you should be able to do it in cpanel under GPG Keys. You'll need to generate a key on your front end mail system that you will use. (I am using Thunderbird with Enigmail installed)

Once you have that public key installed on your server, you need the ID of that key. You DO NOT NEED THE KEY ITSELF in the Email action. Just need the Key ID. Should look something like this B459BA3B.

So when you are in the actions in the email then under Encryption for the secret key you put in the key ID. But it has to be installed on the server.

Your email client should hold the private key and that is what decodes the email after it arrives.

Hope this helps anyone that is trying to send encrypted emails with Chronoforms.
GreyHead 17 Mar, 2014
Hi ericv,,

Thank you. I've added your post to this FAQ

Bob
This topic is locked and no more replies can be posted.