Vendor Provided PGP Public Key

We can use vendor provided PGP public key to do encryption and send the encrypted data/files to vendor. Once they receive it then they can use their Private Key to decrypt. Vendor can share their public key either in asc (Text) or gpg (Binary) extension.

To use it in MuleSoft we need gpg (Binary) extension and Fingerprint detail which we can extract from the Key itself (using Kleopatra). If Vendor provides asc (text) key then we can generate gpg (binary) extension key using Kleopatra tool.

Please check and install the software before starting with this tutorial.

Installing Kleopatra

Once installed, run the Kleopatra

Import the Public key in Kleopatra (any key will work – asc or gpg)

Once Imported, Right click on the Key

Export the binary Public PGP key (with .gpg extension) as this will be used in MuleSoft

Once exported, right click on the Key and Click on details

Note down the fingerprint (remove spaces) – 4232E6BD7151FF89D9F755807AC70C45987C59AA

With below details we can do the encryption in MuleSoft

• Public Key in gpg format – Public_4232E6BD7151FF89D9F755807AC70C45987C59AA.gpg
• Fingerprint – 4232E6BD7151FF89D9F755807AC70C45987C59AA