Signing a multipart email with GPG

#!/usr/bin/perl
use warnings;
use strict;
use Crypt::GPG;
use MIME::Lite;

my $gpg = new Crypt::GPG;
$gpg->detach(0);
$gpg->armor(1);
$gpg->gpgopts('--lock-multiple');
$gpg->gpgbin('gpgbinary');
$gpg->secretkey('key');
$gpg->passphrase('pass');

my $gpge = "gpgbinary";
my $passwd = "pass";


my $msg = MIME::Lite->new(
    From    => 'him@nowhere.com',
    To      => 'her@nowhere.com',
    Subject => 'sample',
    Type    => 'multipart/mixed',
);

my $text = "message\n";

my $enc = $gpg->sign($text);

$msg->attach(
    Data => $enc,
    Type => 'text/plain',
);

$gpg->detach(1);

my $file = "/tmp/image1.gif";
my $filesig = $file.".sig";
my $fileasc = $file.".sig.asc";

system("echo '$passwd' | $gpge --passphrase-fd 0 --detach-sign $file");
system("$gpge --enarmor $filesig");
system("mv $fileasc $filesig");

$msg->attach(
    Type => 'image/gif',
    Path => '/tmp/image1.gif',
    Filename => 'image1.gif'
);

$msg->attach(
    Type => 'image/gif',
    Path => $filesig,
    Filename => 'image1.gif.sig'
);

$msg->send();

#!/usr/bin/perl -w
#pgpMailer.cgi

use CGI qw(:standard);
use strict;
use warnings;
use CGI::Carp qw(fatalsToBrowser);
use MIME::Entity;
use Mail::GPG;

my $filename    = param("attachment");

#The keys you are using should be in this path under the directory ".gnupg"   #EG. /home/nobody/.gnupg
$ENV{"HOME"} = "PATH_TO_HOME_DIRECTORY_OF_USER_AS_WHICH_YOUR_SCRIPT_RUNS";    #EG. /home/nobody
my $message;

#Only grab the filename....but is the path ever passed?? 
#$filename =~ s/.*[\/\\](.*)/$1/;

$message .= "deer zanta, i can haz a prezidency?";

&sendEmail($message, $filename);

sub sendEmail{

   my ($message, $filename) = ($_[0], $_[1]);

   my $fromAddress = 'georgeW@texas.gov';     #from_address needs to be "creative" so that
   my $toAddress = 'santa@northPole.com';       #bugzilla will authenticate as a user
   my $subject = "mah giftuz";
   my $signedEmail = new MIME::Entity;
   my $sendmailBin = "FULL_PATH_TO_YOUR_SENDMAIL_BINARY";
   my $gpgBin = "FULL_PATH_TO_YOUR_GPG_BINARY";
   my $uploadDir = "/tmp";
   my $filePath = $uploadDir."/".$filename;
   my $password = "YOUR_GPG_SECRET_KEY_PASSWORD"; #eg. "q1!w2\@e3#"
   my $secretKey = "ID_OF_YOUR_SECRET_KEY_FOR_SIGNING";   #eg. "5D8E9FB1"
   my $publicKey = "ID_OF_YOUR_PUBLIC_KEY_FOR_ENCRYPTION";   #eg. "5D8E9FB1"

   #(The code within Mail/GPG.pm for query_key seems to grab PUBLIC keys ONLY...)
   #my $secretKey = $gpg->query_keyring (
   #             search => $fromAddress,
   #);

   #To send binary files pgp/mime signed use this
   my $gpg = Mail::GPG->new (
             no_strict_7bit_encoding => '1'
   );  

   # 1) Create the first textual part of the email
   my $email = MIME::Entity->build(From		=> $fromAddress,
                                   To		=> $toAddress,
                                   Subject	=> $subject,
                                   Data		=> $message);

   # 2) If ( there is a file name provided) then { add the file too} 
   if ($filename){
   
      my $fileType = uploadInfo($filename)->{'Content-Type'};
   
      open UPLOADFILE, ">$filePath";
      binmode UPLOADFILE;
      while ( <$filename> ) { print UPLOADFILE; }
      close UPLOADFILE;

      $email->attach(Path	=> $filePath,
                     Type	=> $fileType);
   } 

   #If a file name exists, then a file exists, which we want to attach and sign
   if(!($filename)){  

      $signedEmail = $gpg->armor_sign(
                  entity	=> $email,
                  key_id	=> $secretKey,
                  passphrase	=> $password  
                );
   }else{

      #just sign the message text
      $signedEmail = $gpg->mime_sign(
                  entity        => $email,
                  key_id 	=> $secretKey,
                  passphrase    => $password
                );
   }

   # 4) send it on its way
   open(SENDMAIL, "|$sendmailBin -t") or die "Cannot open $sendmailBin: $!";
   print SENDMAIL $signedEmail->stringify;
   close(SENDMAIL); 

   # 5) clean up after yourself
   `rm $filePath`; 
}