source: postlfs/security/gnupg.xml@ ace3ef8

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
   "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
  <!ENTITY % general-entities SYSTEM "../../general.ent">
  %general-entities;

  <!ENTITY gnupg-download-http "http://public.ftp.planetmirror.com/pub/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-download-ftp  "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-size          "2.5 MB">
  <!ENTITY gnupg-buildsize     "28 MB">
  <!ENTITY gnupg-time          "0.44 SBU">
]>

<sect1 id="gnupg" xreflabel="GnuPG-&gnupg-version;">
<?dbhtml filename="gnupg.html"?>
<title>GnuPG-&gnupg-version;</title>

<sect2>
<title>Introduction to <application>GnuPG</application></title>

<para>The <application>GnuPG</application> package contains a public/private
key encryptor. This is becoming useful for signing files or emails as proof 
of identity and preventing tampering with contents of the file or email.</para>

<sect3><title>Package information</title>
<itemizedlist spacing='compact'>
<listitem><para>Download (HTTP): <ulink
url="&gnupg-download-http;"/></para></listitem>
<listitem><para>Download (FTP): <ulink
url="&gnupg-download-ftp;"/></para></listitem>
<listitem><para>Download size: &gnupg-size;</para></listitem>
<listitem><para>Estimated Disk space required:
&gnupg-buildsize;</para></listitem>
<listitem><para>Estimated build time:
&gnupg-time;</para></listitem></itemizedlist>
</sect3>

<sect3><title>Additional downloads</title>
<itemizedlist spacing='compact'>
<listitem><para><ulink 
url="&patch-root;/gnupg-&gnupg-version;-po_install_fix-1.patch"/>
</para></listitem>
</itemizedlist>
</sect3>

<sect3><title><application>GnuPG</application> dependencies</title>
<sect4><title>Optional</title>
<para><xref linkend="openldap"/>, <ulink url="../server/mail.html">MTA</ulink>, 
<xref linkend="docbook-utils"/> and <ulink 
url="http://www.oasis-open.org/docbook/tools/dtm/">docbook-to-man</ulink>
</para></sect4>
</sect3>

</sect2>

<sect2>
<title>Installation of <application>GnuPG</application></title>

<para>Install <application>GnuPG</application> by running the following 
commands:</para>

<screen><userinput><command>patch -Np1 -i ../gnupg-&gnupg-version;-po_install_fix-1.patch &amp;&amp;
./configure --prefix=/usr --libexecdir=/usr/lib &amp;&amp;
make &amp;&amp;
make install &amp;&amp;
chmod 4755 /usr/bin/gpg</command></userinput></screen>

</sect2>

<sect2>
<title>Command explanations</title>

<para><parameter>--libexecdir=/usr/lib</parameter>: This command
creates a <filename class="directory">gnupg</filename> directory in
<filename class="directory">/usr/lib</filename> instead of
<filename class="directory">/usr/libexec</filename>.</para>

<para><command>chmod 4755 /usr/bin/gpg</command>: <command>gpg</command> 
is installed setuid root to avoid swapping out sensitive data.</para>

</sect2>

<sect2>
<title>Contents</title>

<para>The <application>GnuPG</application> package contains 
<command>gpg</command>,
<command>gpgsplit</command> and 
<command>gpgv</command>.</para>

</sect2>

<sect2><title>Description</title>

<sect3><title>gpg</title>
<para><command>gpg</command> is the backend (command-line interface) for
this Open<acronym>PGP</acronym> implementation.</para></sect3>

<sect3><title>gpgsplit</title>
<para><command>gpgsplit</command> separates key rings.</para></sect3>

<sect3><title>gpgv</title>
<para><command>gpgv</command> is a verify only version of
<command>gpg</command>.</para></sect3>

</sect2>

</sect1>