source: postlfs/security/gnupg.xml@ d8684cbc

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
   "http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd" [
  <!ENTITY % general-entities SYSTEM "../../general.ent">
  %general-entities;

  <!ENTITY gnupg-download-http "http://public.ftp.planetmirror.com/pub/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-download-ftp  "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg-version;.tar.bz2">
  <!ENTITY gnupg-md5sum        "c7afd50c7d01fcfada229326b3958404">
  <!ENTITY gnupg-size          "2.8 MB">
  <!ENTITY gnupg-buildsize     "34.5 MB">
  <!ENTITY gnupg-time          "0.5 SBU">
]>

<sect1 id="gnupg" xreflabel="GnuPG-&gnupg-version;">
  <?dbhtml filename="gnupg.html"?>

  <sect1info>
    <othername>$LastChangedBy$</othername>
    <date>$Date$</date>
  </sect1info>

  <title>GnuPG-&gnupg-version;</title>

  <indexterm zone="gnupg">
    <primary sortas="a-GnuPG">GnuPG</primary>
  </indexterm>

  <sect2 role="package">
    <title>Introduction to GnuPG</title>

    <para>The <application>GnuPG</application> package contains a
    public/private key encryptor. This is becoming useful for signing
    files or emails as proof of identity and preventing tampering with
    the contents of the file or email.</para>

    <bridgehead renderas="sect3">Package Information</bridgehead>
    <itemizedlist spacing="compact">
      <listitem>
        <para>Download (HTTP): <ulink url="&gnupg-download-http;"/></para>
      </listitem>
      <listitem>
        <para>Download (FTP): <ulink url="&gnupg-download-ftp;"/></para>
      </listitem>
      <listitem>
        <para>Download MD5 sum: &gnupg-md5sum;</para>
      </listitem>
      <listitem>
        <para>Download size: &gnupg-size;</para>
      </listitem>
      <listitem>
        <para>Estimated disk space required: &gnupg-buildsize;</para>
      </listitem>
      <listitem>
        <para>Estimated build time: &gnupg-time;</para>
      </listitem>
    </itemizedlist>


    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    <itemizedlist spacing='compact'>
      <listitem>
        <para>Required Patch: <ulink
        url="&patch-root;/gnupg-&gnupg-version;-curl_LDAP-1.patch"/>
      </para>
      </listitem>
    </itemizedlist>

    <bridgehead renderas="sect3">GnuPG Dependencies</bridgehead>

    <bridgehead renderas="sect4">Optional</bridgehead>
    <para><xref linkend="openssl"/>,
    <xref linkend="openldap"/>,
    <xref linkend="libusb"/>,
    <xref linkend="curl"/>,
    <ulink url="../server/mail.html">an MTA</ulink>,
    <xref linkend="docbook-utils"/> and <ulink
    url="http://www.oasis-open.org/docbook/tools/dtm/">docbook-to-man</ulink></para>

  </sect2>

  <sect2 role="installation">
    <title>Installation of GnuPG</title>

    <para>Install <application>GnuPG</application> by running the following
    commands:</para>

<screen><userinput>patch -Np1 -i ../gnupg-&gnupg-version;-curl_LDAP-1.patch &amp;&amp;
./configure --prefix=/usr --libexecdir=/usr/lib &amp;&amp;
make</userinput></screen>

    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>

<screen role="root"><userinput>make install &amp;&amp;
chmod -v 4755 /usr/bin/gpg</userinput></screen>

  </sect2>

  <sect2 role="commands">
    <title>Command Explanations</title>

    <para><parameter>--libexecdir=/usr/lib</parameter>: This command
    creates a <filename class="directory">gnupg</filename> directory in
    <filename class="directory">/usr/lib</filename> instead of
    <filename class="directory">/usr/libexec</filename>.</para>

    <para><command>chmod -v 4755 /usr/bin/gpg</command>:
    <command>gpg</command> is installed setuid
    <systemitem class='username'>root</systemitem> to avoid swapping
    out sensitive data.</para>

  </sect2>

  <sect2 role="content">
    <title>Contents</title>

    <segmentedlist>
      <segtitle>Installed Programs</segtitle>
      <segtitle>Installed Libraries</segtitle>
      <segtitle>Installed Directories</segtitle>

      <seglistitem>
        <seg>gpg, gpgsplit, and gpgv</seg>
        <seg>None</seg>
        <seg>/usr/lib/gnupg and /usr/share/gnupg</seg>
      </seglistitem>
    </segmentedlist>

    <variablelist>
      <bridgehead renderas="sect3">Short Descriptions</bridgehead>
      <?dbfo list-presentation="list"?>
      <?dbhtml list-presentation="table"?>

      <varlistentry id="gpg">
        <term><command>gpg</command></term>
        <listitem>
          <para>is the backend (command-line interface) for
          this OpenPGP implementation.</para>
          <indexterm zone="gnupg gpg">
            <primary sortas="b-gpg">gpg</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="gpgsplit">
        <term><command>gpgsplit</command></term>
        <listitem>
          <para>separates key rings.</para>
          <indexterm zone="gnupg gpgsplit">
            <primary sortas="b-gpgsplit">gpgsplit</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="gpgv">
        <term><command>gpgv</command></term>
        <listitem>
          <para>is a verify only version of <command>gpg</command>.</para>
          <indexterm zone="gnupg gpgv">
            <primary sortas="b-gpgv">gpgv</primary>
          </indexterm>
        </listitem>
      </varlistentry>

    </variablelist>

  </sect2>

</sect1>