source: postlfs/security/gnupg2.xml@ 298fee30

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 298fee30 was 298fee30, checked in by Fernando de Oliveira <fernando@…>, 9 years ago
  • Update to LVM2.2.02.128.
  • Update to xf86-input-wacom-0.31.0.
  • Update to eog-3.16.3.
  • More short descriptions from Denis Mugnier.
  • Add upowerd to sddm bootscript, for buttons to work (halt, reboot, etc.).
  • Fix lxdm uninstall target in bootscripts Makefile.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@16350 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.8 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http " ">
8 <!ENTITY gnupg2-download-ftp "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "ebdf92b15b8bcd8579b643c7f41a3238">
10 <!ENTITY gnupg2-size "4.7 MB">
11 <!ENTITY gnupg2-buildsize "105 MB (including tests)">
12 <!ENTITY gnupg2-time "0.7 SBU (including tests)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG">GnuPG</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG</title>
31
32 <para>The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.</para>
39
40 &lfs77_checked; &gcc5_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &gnupg2-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &gnupg2-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &gnupg2-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &gnupg2-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
65
66 <bridgehead renderas="sect4">Required</bridgehead>
67 <para role="required">
68 <xref linkend="libassuan"/>,
69 <xref linkend="libgcrypt"/>,
70 <xref linkend="libksba"/>, and
71 <xref linkend="npth"/>
72 </para>
73
74 <bridgehead renderas="sect4">Recommended</bridgehead>
75 <para role="recommended">
76 <xref linkend="pinentry"/> (Run-time requirement for most of
77 the package's functionality)
78 </para>
79
80 <bridgehead renderas="sect4">Optional</bridgehead>
81 <para role="optional">
82 <xref linkend="curl"/>,
83 <xref linkend="libusb-compat"/>,
84 an <xref linkend="server-mail"/>,
85 <xref linkend="openldap"/>,
86 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>), and
87 <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
88 adns</ulink>
89 </para>
90
91 <para condition="html" role="usernotes">User Notes:
92 <ulink url="&blfs-wiki;/gnupg2"/></para>
93
94 </sect2>
95
96 <sect2 role="installation">
97 <title>Installation of GnuPG</title>
98
99 <warning>
100 <para>
101 If you are upgrading from gnupg prior to version 2.1, upstream
102 developers recommend to backup
103 <filename class="directory">~/.gnupg</filename>, because some additional
104 configuration will probably be necessary, and you could lose your keys.
105 You can find instructions at
106 <ulink url="http://jo-ke.name/wp/?p=111"></ulink> and
107 <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>.
108 </para>
109 </warning>
110
111 <para>If the top directory path where the source is unpacked contains
112 symbolic links, the openpgp tests might fail. If this is your case and
113 you wish to run the test suite, fix that with:</para>
114
115<screen><userinput>sed -e 's|\(GNUPGHOME\)=\$(abs_builddir)|\1=`/bin/pwd`|' \
116 -i tests/openpgp/Makefile.in</userinput></screen>
117
118 <para>Install <application>GnuPG</application> by running the following
119 commands:</para>
120
121<screen><userinput>./configure --prefix=/usr \
122 --enable-symcryptrun \
123 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
124make &amp;&amp;
125
126makeinfo --html --no-split \
127 -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
128makeinfo --plaintext \
129 -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>
130
131 <para>If you have <xref linkend="texlive"/>
132 installed and you wish to create documentation in alternate formats,
133 issue the following commands:</para>
134
135<screen><userinput>make -C doc pdf ps html</userinput></screen>
136
137 <para>To test the results, issue: <command>make check</command>.</para>
138
139 <para>Note that if you have already installed
140 <application>GnuPG</application>, the instructions below will overwrite
141 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
142 <systemitem class="username">root</systemitem> user:</para>
143
144<screen role="root"><userinput>make install &amp;&amp;
145
146install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
147install -v -m644 doc/gnupg_nochunks.html \
148 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html &amp;&amp;
149install -v -m644 doc/*.texi doc/gnupg.txt \
150 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
151
152 <para>We recommend the creation of symlinks for compatibility with the first
153 version of GnuPG, because some programs or scripts need them. Issue, as
154 <systemitem class="username">root</systemitem> user:</para>
155
156<screen role="root"><userinput>for f in gpg gpgv
157do
158 ln -svf ${f}2.1 /usr/share/man/man1/$f.1 &amp;&amp;
159 ln -svf ${f}2 /usr/bin/$f
160done
161unset f</userinput></screen>
162
163 <para>If you created alternate formats of the documentation, install it
164 using the following command as the
165 <systemitem class="username">root</systemitem> user:</para>
166
167<screen role="root"><userinput>install -v -m644 doc/gnupg.html/* \
168 /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
169install -v -m644 doc/gnupg.{pdf,dvi,ps} \
170 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
171
172 </sect2>
173
174 <sect2 role="commands">
175 <title>Command Explanations</title>
176
177 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
178 This switch changes the default docdir to <filename
179 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
180
181 <para><parameter>--enable-symcryptrun</parameter>: This switch enables
182 building the symcryptrun program.</para>
183
184 </sect2>
185
186 <sect2 role="content">
187 <title>Contents</title>
188
189 <segmentedlist>
190 <segtitle>Installed Programs</segtitle>
191 <segtitle>Installed Libraries</segtitle>
192 <segtitle>Installed Directories</segtitle>
193
194 <seglistitem>
195 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13,
196 gpg-agent, gpg-connect-agent, gpg, gpg2, gpgconf, gpgkey2ssh,
197 gpgparsemail, gpgsm, gpgtar, gpgv, gpgv2, kbxutil, symcryptrun, and
198 watchgnupg</seg>
199 <seg>None</seg>
200 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
201 /usr/share/gnupg</seg>
202 </seglistitem>
203 </segmentedlist>
204
205 <variablelist>
206 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
207 <?dbfo list-presentation="list"?>
208 <?dbhtml list-presentation="table"?>
209
210 <varlistentry id="addgnupghome">
211 <term><command>addgnupghome</command></term>
212 <listitem>
213 <para>is used to create and populate user's
214 <filename class='directory'>~/.gnupg</filename> directories</para>
215 <indexterm zone="gnupg2 addgnupghome">
216 <primary sortas="b-addgnupghome">addgnupghome</primary>
217 </indexterm>
218 </listitem>
219 </varlistentry>
220
221 <varlistentry id="applygnupgdefaults">
222 <term><command>applygnupgdefaults</command></term>
223 <listitem>
224 <para>is a wrapper script used to run <command>gpgconf</command>
225 with the <parameter>--apply-defaults</parameter> parameter on all
226 user's GnuPG home directories.</para>
227 <indexterm zone="gnupg2 applygnupgdefaults">
228 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
229 </indexterm>
230 </listitem>
231 </varlistentry>
232
233 <varlistentry id="dirmngr">
234 <term><command>dirmngr</command></term>
235 <listitem>
236 <para> is a tool that takes care of accessing the OpenPGP keyservers.
237 </para>
238 <indexterm zone="gnupg2 dirmngr">
239 <primary sortas="b-dirmngr">dirmngr</primary>
240 </indexterm>
241 </listitem>
242 </varlistentry>
243
244 <varlistentry id="dirmngr-client">
245 <term><command>dirmngr-client</command></term>
246 <listitem>
247 <para> is a tool to contact a running dirmngr and test whether a
248 certificate has been revoked. </para>
249 <indexterm zone="gnupg2 dirmngr-client">
250 <primary sortas="b-dirmngr-client">dirmngr-client</primary>
251 </indexterm>
252 </listitem>
253 </varlistentry>
254
255 <varlistentry id="g13">
256 <term><command>g13</command></term>
257 <listitem>
258 <para>is a tool to create, mount or unmount an encrypted file system
259 container.</para>
260 <indexterm zone="gnupg2 g13">
261 <primary sortas="b-g13">g13</primary>
262 </indexterm>
263 </listitem>
264 </varlistentry>
265
266 <varlistentry id="gpg-agent">
267 <term><command>gpg-agent</command></term>
268 <listitem>
269 <para>is a daemon used to manage secret (private) keys independently
270 from any protocol. It is used as a backend for <command>gpg2</command>
271 and <command>gpgsm</command> as well as for a couple of other
272 utilities.</para>
273 <indexterm zone="gnupg2 gpg-agent">
274 <primary sortas="b-gpg-agent">gpg-agent</primary>
275 </indexterm>
276 </listitem>
277 </varlistentry>
278
279 <varlistentry id="gpg-connect-agent">
280 <term><command>gpg-connect-agent</command></term>
281 <listitem>
282 <para>is a utility used to communicate with a running
283 <command>gpg-agent</command>.</para>
284 <indexterm zone="gnupg2 gpg-connect-agent">
285 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
286 </indexterm>
287 </listitem>
288 </varlistentry>
289
290 <varlistentry id="gpg">
291 <term><command>gpg</command></term>
292 <listitem>
293 <para>(optional) is a symlink to <command>gpg2</command> for
294 compatibility with the first version of GnuPG.</para>
295 <indexterm zone="gnupg2 gpg">
296 <primary sortas="b-gpg">gpg</primary>
297 </indexterm>
298 </listitem>
299 </varlistentry>
300
301 <varlistentry id="gpg2">
302 <term><command>gpg2</command></term>
303 <listitem>
304 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
305 tool used to provide digital encryption and signing services using
306 the OpenPGP standard.</para>
307 <indexterm zone="gnupg2 gpg2">
308 <primary sortas="b-gpg2">gpg2</primary>
309 </indexterm>
310 </listitem>
311 </varlistentry>
312
313 <varlistentry id="gpgconf">
314 <term><command>gpgconf</command></term>
315 <listitem>
316 <para>is a utility used to automatically and reasonably safely
317 query and modify configuration files in the
318 <filename class='directory'>~/.gnupg</filename> home directory. It is
319 designed not to be invoked manually by the user, but automatically by
320 graphical user interfaces.</para>
321 <indexterm zone="gnupg2 gpgconf">
322 <primary sortas="b-gpgconf">gpgconf</primary>
323 </indexterm>
324 </listitem>
325 </varlistentry>
326
327 <varlistentry id="gpgkey2ssh">
328 <term><command>gpgkey2ssh</command></term>
329 <listitem>
330 <para>is a utility used to get the correctly formated key for
331 ssh usage.</para>
332 <indexterm zone="gnupg2 gpgkey2ssh">
333 <primary sortas="b-gpgkey2ssh">gpgkey2ssh</primary>
334 </indexterm>
335 </listitem>
336 </varlistentry>
337
338 <varlistentry id="gpgparsemail">
339 <term><command>gpgparsemail</command></term>
340 <listitem>
341 <para>is a utility currently only useful for debugging. Run it with
342 <parameter>--help</parameter> for usage information.</para>
343 <indexterm zone="gnupg2 gpgparsemail">
344 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
345 </indexterm>
346 </listitem>
347 </varlistentry>
348
349 <varlistentry id="gpgsm">
350 <term><command>gpgsm</command></term>
351 <listitem>
352 <para>is a tool similar to <command>gpg2</command> used to provide
353 digital encryption and signing services on X.509 certificates and the
354 CMS protocol. It is mainly used as a backend for S/MIME mail
355 processing.</para>
356 <indexterm zone="gnupg2 gpgsm">
357 <primary sortas="b-gpgsm">gpgsm</primary>
358 </indexterm>
359 </listitem>
360 </varlistentry>
361
362 <varlistentry id="gpgtar">
363 <term><command>gpgtar</command></term>
364 <listitem>
365 <para> is a tool to encrypt or sign files into an archive.</para>
366 <indexterm zone="gnupg2 gpgtar">
367 <primary sortas="b-gpgtar">gpgtar</primary>
368 </indexterm>
369 </listitem>
370 </varlistentry>
371
372<!--
373 <varlistentry id="gpgsm-gencert.sh">
374 <term><command>gpgsm-gencert.sh</command></term>
375 <listitem>
376 <para>is a simple tool used to interactively generate a certificate
377 request which will be printed to stdout.</para>
378 <indexterm zone="gnupg2 gpgsm-gencert.sh">
379 <primary sortas="b-gpgsm-gencert.sh">gpgsm-gencert.sh</primary>
380 </indexterm>
381 </listitem>
382 </varlistentry>
383-->
384 <varlistentry id="gpgv">
385 <term><command>gpgv</command></term>
386 <listitem>
387 <para>(optional) is a symlink to <command>gpgv2</command> for
388 compatibility with the first version of GnuPG.</para>
389 <indexterm zone="gnupg2 gpgv">
390 <primary sortas="b-gpgv">gpgv</primary>
391 </indexterm>
392 </listitem>
393 </varlistentry>
394
395 <varlistentry id="gpgv2">
396 <term><command>gpgv2</command></term>
397 <listitem>
398 <para>is a verify only version of <command>gpg2</command>.</para>
399 <indexterm zone="gnupg2 gpgv2">
400 <primary sortas="b-gpgv2">gpgv2</primary>
401 </indexterm>
402 </listitem>
403 </varlistentry>
404
405 <varlistentry id="kbxutil">
406 <term><command>kbxutil</command></term>
407 <listitem>
408 <para>is used to list, export and import Keybox data.</para>
409 <indexterm zone="gnupg2 kbxutil">
410 <primary sortas="b-kbxutil">kbxutil</primary>
411 </indexterm>
412 </listitem>
413 </varlistentry>
414
415 <varlistentry id="symcryptrun">
416 <term><command>symcryptrun</command></term>
417 <listitem>
418 <para>is a simple symmetric encryption tool.</para>
419 <indexterm zone="gnupg2 symcryptrun">
420 <primary sortas="b-symcryptrun">symcryptrun</primary>
421 </indexterm>
422 </listitem>
423 </varlistentry>
424
425 <varlistentry id="watchgnupg">
426 <term><command>watchgnupg</command></term>
427 <listitem>
428 <para>is used to listen to a Unix Domain socket created by any of
429 the GnuPG tools.</para>
430 <indexterm zone="gnupg2 watchgnupg">
431 <primary sortas="b-watchgnupg">watchgnupg</primary>
432 </indexterm>
433 </listitem>
434 </varlistentry>
435
436 </variablelist>
437
438 </sect2>
439
440</sect1>
Note: See TracBrowser for help on using the repository browser.