source: postlfs/security/gnupg2.xml@ 42d6d3b

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.6 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 42d6d3b was 42d6d3b, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

Update to at_3.1.15.
Update to yasm-1.3.0.
Update to serf-1.3.7.
Update to exim-4.84.
Change URL for psutils-p17.
gnupg-2.0.25: fix import filter and add kbnode_t.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@13897 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 13.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http " ">
8 <!ENTITY gnupg2-download-ftp "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "048d8de797125f1d8e6cf3bdff9e2d12">
10 <!ENTITY gnupg2-size "4.2 MB">
11 <!ENTITY gnupg2-buildsize "67 MB (additional 1 MB for the tests)">
12 <!ENTITY gnupg2-time "0.6 SBU (additional 0.5 SBU for the tests)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG">GnuPG</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG</title>
31
32 <para>The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.</para>
39
40 &lfs75_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &gnupg2-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &gnupg2-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &gnupg2-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &gnupg2-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
65 <itemizedlist spacing="compact">
66 <listitem>
67 <para>
68 Required patch:
69 <ulink url="&patch-root;/gnupg-&gnupg2-version;-import_filter_and_add_kbnode_t-1.patch"/>
70 </para>
71 </listitem>
72 </itemizedlist>
73
74 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
75
76 <bridgehead renderas="sect4">Required</bridgehead>
77 <para role="required"><xref linkend="pth"/>,
78 <xref linkend="libassuan"/>,
79 <xref linkend="libgcrypt"/>, and
80 <xref linkend="libksba"/></para>
81
82 <bridgehead renderas="sect4">Recommended</bridgehead>
83 <para role="recommended"><xref linkend="pinentry"/> (Run-time requirement for most of
84 the package's functionality)</para>
85
86 <bridgehead renderas="sect4">Optional</bridgehead>
87 <para role="optional"><xref linkend="openldap"/>,
88 <xref linkend="libusb-compat"/>,
89 <xref linkend="curl"/>,
90 <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
91 adns</ulink>, and an
92 <xref linkend="server-mail"/></para>
93
94 <para condition="html" role="usernotes">User Notes:
95 <ulink url="&blfs-wiki;/gnupg2"/></para>
96
97 </sect2>
98
99 <sect2 role="installation">
100 <title>Installation of GnuPG</title>
101
102 <para>Install <application>GnuPG</application> by running the following
103 commands:</para>
104
105<screen><userinput>patch -Np1 -i ../gnupg-&gnupg2-version;-import_filter_and_add_kbnode_t-1.patch &amp;&amp;
106./configure --prefix=/usr \
107 --enable-symcryptrun \
108 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
109make &amp;&amp;
110
111makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
112makeinfo --plaintext -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>
113
114 <para>If you have <xref linkend="texlive"/>
115 installed and you wish to create documentation in alternate formats,
116 issue the following commands:</para>
117
118<screen><userinput>make -C doc pdf ps html</userinput></screen>
119
120 <para>To test the results, issue: <command>make check</command>.</para>
121
122 <para>Note that if you have already installed
123 <application>GnuPG</application>, the instructions below will overwrite
124 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
125 <systemitem class="username">root</systemitem> user:</para>
126
127<screen role="root"><userinput>make install &amp;&amp;
128ln -sv gpg2 /usr/bin/gpg &amp;&amp;
129ln -sv gpgv2 /usr/bin/gpgv &amp;&amp;
130
131install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
132install -v -m644 doc/gnupg_nochunks.html \
133 /usr/share/doc/gnupg-&gnupg2-version;/gnupg.html &amp;&amp;
134install -v -m644 doc/*.texi doc/gnupg.txt \
135 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
136
137 <para>If you created alternate formats of the documentation, install it
138 using the following command as the
139 <systemitem class="username">root</systemitem> user:</para>
140
141<screen role="root"><userinput>install -v -m644 doc/gnupg.html/* \
142 /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
143install -v -m644 doc/gnupg.{pdf,dvi,ps} \
144 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
145
146 </sect2>
147
148 <sect2 role="commands">
149 <title>Command Explanations</title>
150
151 <para><command>ln -sv gpg...</command>: Symlinks for compatibility with the
152 first version of <application>GnuPG</application>.</para>
153
154 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
155 This switch changes the default docdir to <filename
156 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
157
158 <para><parameter>--enable-symcryptrun</parameter>: This switch enables
159 building the symcryptrun program.</para>
160
161 <para><option>--libexecdir=/usr/lib/gnupg2</option>: This option
162 creates a <filename class="directory">gnupg</filename> directory in
163 <filename class="directory">/usr/lib</filename> instead of
164 <filename class="directory">/usr/libexec</filename> in accordance
165 with the old version of the FHS used before LFS-7.5.</para>
166
167 </sect2>
168
169 <sect2 role="content">
170 <title>Contents</title>
171
172 <segmentedlist>
173 <segtitle>Installed Programs</segtitle>
174 <segtitle>Installed Libraries</segtitle>
175 <segtitle>Installed Directories</segtitle>
176
177 <seglistitem>
178 <seg>gpg (symlink), gpg2, gpg-agent, gnupg-pcsc-wrapper, gpg2keys_curl,
179 gpg2keys_finger, addgnupghome, gpgconf, gpg-connect-agent, gpgkey2ssh,
180 gpg2keys_hkp, gpg2keys_ldap, gpg-check-pattern, applygnupgdefaults,
181 gpgparsemail, gpgsm, gpgsm-gencert.sh, gpg-preset-passphrase,
182 gpg-protect-tool, scdaemon, gpgv (symlink), gpgv2, kbxutil,
183 symcryptrun, and watchgnupg</seg>
184 <seg>None</seg>
185 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
186 /usr/share/gnupg</seg>
187 </seglistitem>
188 </segmentedlist>
189
190 <variablelist>
191 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
192 <?dbfo list-presentation="list"?>
193 <?dbhtml list-presentation="table"?>
194
195 <varlistentry id="addgnupghome">
196 <term><command>addgnupghome</command></term>
197 <listitem>
198 <para>is used to create and populate user's
199 <filename class='directory'>~/.gnupg</filename> directories</para>
200 <indexterm zone="gnupg2 addgnupghome">
201 <primary sortas="b-addgnupghome">addgnupghome</primary>
202 </indexterm>
203 </listitem>
204 </varlistentry>
205
206 <varlistentry id="applygnupgdefaults">
207 <term><command>applygnupgdefaults</command></term>
208 <listitem>
209 <para>is a wrapper script used to run <command>gpgconf</command>
210 with the <parameter>--apply-defaults</parameter> parameter on all
211 user's GnuPG home directories.</para>
212 <indexterm zone="gnupg2 applygnupgdefaults">
213 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
214 </indexterm>
215 </listitem>
216 </varlistentry>
217
218 <varlistentry id="gpg-agent">
219 <term><command>gpg-agent</command></term>
220 <listitem>
221 <para>is a daemon used to manage secret (private) keys independently
222 from any protocol. It is used as a backend for <command>gpg</command>
223 and <command>gpgsm</command> as well as for a couple of other
224 utilities.</para>
225 <indexterm zone="gnupg2 gpg-agent">
226 <primary sortas="b-gpg-agent">gpg-agent</primary>
227 </indexterm>
228 </listitem>
229 </varlistentry>
230
231 <varlistentry id="gpg-connect-agent">
232 <term><command>gpg-connect-agent</command></term>
233 <listitem>
234 <para>is a utility used to communicate with a running
235 <command>gpg-agent</command>.</para>
236 <indexterm zone="gnupg2 gpg-connect-agent">
237 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
238 </indexterm>
239 </listitem>
240 </varlistentry>
241
242 <varlistentry id="gpg2">
243 <term><command>gpg2</command></term>
244 <listitem>
245 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
246 tool used to provide digital encryption and signing services using
247 the OpenPGP standard.</para>
248 <indexterm zone="gnupg2 gpg2">
249 <primary sortas="b-gpg2">gpg2</primary>
250 </indexterm>
251 </listitem>
252 </varlistentry>
253
254 <varlistentry id="gpgconf">
255 <term><command>gpgconf</command></term>
256 <listitem>
257 <para>is a utility used to automatically and reasonable safely
258 query and modify configuration files in the
259 <filename class='directory'>~/.gnupg</filename> home directory. It is
260 designed not to be invoked manually by the user, but automatically by
261 graphical user interfaces.</para>
262 <indexterm zone="gnupg2 gpgconf">
263 <primary sortas="b-gpgconf">gpgconf</primary>
264 </indexterm>
265 </listitem>
266 </varlistentry>
267
268 <varlistentry id="gpgparsemail">
269 <term><command>gpgparsemail</command></term>
270 <listitem>
271 <para>is a utility currently only useful for debugging. Run it with
272 <parameter>--help</parameter> for usage information.</para>
273 <indexterm zone="gnupg2 gpgparsemail">
274 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
275 </indexterm>
276 </listitem>
277 </varlistentry>
278
279 <varlistentry id="gpgsm">
280 <term><command>gpgsm</command></term>
281 <listitem>
282 <para>is a tool similar to <command>gpg</command> used to provide
283 digital encryption and signing services on X.509 certificates and the
284 CMS protocol. It is mainly used as a backend for S/MIME mail
285 processing.</para>
286 <indexterm zone="gnupg2 gpgsm">
287 <primary sortas="b-gpgsm">gpgsm</primary>
288 </indexterm>
289 </listitem>
290 </varlistentry>
291
292 <varlistentry id="gpgsm-gencert.sh">
293 <term><command>gpgsm-gencert.sh</command></term>
294 <listitem>
295 <para>is a simple tool used to interactively generate a certificate
296 request which will be printed to stdout.</para>
297 <indexterm zone="gnupg2 gpgsm-gencert.sh">
298 <primary sortas="b-gpgsm-gencert.sh">gpgsm-gencert.sh</primary>
299 </indexterm>
300 </listitem>
301 </varlistentry>
302
303 <varlistentry id="gpgv2">
304 <term><command>gpgv2</command></term>
305 <listitem>
306 <para>is a verify only version of <command>gpg2</command>.</para>
307 <indexterm zone="gnupg2 gpgv2">
308 <primary sortas="b-gpgv2">gpgv2</primary>
309 </indexterm>
310 </listitem>
311 </varlistentry>
312
313 <varlistentry id="kbxutil">
314 <term><command>kbxutil</command></term>
315 <listitem>
316 <para>is used to list, export and import Keybox data.</para>
317 <indexterm zone="gnupg2 kbxutil">
318 <primary sortas="b-kbxutil">kbxutil</primary>
319 </indexterm>
320 </listitem>
321 </varlistentry>
322
323 <varlistentry id="scdaemon">
324 <term><command>scdaemon</command></term>
325 <listitem>
326 <para>is a daemon used to manage smartcards. It is usually invoked by
327 <command>gpg-agent</command> and in general not used directly.</para>
328 <indexterm zone="gnupg2 scdaemon">
329 <primary sortas="b-scdaemon">scdaemon</primary>
330 </indexterm>
331 </listitem>
332 </varlistentry>
333
334 <varlistentry id="symcryptrun">
335 <term><command>symcryptrun</command></term>
336 <listitem>
337 <para>is a simple symmetric encryption tool.</para>
338 <indexterm zone="gnupg2 symcryptrun">
339 <primary sortas="b-symcryptrun">symcryptrun</primary>
340 </indexterm>
341 </listitem>
342 </varlistentry>
343
344 <varlistentry id="watchgnupg">
345 <term><command>watchgnupg</command></term>
346 <listitem>
347 <para>is used to listen to a Unix Domain socket created by any of
348 the GnuPG tools.</para>
349 <indexterm zone="gnupg2 watchgnupg">
350 <primary sortas="b-watchgnupg">watchgnupg</primary>
351 </indexterm>
352 </listitem>
353 </varlistentry>
354
355 </variablelist>
356
357 </sect2>
358
359</sect1>
Note: See TracBrowser for help on using the repository browser.