source: postlfs/security/gnupg2.xml@ 6f13fc0b

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 6f13fc0b was 6f13fc0b, checked in by Douglas R. Reno <renodr@…>, 8 years ago

Update to network-manager-applet-1.4.0
Update to NetworkManager-1.4.0
Update to libksba-1.3.5
Update to gnupg-2.1.15
Update to dhcpcd-6.11.3
Lots of Tags

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17681 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http "https://gnupg.org/ftp/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2">
8 <!ENTITY gnupg2-download-ftp "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "808d10b89c1f0de8d4d2a556aa36b623">
10 <!ENTITY gnupg2-size "5.5 MB">
11 <!ENTITY gnupg2-buildsize "114 MB (with tests and makeinfo docs)">
12 <!ENTITY gnupg2-time "1.6 SBU (with tests and makeinfo docs)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG">GnuPG</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG</title>
31
32 <para>The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.</para>
39
40 &lfs7a_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &gnupg2-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &gnupg2-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &gnupg2-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &gnupg2-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
65
66 <bridgehead renderas="sect4">Required</bridgehead>
67 <para role="required">
68 <xref linkend="libassuan"/>,
69 <xref linkend="libgcrypt"/>,
70 <xref linkend="libgpg-error"/>,
71 <xref linkend="libksba"/>, and
72 <xref linkend="npth"/>
73 </para>
74
75 <bridgehead renderas="sect4">Recommended</bridgehead>
76 <para role="recommended">
77 <xref linkend="pinentry"/> (Run-time requirement for most of
78 the package's functionality)
79 </para>
80
81 <bridgehead renderas="sect4">Optional</bridgehead>
82 <para role="optional">
83 <xref linkend="curl"/>,
84 <xref linkend="libusb-compat"/>,
85 an <xref linkend="server-mail"/>,
86 <xref linkend="openldap"/>,
87 <xref linkend="sqlite"/>,
88 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>), and
89 <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
90 adns</ulink>
91 </para>
92
93 <para condition="html" role="usernotes">User Notes:
94 <ulink url="&blfs-wiki;/gnupg2"/></para>
95
96 </sect2>
97
98 <sect2 role="installation">
99 <title>Installation of GnuPG</title>
100
101 <warning>
102 <para>
103 If you are upgrading from gnupg prior to version 2.1, upstream
104 developers recommend to backup
105 <filename class="directory">~/.gnupg</filename>, because some additional
106 configuration will probably be necessary, and you could lose your keys.
107 You can find instructions at
108 <ulink url="http://jo-ke.name/wp/?p=111"></ulink> and
109 <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>.
110 </para>
111 </warning>
112
113 <para>If the top directory path where the source is unpacked contains
114 symbolic links, the openpgp tests might fail. If this is your case and
115 you wish to run the test suite, fix that with:</para>
116
117<screen><userinput>sed -e 's|\(GNUPGHOME\)=\$(abs_builddir)|\1=`/bin/pwd`|' \
118 -i tests/openpgp/Makefile.in</userinput></screen>
119
120 <para>Install <application>GnuPG</application> by running the following
121 commands:</para>
122
123<screen><userinput>./configure --prefix=/usr \
124 --enable-symcryptrun \
125 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
126make &amp;&amp;
127
128makeinfo --html --no-split \
129 -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
130makeinfo --plaintext \
131 -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>
132
133 <para>If you have <xref linkend="texlive"/>
134 installed and you wish to create documentation in alternate formats,
135 issue the following commands:</para>
136
137<screen><userinput>make -C doc pdf ps html</userinput></screen>
138
139 <para>To test the results, issue: <command>make check</command>.</para>
140
141 <para>Note that if you have already installed
142 <application>GnuPG</application>, the instructions below will overwrite
143 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
144 <systemitem class="username">root</systemitem> user:</para>
145
146<screen role="root"><userinput>make install &amp;&amp;
147
148install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
149install -v -m644 doc/gnupg_nochunks.html \
150 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html &amp;&amp;
151install -v -m644 doc/*.texi doc/gnupg.txt \
152 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
153
154 <para>We recommend the creation of symlinks for compatibility with the first
155 version of GnuPG, because some programs or scripts need them. Issue, as
156 <systemitem class="username">root</systemitem> user:</para>
157
158<screen role="root"><userinput>for f in gpg gpgv
159do
160 ln -svf ${f}2.1 /usr/share/man/man1/$f.1 &amp;&amp;
161 ln -svf ${f}2 /usr/bin/$f
162done
163unset f</userinput></screen>
164
165 <para>If you created alternate formats of the documentation, install it
166 using the following command as the
167 <systemitem class="username">root</systemitem> user:</para>
168
169<screen role="root"><userinput>install -v -m644 doc/gnupg.html/* \
170 /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
171install -v -m644 doc/gnupg.{pdf,dvi,ps} \
172 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
173
174 </sect2>
175
176 <sect2 role="commands">
177 <title>Command Explanations</title>
178
179 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
180 This switch changes the default docdir to <filename
181 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
182
183 <para><parameter>--enable-symcryptrun</parameter>: This switch enables
184 building the symcryptrun program.</para>
185
186 <para><option>--enable-g13</option>: This switch enables building the
187 g13 program.</para>
188
189 </sect2>
190
191 <sect2 role="content">
192 <title>Contents</title>
193
194 <segmentedlist>
195 <segtitle>Installed Programs</segtitle>
196 <segtitle>Installed Libraries</segtitle>
197 <segtitle>Installed Directories</segtitle>
198
199 <seglistitem>
200 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13,
201 gpg-agent, gpg-connect-agent, gpg, gpg2, gpgconf, gpgparsemail,
202 gpgscm, gpgsm, gpgtar, gpgv, gpgv2, kbxutil, symcryptrun,
203 and watchgnupg</seg>
204 <seg>None</seg>
205 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
206 /usr/share/gnupg</seg>
207 </seglistitem>
208 </segmentedlist>
209
210 <variablelist>
211 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
212 <?dbfo list-presentation="list"?>
213 <?dbhtml list-presentation="table"?>
214
215 <varlistentry id="addgnupghome">
216 <term><command>addgnupghome</command></term>
217 <listitem>
218 <para>is used to create and populate user's
219 <filename class='directory'>~/.gnupg</filename> directories</para>
220 <indexterm zone="gnupg2 addgnupghome">
221 <primary sortas="b-addgnupghome">addgnupghome</primary>
222 </indexterm>
223 </listitem>
224 </varlistentry>
225
226 <varlistentry id="applygnupgdefaults">
227 <term><command>applygnupgdefaults</command></term>
228 <listitem>
229 <para>is a wrapper script used to run <command>gpgconf</command>
230 with the <parameter>--apply-defaults</parameter> parameter on all
231 user's GnuPG home directories.</para>
232 <indexterm zone="gnupg2 applygnupgdefaults">
233 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
234 </indexterm>
235 </listitem>
236 </varlistentry>
237
238 <varlistentry id="dirmngr">
239 <term><command>dirmngr</command></term>
240 <listitem>
241 <para> is a tool that takes care of accessing the OpenPGP keyservers.
242 </para>
243 <indexterm zone="gnupg2 dirmngr">
244 <primary sortas="b-dirmngr">dirmngr</primary>
245 </indexterm>
246 </listitem>
247 </varlistentry>
248
249 <varlistentry id="dirmngr-client">
250 <term><command>dirmngr-client</command></term>
251 <listitem>
252 <para> is a tool to contact a running dirmngr and test whether a
253 certificate has been revoked. </para>
254 <indexterm zone="gnupg2 dirmngr-client">
255 <primary sortas="b-dirmngr-client">dirmngr-client</primary>
256 </indexterm>
257 </listitem>
258 </varlistentry>
259
260 <varlistentry id="g13">
261 <term><command>g13</command></term>
262 <listitem>
263 <para>is a tool to create, mount or unmount an encrypted file system
264 container (optional).</para>
265 <indexterm zone="gnupg2 g13">
266 <primary sortas="b-g13">g13</primary>
267 </indexterm>
268 </listitem>
269 </varlistentry>
270
271 <varlistentry id="gpg-agent">
272 <term><command>gpg-agent</command></term>
273 <listitem>
274 <para>is a daemon used to manage secret (private) keys independently
275 from any protocol. It is used as a backend for <command>gpg2</command>
276 and <command>gpgsm</command> as well as for a couple of other
277 utilities.</para>
278 <indexterm zone="gnupg2 gpg-agent">
279 <primary sortas="b-gpg-agent">gpg-agent</primary>
280 </indexterm>
281 </listitem>
282 </varlistentry>
283
284 <varlistentry id="gpg-connect-agent">
285 <term><command>gpg-connect-agent</command></term>
286 <listitem>
287 <para>is a utility used to communicate with a running
288 <command>gpg-agent</command>.</para>
289 <indexterm zone="gnupg2 gpg-connect-agent">
290 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
291 </indexterm>
292 </listitem>
293 </varlistentry>
294
295 <varlistentry id="gpg">
296 <term><command>gpg</command></term>
297 <listitem>
298 <para>(optional) is a symlink to <command>gpg2</command> for
299 compatibility with the first version of GnuPG.</para>
300 <indexterm zone="gnupg2 gpg">
301 <primary sortas="b-gpg">gpg</primary>
302 </indexterm>
303 </listitem>
304 </varlistentry>
305
306 <varlistentry id="gpg2">
307 <term><command>gpg2</command></term>
308 <listitem>
309 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
310 tool used to provide digital encryption and signing services using
311 the OpenPGP standard.</para>
312 <indexterm zone="gnupg2 gpg2">
313 <primary sortas="b-gpg2">gpg2</primary>
314 </indexterm>
315 </listitem>
316 </varlistentry>
317
318 <varlistentry id="gpgconf">
319 <term><command>gpgconf</command></term>
320 <listitem>
321 <para>is a utility used to automatically and reasonably safely
322 query and modify configuration files in the
323 <filename class='directory'>~/.gnupg</filename> home directory. It is
324 designed not to be invoked manually by the user, but automatically by
325 graphical user interfaces.</para>
326 <indexterm zone="gnupg2 gpgconf">
327 <primary sortas="b-gpgconf">gpgconf</primary>
328 </indexterm>
329 </listitem>
330 </varlistentry>
331
332 <varlistentry id="gpgparsemail">
333 <term><command>gpgparsemail</command></term>
334 <listitem>
335 <para>is a utility currently only useful for debugging. Run it with
336 <parameter>--help</parameter> for usage information.</para>
337 <indexterm zone="gnupg2 gpgparsemail">
338 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
339 </indexterm>
340 </listitem>
341 </varlistentry>
342
343 <varlistentry id="gpgscm">
344 <term><command>gpgscm</command></term>
345 <listitem>
346 <para>executes the given scheme program or spawns an interactive
347 shell.</para>
348 <indexterm zone="gnupg2 gpgscm">
349 <primary sortas="b-gpgscm">gpgscm</primary>
350 </indexterm>
351 </listitem>
352 </varlistentry>
353
354 <varlistentry id="gpgsm">
355 <term><command>gpgsm</command></term>
356 <listitem>
357 <para>is a tool similar to <command>gpg2</command> used to provide
358 digital encryption and signing services on X.509 certificates and the
359 CMS protocol. It is mainly used as a backend for S/MIME mail
360 processing.</para>
361 <indexterm zone="gnupg2 gpgsm">
362 <primary sortas="b-gpgsm">gpgsm</primary>
363 </indexterm>
364 </listitem>
365 </varlistentry>
366
367 <varlistentry id="gpgtar">
368 <term><command>gpgtar</command></term>
369 <listitem>
370 <para> is a tool to encrypt or sign files into an archive.</para>
371 <indexterm zone="gnupg2 gpgtar">
372 <primary sortas="b-gpgtar">gpgtar</primary>
373 </indexterm>
374 </listitem>
375 </varlistentry>
376
377 <varlistentry id="gpgv">
378 <term><command>gpgv</command></term>
379 <listitem>
380 <para>(optional) is a symlink to <command>gpgv2</command> for
381 compatibility with the first version of GnuPG.</para>
382 <indexterm zone="gnupg2 gpgv">
383 <primary sortas="b-gpgv">gpgv</primary>
384 </indexterm>
385 </listitem>
386 </varlistentry>
387
388 <varlistentry id="gpgv2">
389 <term><command>gpgv2</command></term>
390 <listitem>
391 <para>is a verify only version of <command>gpg2</command>.</para>
392 <indexterm zone="gnupg2 gpgv2">
393 <primary sortas="b-gpgv2">gpgv2</primary>
394 </indexterm>
395 </listitem>
396 </varlistentry>
397
398 <varlistentry id="kbxutil">
399 <term><command>kbxutil</command></term>
400 <listitem>
401 <para>is used to list, export and import Keybox data.</para>
402 <indexterm zone="gnupg2 kbxutil">
403 <primary sortas="b-kbxutil">kbxutil</primary>
404 </indexterm>
405 </listitem>
406 </varlistentry>
407
408 <varlistentry id="symcryptrun">
409 <term><command>symcryptrun</command></term>
410 <listitem>
411 <para>is a simple symmetric encryption tool.</para>
412 <indexterm zone="gnupg2 symcryptrun">
413 <primary sortas="b-symcryptrun">symcryptrun</primary>
414 </indexterm>
415 </listitem>
416 </varlistentry>
417
418 <varlistentry id="watchgnupg">
419 <term><command>watchgnupg</command></term>
420 <listitem>
421 <para>is used to listen to a Unix Domain socket created by any of
422 the GnuPG tools.</para>
423 <indexterm zone="gnupg2 watchgnupg">
424 <primary sortas="b-watchgnupg">watchgnupg</primary>
425 </indexterm>
426 </listitem>
427 </varlistentry>
428
429 </variablelist>
430
431 </sect2>
432
433</sect1>
Note: See TracBrowser for help on using the repository browser.