source: postlfs/security/gnupg2.xml@ 8dfc5c3

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 8dfc5c3 was 8dfc5c3, checked in by Krejzi <krejzi@…>, 7 years ago

Fix some URLs

  • Switch to https:// scheme where possible to avoid redirects
  • Unify all kernel.org, Sourceforge and GNU URLs
  • Fix python and perl module URLs to be consistent
  • Fix github provided URLs to properly download tarballs instead of vFOO.tar.gz
  • Use upstream locations for some packages or better/shorter URLs if available
  • Add https:// URLs for gnupg packages

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@19022 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 15.8 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http "&gnupg-http;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
8 <!ENTITY gnupg2-download-ftp "&gnupg-ftp;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "86c2304ead54b74a422e76c3f1bc7a91">
10 <!ENTITY gnupg2-size "6.2 MB">
11 <!ENTITY gnupg2-buildsize "107 MB (with makeinfo docs)">
12 <!ENTITY gnupg2-time "0.8 SBU (with makeinfo docs, add 1.4 SBU for tests)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG">GnuPG</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG</title>
31
32 <para>The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.</para>
39
40 &lfs80_checked;
41 &gcc7_checked;
42
43 <bridgehead renderas="sect3">Package Information</bridgehead>
44 <itemizedlist spacing="compact">
45 <listitem>
46 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
50 </listitem>
51 <listitem>
52 <para>Download MD5 sum: &gnupg2-md5sum;</para>
53 </listitem>
54 <listitem>
55 <para>Download size: &gnupg2-size;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated disk space required: &gnupg2-buildsize;</para>
59 </listitem>
60 <listitem>
61 <para>Estimated build time: &gnupg2-time;</para>
62 </listitem>
63 </itemizedlist>
64
65 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
66
67 <bridgehead renderas="sect4">Required</bridgehead>
68 <para role="required">
69 <xref linkend="libassuan"/>,
70 <xref linkend="libgcrypt"/>,
71 <xref linkend="libgpg-error"/>,
72 <xref linkend="libksba"/>, and
73 <xref linkend="npth"/>
74 </para>
75
76 <bridgehead renderas="sect4">Recommended</bridgehead>
77 <para role="recommended">
78 <xref linkend="pinentry"/> (Run-time requirement for most of
79 the package's functionality)
80 </para>
81
82 <bridgehead renderas="sect4">Optional</bridgehead>
83 <para role="optional">
84 <xref linkend="curl"/>,
85 <xref linkend="gnutls"/>,
86 <xref linkend="imagemagick"/> (for the <command>convert</command> utility,
87 used for generating the documentation),
88 <xref linkend="libusb-compat"/>,
89 an <xref linkend="server-mail"/>,
90 <xref linkend="openldap"/>,
91 <xref linkend="sqlite"/>,
92 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>),
93 <ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> (for
94 generating documentation),
95 and <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
96 adns</ulink>
97 </para>
98
99 <para condition="html" role="usernotes">User Notes:
100 <ulink url="&blfs-wiki;/gnupg2"/></para>
101
102 </sect2>
103
104 <sect2 role="installation">
105 <title>Installation of GnuPG</title>
106
107 <warning>
108 <para>
109 If you are upgrading from gnupg prior to version 2.1, upstream
110 developers recommend to backup
111 <filename class="directory">~/.gnupg</filename>, because some additional
112 configuration will probably be necessary, and you could lose your keys.
113 You can find instructions at
114 <ulink url="http://jo-ke.name/wp/?p=111"></ulink> and
115 <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>.
116 </para>
117 </warning>
118
119 <para>If the top directory path where the source is unpacked contains
120 symbolic links, the openpgp tests may fail. If this is your case and
121 you wish to run the test suite, fix that with:</para>
122
123<screen><userinput>sed -e '/noinst_SCRIPTS = gpg-zip/c sbin_SCRIPTS += gpg-zip' \
124 -i tools/Makefile.in</userinput></screen>
125
126 <para>Install <application>GnuPG</application> by running the following
127 commands:</para>
128
129<screen><userinput>./configure --prefix=/usr \
130 --enable-symcryptrun \
131 --enable-maintainer-mode \
132 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
133make &amp;&amp;
134
135makeinfo --html --no-split \
136 -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
137makeinfo --plaintext \
138 -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>
139
140 <para>If you have <xref linkend="texlive"/>
141 installed and you wish to create documentation in alternate formats,
142 issue the following commands:</para>
143
144<screen><userinput>make -C doc pdf ps html</userinput></screen>
145
146 <para>To test the results, issue: <command>make check</command>.</para>
147
148 <para>Note that if you have already installed
149 <application>GnuPG</application>, the instructions below will overwrite
150 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
151 <systemitem class="username">root</systemitem> user:</para>
152
153<screen role="root"><userinput>make install &amp;&amp;
154
155install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
156install -v -m644 doc/gnupg_nochunks.html \
157 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html &amp;&amp;
158install -v -m644 doc/*.texi doc/gnupg.txt \
159 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
160<!-- Now intalls as gpg, not gpg2. This should be no longer needed.
161 <para>The BLFS editors recommend the creation of symlinks for compatibility
162 with the first version of GnuPG, because some programs or scripts need
163 them. Issue, as <systemitem class="username">root</systemitem> user:</para>
164
165<screen role="root"><userinput>for f in gpg gpgv
166do
167 ln -svf ${f}2.1 /usr/share/man/man1/$f.1 &amp;&amp;
168 ln -svf ${f}2 /usr/bin/$f
169done
170unset f</userinput></screen>
171-->
172 <para>If you created alternate formats of the documentation, install it
173 using the following command as the
174 <systemitem class="username">root</systemitem> user:</para>
175
176<screen role="root"><userinput>install -v -m644 doc/gnupg.html/* \
177 /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
178install -v -m644 doc/gnupg.{pdf,dvi,ps} \
179 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
180
181 </sect2>
182
183 <sect2 role="commands">
184 <title>Command Explanations</title>
185
186 <para><command>sed ... tools/Makefile.in</command>:
187 This command is needed to build the gpg-zip program.</para>
188
189 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
190 This switch changes the default docdir to <filename
191 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
192
193 <para><parameter>--enable-symcryptrun</parameter>: This switch enables
194 building the symcryptrun program.</para>
195
196 <para><parameter>--enable-maintainer-mode</parameter>: This switch is
197 needed for proper completion of the tests.</para>
198
199 <para><option>--enable-g13</option>: This switch enables building the
200 g13 program.</para>
201
202 </sect2>
203
204 <sect2 role="content">
205 <title>Contents</title>
206
207 <segmentedlist>
208 <segtitle>Installed Programs</segtitle>
209 <segtitle>Installed Libraries</segtitle>
210 <segtitle>Installed Directories</segtitle>
211
212 <seglistitem>
213 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13,
214 gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail,
215 gpgscm, gpgsm, gpgtar, gpgv, igpg-zip, kbxutil, symcryptrun,
216 and watchgnupg</seg>
217 <seg>None</seg>
218 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
219 /usr/share/gnupg</seg>
220 </seglistitem>
221 </segmentedlist>
222
223 <variablelist>
224 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
225 <?dbfo list-presentation="list"?>
226 <?dbhtml list-presentation="table"?>
227
228 <varlistentry id="addgnupghome">
229 <term><command>addgnupghome</command></term>
230 <listitem>
231 <para>is used to create and populate user's
232 <filename class='directory'>~/.gnupg</filename> directories</para>
233 <indexterm zone="gnupg2 addgnupghome">
234 <primary sortas="b-addgnupghome">addgnupghome</primary>
235 </indexterm>
236 </listitem>
237 </varlistentry>
238
239 <varlistentry id="applygnupgdefaults">
240 <term><command>applygnupgdefaults</command></term>
241 <listitem>
242 <para>is a wrapper script used to run <command>gpgconf</command>
243 with the <parameter>--apply-defaults</parameter> parameter on all
244 user's GnuPG home directories.</para>
245 <indexterm zone="gnupg2 applygnupgdefaults">
246 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
247 </indexterm>
248 </listitem>
249 </varlistentry>
250
251 <varlistentry id="dirmngr">
252 <term><command>dirmngr</command></term>
253 <listitem>
254 <para> is a tool that takes care of accessing the OpenPGP keyservers.
255 </para>
256 <indexterm zone="gnupg2 dirmngr">
257 <primary sortas="b-dirmngr">dirmngr</primary>
258 </indexterm>
259 </listitem>
260 </varlistentry>
261
262 <varlistentry id="dirmngr-client">
263 <term><command>dirmngr-client</command></term>
264 <listitem>
265 <para> is a tool to contact a running dirmngr and test whether a
266 certificate has been revoked. </para>
267 <indexterm zone="gnupg2 dirmngr-client">
268 <primary sortas="b-dirmngr-client">dirmngr-client</primary>
269 </indexterm>
270 </listitem>
271 </varlistentry>
272
273 <varlistentry id="g13">
274 <term><command>g13</command></term>
275 <listitem>
276 <para>is a tool to create, mount or unmount an encrypted file system
277 container (optional).</para>
278 <indexterm zone="gnupg2 g13">
279 <primary sortas="b-g13">g13</primary>
280 </indexterm>
281 </listitem>
282 </varlistentry>
283
284 <varlistentry id="gpg-agent">
285 <term><command>gpg-agent</command></term>
286 <listitem>
287 <para>is a daemon used to manage secret (private) keys independently
288 from any protocol. It is used as a backend for <command>gpg2</command>
289 and <command>gpgsm</command> as well as for a couple of other
290 utilities.</para>
291 <indexterm zone="gnupg2 gpg-agent">
292 <primary sortas="b-gpg-agent">gpg-agent</primary>
293 </indexterm>
294 </listitem>
295 </varlistentry>
296
297 <varlistentry id="gpg-connect-agent">
298 <term><command>gpg-connect-agent</command></term>
299 <listitem>
300 <para>is a utility used to communicate with a running
301 <command>gpg-agent</command>.</para>
302 <indexterm zone="gnupg2 gpg-connect-agent">
303 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
304 </indexterm>
305 </listitem>
306 </varlistentry>
307
308 <varlistentry id="gpg">
309 <term><command>gpg</command></term>
310 <listitem>
311 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
312 tool used to provide digital encryption and signing services using
313 the OpenPGP standard.</para>
314 <indexterm zone="gnupg2 gpg">
315 <primary sortas="b-gpg">gpg</primary>
316 </indexterm>
317 </listitem>
318 </varlistentry>
319
320 <varlistentry id="gpgconf">
321 <term><command>gpgconf</command></term>
322 <listitem>
323 <para>is a utility used to automatically and reasonably safely
324 query and modify configuration files in the
325 <filename class='directory'>~/.gnupg</filename> home directory. It is
326 designed not to be invoked manually by the user, but automatically by
327 graphical user interfaces.</para>
328 <indexterm zone="gnupg2 gpgconf">
329 <primary sortas="b-gpgconf">gpgconf</primary>
330 </indexterm>
331 </listitem>
332 </varlistentry>
333
334 <varlistentry id="gpgparsemail">
335 <term><command>gpgparsemail</command></term>
336 <listitem>
337 <para>is a utility currently only useful for debugging. Run it with
338 <parameter>--help</parameter> for usage information.</para>
339 <indexterm zone="gnupg2 gpgparsemail">
340 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
341 </indexterm>
342 </listitem>
343 </varlistentry>
344
345 <varlistentry id="gpgscm">
346 <term><command>gpgscm</command></term>
347 <listitem>
348 <para>executes the given scheme program or spawns an interactive
349 shell.</para>
350 <indexterm zone="gnupg2 gpgscm">
351 <primary sortas="b-gpgscm">gpgscm</primary>
352 </indexterm>
353 </listitem>
354 </varlistentry>
355
356 <varlistentry id="gpgsm">
357 <term><command>gpgsm</command></term>
358 <listitem>
359 <para>is a tool similar to <command>gpg2</command> used to provide
360 digital encryption and signing services on X.509 certificates and the
361 CMS protocol. It is mainly used as a backend for S/MIME mail
362 processing.</para>
363 <indexterm zone="gnupg2 gpgsm">
364 <primary sortas="b-gpgsm">gpgsm</primary>
365 </indexterm>
366 </listitem>
367 </varlistentry>
368
369 <varlistentry id="gpgtar">
370 <term><command>gpgtar</command></term>
371 <listitem>
372 <para> is a tool to encrypt or sign files into an archive.</para>
373 <indexterm zone="gnupg2 gpgtar">
374 <primary sortas="b-gpgtar">gpgtar</primary>
375 </indexterm>
376 </listitem>
377 </varlistentry>
378
379 <varlistentry id="gpgv">
380 <term><command>gpgv</command></term>
381 <listitem>
382 <para>is a verify only version of <command>gpg2</command>.</para>
383 <indexterm zone="gnupg2 gpgv">
384 <primary sortas="b-gpgv">gpgv</primary>
385 </indexterm>
386 </listitem>
387 </varlistentry>
388
389 <varlistentry id="gpg-zip">
390 <term><command>gpg-zip</command></term>
391 <listitem>
392 <para> encrypts or signs files into an archive.</para>
393 <indexterm zone="gnupg2 gpg-zip">
394 <primary sortas="b-gpg-zip">gpg-zip</primary>
395 </indexterm>
396 </listitem>
397 </varlistentry>
398
399 <varlistentry id="kbxutil">
400 <term><command>kbxutil</command></term>
401 <listitem>
402 <para>is used to list, export and import Keybox data.</para>
403 <indexterm zone="gnupg2 kbxutil">
404 <primary sortas="b-kbxutil">kbxutil</primary>
405 </indexterm>
406 </listitem>
407 </varlistentry>
408
409 <varlistentry id="symcryptrun">
410 <term><command>symcryptrun</command></term>
411 <listitem>
412 <para>is a simple symmetric encryption tool.</para>
413 <indexterm zone="gnupg2 symcryptrun">
414 <primary sortas="b-symcryptrun">symcryptrun</primary>
415 </indexterm>
416 </listitem>
417 </varlistentry>
418
419 <varlistentry id="watchgnupg">
420 <term><command>watchgnupg</command></term>
421 <listitem>
422 <para>is used to listen to a Unix Domain socket created by any of
423 the GnuPG tools.</para>
424 <indexterm zone="gnupg2 watchgnupg">
425 <primary sortas="b-watchgnupg">watchgnupg</primary>
426 </indexterm>
427 </listitem>
428 </varlistentry>
429
430 </variablelist>
431
432 </sect2>
433
434</sect1>
Note: See TracBrowser for help on using the repository browser.