source: postlfs/security/gnupg2.xml@ c2051dbd

11.2 11.3 12.0 12.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk xry111/llvm18 xry111/soup3 xry111/xf86-video-removal
Last change on this file since c2051dbd was c2051dbd, checked in by Douglas R. Reno <renodr@…>, 22 months ago

Five Security Updates:

Update to node.js-16.16.0
Update to php-8.1.8
Add security patch for Dovecot (fixes CVE-2022-30550)
Update to seamonkey-2.53.13
Update to gnupg-2.3.7
Mark git as a security update

  • Property mode set to 100644
File size: 17.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http "&gnupg-http;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
8 <!ENTITY gnupg2-download-ftp "&gnupg-ftp;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "1c6a6722b9cececcf10ca4e24106e34b">
10 <!ENTITY gnupg2-size "7.3 MB">
11 <!ENTITY gnupg2-buildsize "161 MB (with all tests; add 25 MB for docs)">
12 <!ENTITY gnupg2-time "0.7 SBU (using parallelism=4; add 1.5 SBU for tests)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <date>$Date$</date>
20 </sect1info>
21
22 <title>GnuPG-&gnupg2-version;</title>
23
24 <indexterm zone="gnupg2">
25 <primary sortas="a-GnuPG">GnuPG</primary>
26 </indexterm>
27
28 <sect2 role="package">
29 <title>Introduction to GnuPG</title>
30
31 <para>
32 The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.
39 </para>
40
41 &lfs111_checked;
42
43 <bridgehead renderas="sect3">Package Information</bridgehead>
44 <itemizedlist spacing="compact">
45 <listitem>
46 <para>
47 Download (HTTP): <ulink url="&gnupg2-download-http;"/>
48 </para>
49 </listitem>
50 <listitem>
51 <para>
52 Download (FTP): <ulink url="&gnupg2-download-ftp;"/>
53 </para>
54 </listitem>
55 <listitem>
56 <para>
57 Download MD5 sum: &gnupg2-md5sum;
58 </para>
59 </listitem>
60 <listitem>
61 <para>
62 Download size: &gnupg2-size;
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Estimated disk space required: &gnupg2-buildsize;
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Estimated build time: &gnupg2-time;
73 </para>
74 </listitem>
75 </itemizedlist>
76
77 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
78
79 <bridgehead renderas="sect4">Required</bridgehead>
80 <para role="required">
81 <xref linkend="libassuan"/>,
82 <xref linkend="libgcrypt"/>,
83 <xref linkend="libksba"/>, and
84 <xref linkend="npth"/>
85 </para>
86
87 <bridgehead renderas="sect4">Recommended</bridgehead>
88 <para role="recommended">
89 <xref linkend="gnutls"/> (required to communicate with keyservers
90 using https or hkps protocol) and
91 <xref linkend="pinentry"/> (Run-time requirement for most of
92 the package's functionality)
93 </para>
94
95 <bridgehead renderas="sect4">Optional</bridgehead>
96 <para role="optional">
97 <xref linkend="curl"/>,
98 <xref linkend="fuse3"/>,
99 <xref linkend="imagemagick"/> (for the <command>convert</command> utility,
100 used for generating the documentation),
101 <xref linkend="libusb"/>,
102 an <xref linkend="server-mail"/>,
103 <xref linkend="openldap"/>,
104 <xref linkend="sqlite"/>,
105 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>),
106 <ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> (for
107 generating documentation),
108 and <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
109 adns</ulink>
110 </para>
111
112 <para condition="html" role="usernotes">User Notes:
113 <ulink url="&blfs-wiki;/gnupg2"/></para>
114
115 </sect2>
116
117 <sect2 role="installation">
118 <title>Installation of GnuPG</title>
119<!-- This is useless with 2.3.x. If we need gpg-zip we'll have to fetch
120 it somewhere.
121 <para>
122 By default GnuPG doesn't install the deprecated gpg-zip script,
123 but it is still needed by some programs. Make GnuPG install it with:
124 </para>
125
126<screen><userinput>sed -e '/noinst_SCRIPTS = gpg-zip/c sbin_SCRIPTS += gpg-zip' \
127 -i tools/Makefile.in</userinput></screen>
128-->
129<!-- Seems to be resolved in 2.2.29
130 <para>
131 Fix a issue causing build failure if
132 <application>OpenLDAP</application> is not installed:
133 </para>
134
135<screen><userinput>sed -e '737a #if USE_LDAP' \
136 -e '760a #endif' \
137 -i dirmngr/dirmngr.c</userinput></screen>
138-->
139
140 <para>
141 Install <application>GnuPG</application> by running the following
142 commands:
143 </para>
144
145<screen><userinput>./configure --prefix=/usr \
146 --localstatedir=/var \
147 --sysconfdir=/etc \
148 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
149make &amp;&amp;
150
151makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
152makeinfo --plaintext -o doc/gnupg.txt doc/gnupg.texi &amp;&amp;
153make -C doc html</userinput></screen>
154
155 <para>
156 If you have <xref linkend="texlive"/>
157 installed and you wish to create documentation in alternate formats,
158 issue the following commands
159 (<ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> is needed for
160 the ps format):
161 </para>
162
163<screen remap="doc"><userinput>make -C doc pdf ps</userinput></screen>
164
165 <para>
166 To test the results, issue: <command>make check</command>.
167 </para>
168
169 <para>
170 <!--
171 Note that if you have already installed
172 <application>GnuPG</application>, the instructions below will overwrite
173 <filename>/usr/share/man/man1/gpg-zip.1</filename>.
174 -->
175 Now, as the <systemitem class="username">root</systemitem> user:
176 </para>
177
178<screen role="root"><userinput>make install &amp;&amp;
179
180install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
181install -v -m644 doc/gnupg_nochunks.html \
182 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html &amp;&amp;
183install -v -m644 doc/*.texi doc/gnupg.txt \
184 /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
185install -v -m644 doc/gnupg.html/* \
186 /usr/share/doc/gnupg-&gnupg2-version;/html</userinput></screen>
187 <para>
188 If you created alternate formats of the documentation, install them
189 using the following command as the
190 <systemitem class="username">root</systemitem> user:
191 </para>
192
193<screen role="root"
194 remap="doc"><userinput>install -v -m644 doc/gnupg.{pdf,dvi,ps} \
195 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
196
197 </sect2>
198
199 <sect2 role="commands">
200 <title>Command Explanations</title>
201<!--
202 <para>
203 <command>sed ... tools/Makefile.in</command>:
204 This command is needed to build the gpg-zip program.
205 </para>
206-->
207 <para>
208 <parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
209 This switch changes the default docdir to <filename
210 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.
211 </para>
212
213<!-- Unrecognized in 2.2.26, seems to get built automatically now.
214 <para>
215 <parameter>- -enable-symcryptrun</parameter>: This switch enables
216 building the symcryptrun program.
217 </para>
218-->
219 <para>
220 <option>--enable-all-tests</option>: This switch allows more tests to be
221 run with <command>make check</command>.
222 </para>
223
224 <para>
225 <option>--enable-g13</option>: This switch enables building the
226 g13 program.
227 </para>
228
229 </sect2>
230
231 <sect2 role="content">
232 <title>Contents</title>
233
234 <segmentedlist>
235 <segtitle>Installed Programs</segtitle>
236 <segtitle>Installed Libraries</segtitle>
237 <segtitle>Installed Directories</segtitle>
238
239 <seglistitem>
240 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13
241 (optional), gpg-agent, gpg-card, gpg-connect-agent, gpg, gpgconf,
242 gpgparsemail, gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-server,
243 <!--gpg-zip, --> kbxutil,
244 <!--symcryptrun,--> and watchgnupg</seg>
245 <seg>None</seg>
246 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
247 /usr/share/gnupg</seg>
248 </seglistitem>
249 </segmentedlist>
250
251 <variablelist>
252 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
253 <?dbfo list-presentation="list"?>
254 <?dbhtml list-presentation="table"?>
255
256 <varlistentry id="addgnupghome">
257 <term><command>addgnupghome</command></term>
258 <listitem>
259 <para>
260 is used to create and populate a user's
261 <filename class="directory">~/.gnupg</filename> directories
262 </para>
263 <indexterm zone="gnupg2 addgnupghome">
264 <primary sortas="b-addgnupghome">addgnupghome</primary>
265 </indexterm>
266 </listitem>
267 </varlistentry>
268
269 <varlistentry id="applygnupgdefaults">
270 <term><command>applygnupgdefaults</command></term>
271 <listitem>
272 <para>
273 is a wrapper script used to run <command>gpgconf</command>
274 with the <parameter>--apply-defaults</parameter> parameter on all
275 user's GnuPG home directories
276 </para>
277 <indexterm zone="gnupg2 applygnupgdefaults">
278 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
279 </indexterm>
280 </listitem>
281 </varlistentry>
282
283 <varlistentry id="dirmngr">
284 <term><command>dirmngr</command></term>
285 <listitem>
286 <para>
287 is a tool that takes care of accessing the OpenPGP keyservers
288 </para>
289 <indexterm zone="gnupg2 dirmngr">
290 <primary sortas="b-dirmngr">dirmngr</primary>
291 </indexterm>
292 </listitem>
293 </varlistentry>
294
295 <varlistentry id="dirmngr-client">
296 <term><command>dirmngr-client</command></term>
297 <listitem>
298 <para>
299 is a tool to contact a running dirmngr and test whether a
300 certificate has been revoked
301 </para>
302 <indexterm zone="gnupg2 dirmngr-client">
303 <primary sortas="b-dirmngr-client">dirmngr-client</primary>
304 </indexterm>
305 </listitem>
306 </varlistentry>
307
308 <varlistentry id="g13">
309 <term><command>g13</command></term>
310 <listitem>
311 <para>
312 is a tool to create, mount or unmount an encrypted file system
313 container (optional)
314 </para>
315 <indexterm zone="gnupg2 g13">
316 <primary sortas="b-g13">g13</primary>
317 </indexterm>
318 </listitem>
319 </varlistentry>
320
321 <varlistentry id="gpg-agent">
322 <term><command>gpg-agent</command></term>
323 <listitem>
324 <para>
325 is a daemon used to manage secret (private) keys independently
326 from any protocol. It is used as a backend for
327 <command>gpg</command> and <command>gpgsm</command> as well as
328 for a couple of other utilities
329 </para>
330 <indexterm zone="gnupg2 gpg-agent">
331 <primary sortas="b-gpg-agent">gpg-agent</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 <varlistentry id="gpg-card">
337 <term><command>gpg-card</command></term>
338 <listitem>
339 <para>
340 is a tool to manage smart cards and tokens
341 </para>
342 <indexterm zone="gnupg2 gpg-card">
343 <primary sortas="b-gpg-card">gpg-card</primary>
344 </indexterm>
345 </listitem>
346 </varlistentry>
347
348 <varlistentry id="gpg-connect-agent">
349 <term><command>gpg-connect-agent</command></term>
350 <listitem>
351 <para>
352 is a utility used to communicate with a running
353 <command>gpg-agent</command>
354 </para>
355 <indexterm zone="gnupg2 gpg-connect-agent">
356 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
357 </indexterm>
358 </listitem>
359 </varlistentry>
360
361 <varlistentry id="gpg">
362 <term><command>gpg</command></term>
363 <listitem>
364 <para>
365 is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
366 tool used to provide digital encryption and signing services using
367 the OpenPGP standard
368 </para>
369 <indexterm zone="gnupg2 gpg">
370 <primary sortas="b-gpg">gpg</primary>
371 </indexterm>
372 </listitem>
373 </varlistentry>
374
375 <varlistentry id="gpgconf">
376 <term><command>gpgconf</command></term>
377 <listitem>
378 <para>
379 is a utility used to automatically and reasonably safely
380 query and modify configuration files in the
381 <filename class="directory">~/.gnupg</filename> home directory. It
382 is designed not to be invoked manually by the user, but
383 automatically by graphical user interfaces
384 </para>
385 <indexterm zone="gnupg2 gpgconf">
386 <primary sortas="b-gpgconf">gpgconf</primary>
387 </indexterm>
388 </listitem>
389 </varlistentry>
390
391 <varlistentry id="gpgparsemail">
392 <term><command>gpgparsemail</command></term>
393 <listitem>
394 <para>
395 is a utility currently only useful for debugging. Run it with
396 <parameter>--help</parameter> for usage information
397 </para>
398 <indexterm zone="gnupg2 gpgparsemail">
399 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
400 </indexterm>
401 </listitem>
402 </varlistentry>
403
404 <varlistentry id="gpgscm">
405 <term><command>gpgscm</command></term>
406 <listitem>
407 <para>
408 executes the given scheme program or spawns an interactive shell
409 </para>
410 <indexterm zone="gnupg2 gpgscm">
411 <primary sortas="b-gpgscm">gpgscm</primary>
412 </indexterm>
413 </listitem>
414 </varlistentry>
415
416 <varlistentry id="gpgsm">
417 <term><command>gpgsm</command></term>
418 <listitem>
419 <para>
420 is a tool similar to <command>gpg</command> used to provide
421 digital encryption and signing services on X.509 certificates and
422 the CMS protocol. It is mainly used as a backend for S/MIME mail
423 processing
424 </para>
425 <indexterm zone="gnupg2 gpgsm">
426 <primary sortas="b-gpgsm">gpgsm</primary>
427 </indexterm>
428 </listitem>
429 </varlistentry>
430
431 <varlistentry id="gpgsplit">
432 <term><command>gpgsplit</command></term>
433 <listitem>
434 <para>
435 splits an OpenPGP message into packets
436 </para>
437 <indexterm zone="gnupg2 gpgsplit">
438 <primary sortas="b-gpgsplit">gpgsplit</primary>
439 </indexterm>
440 </listitem>
441 </varlistentry>
442
443 <varlistentry id="gpgtar">
444 <term><command>gpgtar</command></term>
445 <listitem>
446 <para>
447 is a tool to encrypt or sign files into an archive
448 </para>
449 <indexterm zone="gnupg2 gpgtar">
450 <primary sortas="b-gpgtar">gpgtar</primary>
451 </indexterm>
452 </listitem>
453 </varlistentry>
454
455 <varlistentry id="gpgv">
456 <term><command>gpgv</command></term>
457 <listitem>
458 <para>
459 is a verify only version of <command>gpg</command>
460 </para>
461 <indexterm zone="gnupg2 gpgv">
462 <primary sortas="b-gpgv">gpgv</primary>
463 </indexterm>
464 </listitem>
465 </varlistentry>
466
467 <varlistentry id="gpg-wks-server">
468 <term><command>gpg-wks-server</command></term>
469 <listitem>
470 <para>
471 provides a server for the
472 <application>Web Key Service</application> protocol
473 </para>
474 <indexterm zone="gnupg2 gpg-wks-server">
475 <primary sortas="b-gpg-wks-server">gpg-wks-server</primary>
476 </indexterm>
477 </listitem>
478 </varlistentry>
479<!--
480 <varlistentry id="gpg-zip">
481 <term><command>gpg-zip</command></term>
482 <listitem>
483 <para>
484 encrypts or signs files into an archive
485 </para>
486 <indexterm zone="gnupg2 gpg-zip">
487 <primary sortas="b-gpg-zip">gpg-zip</primary>
488 </indexterm>
489 </listitem>
490 </varlistentry>
491-->
492 <varlistentry id="kbxutil">
493 <term><command>kbxutil</command></term>
494 <listitem>
495 <para>
496 is used to list, export and import Keybox data
497 </para>
498 <indexterm zone="gnupg2 kbxutil">
499 <primary sortas="b-kbxutil">kbxutil</primary>
500 </indexterm>
501 </listitem>
502 </varlistentry>
503
504 <!--
505 <varlistentry id="symcryptrun">
506 <term><command>symcryptrun</command></term>
507 <listitem>
508 <para>
509 is a simple symmetric encryption tool.
510 </para>
511 <indexterm zone="gnupg2 symcryptrun">
512 <primary sortas="b-symcryptrun">symcryptrun</primary>
513 </indexterm>
514 </listitem>
515 </varlistentry>
516-->
517 <varlistentry id="watchgnupg">
518 <term><command>watchgnupg</command></term>
519 <listitem>
520 <para>
521 is used to listen to a Unix Domain socket created by any of
522 the GnuPG tools
523 </para>
524 <indexterm zone="gnupg2 watchgnupg">
525 <primary sortas="b-watchgnupg">watchgnupg</primary>
526 </indexterm>
527 </listitem>
528 </varlistentry>
529
530 </variablelist>
531
532 </sect2>
533
534</sect1>
Note: See TracBrowser for help on using the repository browser.