source: postlfs/security/gnupg2.xml@ cee882f

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 9.0 9.1 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since cee882f was cee882f, checked in by Bruce Dubbs <bdubbs@…>, 5 years ago

Update to fuse-3.6.2.
Update to glib-2.60.5.
Update to mesa-19.1.2.
Update to gnupg-2.2.17.
+

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@21825 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 16.0 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http "&gnupg-http;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
8 <!ENTITY gnupg2-download-ftp "&gnupg-ftp;/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "1ba2d9b70c377f8e967742064c27a19c">
10 <!ENTITY gnupg2-size "6.4 MB">
11 <!ENTITY gnupg2-buildsize "116 MB (with all tests; add 24 MB for docs)">
12 <!ENTITY gnupg2-time "0.4 SBU (using parallelism=4; add 1.6 SBU for tests)">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG">GnuPG</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG</title>
31
32 <para>The <application>GnuPG</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME.</para>
39
40 &lfs84_checked;
41
42 <bridgehead renderas="sect3">Package Information</bridgehead>
43 <itemizedlist spacing="compact">
44 <listitem>
45 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
46 </listitem>
47 <listitem>
48 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
49 </listitem>
50 <listitem>
51 <para>Download MD5 sum: &gnupg2-md5sum;</para>
52 </listitem>
53 <listitem>
54 <para>Download size: &gnupg2-size;</para>
55 </listitem>
56 <listitem>
57 <para>Estimated disk space required: &gnupg2-buildsize;</para>
58 </listitem>
59 <listitem>
60 <para>Estimated build time: &gnupg2-time;</para>
61 </listitem>
62 </itemizedlist>
63
64 <bridgehead renderas="sect3">GnuPG 2 Dependencies</bridgehead>
65
66 <bridgehead renderas="sect4">Required</bridgehead>
67 <para role="required">
68 <xref linkend="libassuan"/>,
69 <xref linkend="libgcrypt"/>,
70 <xref linkend="libgpg-error"/>,
71 <xref linkend="libksba"/>, and
72 <xref linkend="npth"/>
73 </para>
74
75 <bridgehead renderas="sect4">Recommended</bridgehead>
76 <para role="recommended">
77 <xref linkend="pinentry"/> (Run-time requirement for most of
78 the package's functionality)
79 </para>
80
81 <bridgehead renderas="sect4">Optional</bridgehead>
82 <para role="optional">
83 <xref linkend="curl"/>,
84 <xref linkend="fuse3"/>,
85 <xref linkend="gnutls"/>,
86 <xref linkend="imagemagick"/> (for the <command>convert</command> utility,
87 used for generating the documentation),
88 <xref linkend="libusb"/>,
89 an <xref linkend="server-mail"/>,
90 <xref linkend="openldap"/>,
91 <xref linkend="sqlite"/>,
92 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>),
93 <ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> (for
94 generating documentation),
95 and <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU
96 adns</ulink>
97 </para>
98
99 <para condition="html" role="usernotes">User Notes:
100 <ulink url="&blfs-wiki;/gnupg2"/></para>
101
102 </sect2>
103
104 <sect2 role="installation">
105 <title>Installation of GnuPG</title>
106 <!-- It's been well over three years. I think this can be commented for now.
107 <warning>
108 <para>
109 If you are upgrading from gnupg prior to version 2.1, upstream
110 developers recommend backing up
111 <filename class="directory">~/.gnupg</filename> because some additional
112 configuration will probably be necessary and you could lose your keys.
113 You can find instructions at
114 <ulink url="http://jo-ke.name/wp/?p=111"></ulink> and
115 <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>.
116 </para>
117 </warning>
118 -->
119
120 <para>By default GnuPG doesn't install the deprecated gpg-zip script.
121 But it is still needed by some programs. Make GnuPG install it with:
122 </para>
123
124<screen><userinput>sed -e '/noinst_SCRIPTS = gpg-zip/c sbin_SCRIPTS += gpg-zip' \
125 -i tools/Makefile.in</userinput></screen>
126
127 <para>Install <application>GnuPG</application> by running the following
128 commands:</para>
129
130<screen><userinput>./configure --prefix=/usr \
131 --enable-symcryptrun \
132 --localstatedir=/var \
133 --docdir=/usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
134make &amp;&amp;
135
136makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
137makeinfo --plaintext -o doc/gnupg.txt doc/gnupg.texi &amp;&amp;
138make -C doc html</userinput></screen>
139
140 <para>If you have <xref linkend="texlive"/>
141 installed and you wish to create documentation in alternate formats,
142 issue the following commands
143 (<ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> is needed for
144 the ps format):</para>
145
146<screen remap="doc"><userinput>make -C doc pdf ps</userinput></screen>
147
148 <para>To test the results, issue: <command>make check</command>.</para>
149
150 <para>Note that if you have already installed
151 <application>GnuPG</application>, the instructions below will overwrite
152 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
153 <systemitem class="username">root</systemitem> user:</para>
154
155<screen role="root"><userinput>make install &amp;&amp;
156
157install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
158install -v -m644 doc/gnupg_nochunks.html \
159 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html &amp;&amp;
160install -v -m644 doc/*.texi doc/gnupg.txt \
161 /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
162install -v -m644 doc/gnupg.html/* \
163 /usr/share/doc/gnupg-&gnupg2-version;/html</userinput></screen>
164 <para>If you created alternate formats of the documentation, install them
165 using the following command as the
166 <systemitem class="username">root</systemitem> user:</para>
167
168<screen role="root"
169 remap="doc"><userinput>install -v -m644 doc/gnupg.{pdf,dvi,ps} \
170 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
171
172 </sect2>
173
174 <sect2 role="commands">
175 <title>Command Explanations</title>
176
177 <para><command>sed ... tools/Makefile.in</command>:
178 This command is needed to build the gpg-zip program.</para>
179
180 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
181 This switch changes the default docdir to <filename
182 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
183
184 <para><parameter>--enable-symcryptrun</parameter>: This switch enables
185 building the symcryptrun program.</para>
186
187 <para>
188 <option>--enable-all-tests</option>: allows more tests to be run with
189 <command>make check</command>.
190 </para>
191
192 <para>
193 <option>--enable-g13</option>: This switch enables building the
194 g13 program.
195 </para>
196
197 </sect2>
198
199 <sect2 role="content">
200 <title>Contents</title>
201
202 <segmentedlist>
203 <segtitle>Installed Programs</segtitle>
204 <segtitle>Installed Libraries</segtitle>
205 <segtitle>Installed Directories</segtitle>
206
207 <seglistitem>
208 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13
209 (optional), gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail,
210 gpgscm, gpgsm, gpgtar, gpgv, gpg-wks-server, gpg-zip, kbxutil,
211 symcryptrun, and watchgnupg</seg>
212 <seg>None</seg>
213 <seg>/usr/share/doc/gnupg-&gnupg2-version; and
214 /usr/share/gnupg</seg>
215 </seglistitem>
216 </segmentedlist>
217
218 <variablelist>
219 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
220 <?dbfo list-presentation="list"?>
221 <?dbhtml list-presentation="table"?>
222
223 <varlistentry id="addgnupghome">
224 <term><command>addgnupghome</command></term>
225 <listitem>
226 <para>is used to create and populate a user's
227 <filename class='directory'>~/.gnupg</filename> directories</para>
228 <indexterm zone="gnupg2 addgnupghome">
229 <primary sortas="b-addgnupghome">addgnupghome</primary>
230 </indexterm>
231 </listitem>
232 </varlistentry>
233
234 <varlistentry id="applygnupgdefaults">
235 <term><command>applygnupgdefaults</command></term>
236 <listitem>
237 <para>is a wrapper script used to run <command>gpgconf</command>
238 with the <parameter>--apply-defaults</parameter> parameter on all
239 user's GnuPG home directories.</para>
240 <indexterm zone="gnupg2 applygnupgdefaults">
241 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
242 </indexterm>
243 </listitem>
244 </varlistentry>
245
246 <varlistentry id="dirmngr">
247 <term><command>dirmngr</command></term>
248 <listitem>
249 <para> is a tool that takes care of accessing the OpenPGP keyservers.
250 </para>
251 <indexterm zone="gnupg2 dirmngr">
252 <primary sortas="b-dirmngr">dirmngr</primary>
253 </indexterm>
254 </listitem>
255 </varlistentry>
256
257 <varlistentry id="dirmngr-client">
258 <term><command>dirmngr-client</command></term>
259 <listitem>
260 <para> is a tool to contact a running dirmngr and test whether a
261 certificate has been revoked. </para>
262 <indexterm zone="gnupg2 dirmngr-client">
263 <primary sortas="b-dirmngr-client">dirmngr-client</primary>
264 </indexterm>
265 </listitem>
266 </varlistentry>
267
268 <varlistentry id="g13">
269 <term><command>g13</command></term>
270 <listitem>
271 <para>is a tool to create, mount or unmount an encrypted file system
272 container (optional).</para>
273 <indexterm zone="gnupg2 g13">
274 <primary sortas="b-g13">g13</primary>
275 </indexterm>
276 </listitem>
277 </varlistentry>
278
279 <varlistentry id="gpg-agent">
280 <term><command>gpg-agent</command></term>
281 <listitem>
282 <para>is a daemon used to manage secret (private) keys independently
283 from any protocol. It is used as a backend for <command>gpg2</command>
284 and <command>gpgsm</command> as well as for a couple of other
285 utilities.</para>
286 <indexterm zone="gnupg2 gpg-agent">
287 <primary sortas="b-gpg-agent">gpg-agent</primary>
288 </indexterm>
289 </listitem>
290 </varlistentry>
291
292 <varlistentry id="gpg-connect-agent">
293 <term><command>gpg-connect-agent</command></term>
294 <listitem>
295 <para>is a utility used to communicate with a running
296 <command>gpg-agent</command>.</para>
297 <indexterm zone="gnupg2 gpg-connect-agent">
298 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
299 </indexterm>
300 </listitem>
301 </varlistentry>
302
303 <varlistentry id="gpg">
304 <term><command>gpg</command></term>
305 <listitem>
306 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
307 tool used to provide digital encryption and signing services using
308 the OpenPGP standard.</para>
309 <indexterm zone="gnupg2 gpg">
310 <primary sortas="b-gpg">gpg</primary>
311 </indexterm>
312 </listitem>
313 </varlistentry>
314
315 <varlistentry id="gpgconf">
316 <term><command>gpgconf</command></term>
317 <listitem>
318 <para>is a utility used to automatically and reasonably safely
319 query and modify configuration files in the
320 <filename class='directory'>~/.gnupg</filename> home directory. It is
321 designed not to be invoked manually by the user, but automatically by
322 graphical user interfaces.</para>
323 <indexterm zone="gnupg2 gpgconf">
324 <primary sortas="b-gpgconf">gpgconf</primary>
325 </indexterm>
326 </listitem>
327 </varlistentry>
328
329 <varlistentry id="gpgparsemail">
330 <term><command>gpgparsemail</command></term>
331 <listitem>
332 <para>is a utility currently only useful for debugging. Run it with
333 <parameter>--help</parameter> for usage information.</para>
334 <indexterm zone="gnupg2 gpgparsemail">
335 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
336 </indexterm>
337 </listitem>
338 </varlistentry>
339
340 <varlistentry id="gpgscm">
341 <term><command>gpgscm</command></term>
342 <listitem>
343 <para>executes the given scheme program or spawns an interactive
344 shell.</para>
345 <indexterm zone="gnupg2 gpgscm">
346 <primary sortas="b-gpgscm">gpgscm</primary>
347 </indexterm>
348 </listitem>
349 </varlistentry>
350
351 <varlistentry id="gpgsm">
352 <term><command>gpgsm</command></term>
353 <listitem>
354 <para>is a tool similar to <command>gpg2</command> used to provide
355 digital encryption and signing services on X.509 certificates and the
356 CMS protocol. It is mainly used as a backend for S/MIME mail
357 processing.</para>
358 <indexterm zone="gnupg2 gpgsm">
359 <primary sortas="b-gpgsm">gpgsm</primary>
360 </indexterm>
361 </listitem>
362 </varlistentry>
363
364 <varlistentry id="gpgtar">
365 <term><command>gpgtar</command></term>
366 <listitem>
367 <para> is a tool to encrypt or sign files into an archive.</para>
368 <indexterm zone="gnupg2 gpgtar">
369 <primary sortas="b-gpgtar">gpgtar</primary>
370 </indexterm>
371 </listitem>
372 </varlistentry>
373
374 <varlistentry id="gpgv">
375 <term><command>gpgv</command></term>
376 <listitem>
377 <para>is a verify only version of <command>gpg2</command>.</para>
378 <indexterm zone="gnupg2 gpgv">
379 <primary sortas="b-gpgv">gpgv</primary>
380 </indexterm>
381 </listitem>
382 </varlistentry>
383
384 <varlistentry id="gpg-wks-server">
385 <term><command>gpg-wks-server</command></term>
386 <listitem>
387 <para>provides a server for the
388 <application>Web Key Service</application> protocol.</para>
389 <indexterm zone="gnupg2 gpg-wks-server">
390 <primary sortas="b-gpg-wks-server">gpg-wks-server</primary>
391 </indexterm>
392 </listitem>
393 </varlistentry>
394
395 <varlistentry id="gpg-zip">
396 <term><command>gpg-zip</command></term>
397 <listitem>
398 <para>encrypts or signs files into an archive.</para>
399 <indexterm zone="gnupg2 gpg-zip">
400 <primary sortas="b-gpg-zip">gpg-zip</primary>
401 </indexterm>
402 </listitem>
403 </varlistentry>
404
405 <varlistentry id="kbxutil">
406 <term><command>kbxutil</command></term>
407 <listitem>
408 <para>is used to list, export and import Keybox data.</para>
409 <indexterm zone="gnupg2 kbxutil">
410 <primary sortas="b-kbxutil">kbxutil</primary>
411 </indexterm>
412 </listitem>
413 </varlistentry>
414
415 <varlistentry id="symcryptrun">
416 <term><command>symcryptrun</command></term>
417 <listitem>
418 <para>is a simple symmetric encryption tool.</para>
419 <indexterm zone="gnupg2 symcryptrun">
420 <primary sortas="b-symcryptrun">symcryptrun</primary>
421 </indexterm>
422 </listitem>
423 </varlistentry>
424
425 <varlistentry id="watchgnupg">
426 <term><command>watchgnupg</command></term>
427 <listitem>
428 <para>is used to listen to a Unix Domain socket created by any of
429 the GnuPG tools.</para>
430 <indexterm zone="gnupg2 watchgnupg">
431 <primary sortas="b-watchgnupg">watchgnupg</primary>
432 </indexterm>
433 </listitem>
434 </varlistentry>
435
436 </variablelist>
437
438 </sect2>
439
440</sect1>
Note: See TracBrowser for help on using the repository browser.