source: postlfs/security/gnupg2.xml@ fd7e0ed6

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since fd7e0ed6 was fd7e0ed6, checked in by Randy McMurchy <randy@…>, 16 years ago

Changed all lines with nothing but whitespace to blank lines

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@7429 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 13.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnupg2-download-http "http://public.ftp.planetmirror.com/pub/gnupg/gnupg-&gnupg2-version;.tar.bz2">
8 <!ENTITY gnupg2-download-ftp "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2">
9 <!ENTITY gnupg2-md5sum "fc4377ca67e1bf687eeaf22e79c0b9d1">
10 <!ENTITY gnupg2-size "3.6 MB">
11 <!ENTITY gnupg2-buildsize "65 MB">
12 <!ENTITY gnupg2-time "0.7 SBU">
13]>
14
15<sect1 id="gnupg2" xreflabel="GnuPG-&gnupg2-version;">
16 <?dbhtml filename="gnupg2.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuPG-&gnupg2-version;</title>
24
25 <indexterm zone="gnupg2">
26 <primary sortas="a-GnuPG-2">GnuPG 2</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuPG 2</title>
31
32 <para>The <application>GnuPG 2</application> package is GNU's tool for
33 secure communication and data storage. It can be used to encrypt data and
34 to create digital signatures. It includes an advanced key management
35 facility and is compliant with the proposed OpenPGP Internet standard as
36 described in RFC2440 and the S/MIME standard as described by several RFCs.
37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
38 S/MIME. It does not conflict with an installed <xref linkend="gnupg"/>
39 OpenPGP-only version.</para>
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
45 </listitem>
46 <listitem>
47 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
48 </listitem>
49 <listitem>
50 <para>Download MD5 sum: &gnupg2-md5sum;</para>
51 </listitem>
52 <listitem>
53 <para>Download size: &gnupg2-size;</para>
54 </listitem>
55 <listitem>
56 <para>Estimated disk space required: &gnupg2-buildsize;</para>
57 </listitem>
58 <listitem>
59 <para>Estimated build time: &gnupg2-time;</para>
60 </listitem>
61 </itemizedlist>
62
63 <!-- <bridgehead renderas="sect3">Additional Downloads</bridgehead>
64 <itemizedlist spacing='compact'>
65 <listitem>
66 <para>Required Patch: <ulink
67 url="&patch-root;/gnupg2-&gnupg2-version;-curl_LDAP-1.patch"/>
68 </para>
69 </listitem>
70 </itemizedlist> -->
71
72 <bridgehead renderas="sect3">GnuPG Dependencies</bridgehead>
73
74 <bridgehead renderas="sect4">Required</bridgehead>
75 <para role="required"><xref linkend="pth"/>,
76 <xref linkend="libassuan"/>,
77 <xref linkend="libgcrypt"/>, and
78 <xref linkend="libksba"/></para>
79
80 <bridgehead renderas="sect4">Optional</bridgehead>
81 <para role="optional"><xref linkend="openldap"/>,
82 <xref linkend="libusb"/>,
83 <xref linkend="curl"/>, and
84 an <xref linkend="server-mail"/></para>
85
86 <bridgehead renderas="sect4">Optional (Run-time Requirement For Most of
87 the Package's Functionality)</bridgehead>
88 <para role="optional"><xref linkend="pinentry"/></para>
89
90 <para condition="html" role="usernotes">User Notes:
91 <ulink url="&blfs-wiki;/gnupg2"/></para>
92
93 </sect2>
94
95 <sect2 role="installation">
96 <title>Installation of GnuPG 2</title>
97
98 <para>Install <application>GnuPG 2</application> by running the following
99 commands:</para>
100
101<screen><userinput>./configure --prefix=/usr --libexecdir=/usr/lib/gnupg2 &amp;&amp;
102make</userinput></screen>
103
104 <para>If you have <xref linkend="tetex"/> installed and you wish to create
105 documentation in alternate formats, issue the following commands:</para>
106
107<screen><userinput>make -C doc pdf ps html &amp;&amp;
108makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi &amp;&amp;
109makeinfo --plaintext -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>
110
111 <para>To test the results, issue: <command>make check</command>.</para>
112
113 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
114
115 <!-- Removing this from the commands as it doesn't appear
116 necessary any longer. See the gnupg.texi file (or some
117 TeX derivative) for additional information.
118
119 chmod -v 4755 /usr/bin/gpg &amp;&amp;
120 -->
121
122<screen role="root"><userinput>make install &amp;&amp;
123
124install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
125ln -sv ../../gnupg/FAQ /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
126ln -sv ../../gnupg/faq.html /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
127
128install -v -m644 doc/{DETAILS,KEYSERVER,OpenPGP,TRANSLATE} \
129 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
130
131 <para>If you created alternate formats of the documentation, install it
132 using the following command as the
133 <systemitem class="username">root</systemitem> user:</para>
134
135<screen role="root"><userinput>install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
136install -v -m644 doc/gnupg.html/* \
137 /usr/share/doc/gnupg-&gnupg2-version;/html &amp;&amp;
138install -v -m644 doc/gnupg_nochunks.html \
139 /usr/share/doc/gnupg-&gnupg2-version;/gnupg.html &amp;&amp;
140install -v -m644 doc/*.texi \
141 /usr/share/doc/gnupg-&gnupg2-version; &amp;&amp;
142install -v -m644 doc/gnupg.{pdf,dvi,ps,txt} \
143 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen>
144
145 </sect2>
146
147 <sect2 role="commands">
148 <title>Command Explanations</title>
149
150 <para><parameter>--libexecdir=/usr/lib/gnupg2</parameter>: This switch
151 creates a <filename class="directory">gnupg</filename> directory in
152 <filename class="directory">/usr/lib</filename> instead of
153 <filename class="directory">/usr/libexec</filename>.</para>
154
155 <!-- See above why this is no longer included
156 <para><command>chmod -v 4755 /usr/bin/gpg</command>:
157 <command>gpg</command> is installed setuid
158 <systemitem class='username'>root</systemitem> to avoid swapping
159 out sensitive data.</para>
160 -->
161
162 </sect2>
163
164 <sect2 role="content">
165 <title>Contents</title>
166
167 <segmentedlist>
168 <segtitle>Installed Programs</segtitle>
169 <segtitle>Installed Libraries</segtitle>
170 <segtitle>Installed Directories</segtitle>
171
172 <seglistitem>
173 <seg>addgnupghome, applygnupgdefaults, gpg-agent, gpg-connect-agent,
174 gpg2, gpgconf, gpgkey2ssh, gpgparsemail, gpgsm, gpgsm-gencert.sh,
175 gpgv2, kbxutil, scdaemon, symcryptrun, and watchgnupg</seg>
176 <seg>None</seg>
177 <seg>/usr/lib/gnupg2, /usr/share/gnupg and
178 /usr/share/doc/gnupg2-&gnupg2-version;</seg>
179 </seglistitem>
180 </segmentedlist>
181
182 <variablelist>
183 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
184 <?dbfo list-presentation="list"?>
185 <?dbhtml list-presentation="table"?>
186
187 <varlistentry id="addgnupghome">
188 <term><command>addgnupghome</command></term>
189 <listitem>
190 <para>is used to create and populate user's
191 <filename class='directory'>~/.gnupg</filename> directories</para>
192 <indexterm zone="gnupg2 addgnupghome">
193 <primary sortas="b-addgnupghome">addgnupghome</primary>
194 </indexterm>
195 </listitem>
196 </varlistentry>
197
198 <varlistentry id="applygnupgdefaults">
199 <term><command>applygnupgdefaults</command></term>
200 <listitem>
201 <para>is a wrapper script used to run <command>gpgconf</command>
202 with the <parameter>--apply-defaults</parameter> parameter on all
203 user's GnuPG home directories.</para>
204 <indexterm zone="gnupg2 applygnupgdefaults">
205 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
206 </indexterm>
207 </listitem>
208 </varlistentry>
209
210 <varlistentry id="gpg-agent">
211 <term><command>gpg-agent</command></term>
212 <listitem>
213 <para>is a daemon used to manage secret (private) keys independently
214 from any protocol. It is used as a backend for <command>gpg</command>
215 and <command>gpgsm</command> as well as for a couple of other
216 utilities.</para>
217 <indexterm zone="gnupg2 gpg-agent">
218 <primary sortas="b-gpg-agent">gpg-agent</primary>
219 </indexterm>
220 </listitem>
221 </varlistentry>
222
223 <varlistentry id="gpg-connect-agent">
224 <term><command>gpg-connect-agent</command></term>
225 <listitem>
226 <para>is a utility used to communicate with a running
227 <command>gpg-agent</command>.</para>
228 <indexterm zone="gnupg2 gpg-connect-agent">
229 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
230 </indexterm>
231 </listitem>
232 </varlistentry>
233
234 <varlistentry id="gpg2">
235 <term><command>gpg2</command></term>
236 <listitem>
237 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
238 tool used to provide digital encryption and signing services using
239 the OpenPGP standard.</para>
240 <indexterm zone="gnupg2 gpg2">
241 <primary sortas="b-gpg2">gpg2</primary>
242 </indexterm>
243 </listitem>
244 </varlistentry>
245
246 <varlistentry id="gpgconf">
247 <term><command>gpgconf</command></term>
248 <listitem>
249 <para>is a utility used to automatically and reasonable safely
250 query and modify configuration files in the
251 <filename class='directory'>~/.gnupg</filename> home directory. It is
252 designed not to be invoked manually by the user, but automatically by
253 graphical user interfaces.</para>
254 <indexterm zone="gnupg2 gpgconf">
255 <primary sortas="b-gpgconf">gpgconf</primary>
256 </indexterm>
257 </listitem>
258 </varlistentry>
259
260 <varlistentry id="gpgparsemail">
261 <term><command>gpgparsemail</command></term>
262 <listitem>
263 <para>is a utility currently only useful for debugging. Run it with
264 <parameter>--help</parameter> for usage information.</para>
265 <indexterm zone="gnupg2 gpgparsemail">
266 <primary sortas="b-gpgparsemail">gpgparsemail</primary>
267 </indexterm>
268 </listitem>
269 </varlistentry>
270
271 <varlistentry id="gpgsm">
272 <term><command>gpgsm</command></term>
273 <listitem>
274 <para>is a tool similar to <command>gpg</command> used to provide
275 digital encryption and signing services on X.509 certificates and the
276 CMS protocol. It is mainly used as a backend for S/MIME mail
277 processing.</para>
278 <indexterm zone="gnupg2 gpgsm">
279 <primary sortas="b-gpgsm">gpgsm</primary>
280 </indexterm>
281 </listitem>
282 </varlistentry>
283
284 <varlistentry id="gpgsm-gencert.sh">
285 <term><command>gpgsm-gencert.sh</command></term>
286 <listitem>
287 <para>is a simple tool used to interactivly generate a certificate
288 request which will be printed to stdout.</para>
289 <indexterm zone="gnupg2 gpgsm-gencert.sh">
290 <primary sortas="b-gpgsm-gencert.sh">gpgsm-gencert.sh</primary>
291 </indexterm>
292 </listitem>
293 </varlistentry>
294
295 <varlistentry id="gpgv2">
296 <term><command>gpgv2</command></term>
297 <listitem>
298 <para>is a verify only version of <command>gpg2</command>.</para>
299 <indexterm zone="gnupg2 gpgv2">
300 <primary sortas="b-gpgv2">gpgv2</primary>
301 </indexterm>
302 </listitem>
303 </varlistentry>
304
305 <varlistentry id="kbxutil">
306 <term><command>kbxutil</command></term>
307 <listitem>
308 <para>is used to list, export and import Keybox data.</para>
309 <indexterm zone="gnupg2 kbxutil">
310 <primary sortas="b-kbxutil">kbxutil</primary>
311 </indexterm>
312 </listitem>
313 </varlistentry>
314
315 <varlistentry id="scdaemon">
316 <term><command>scdaemon</command></term>
317 <listitem>
318 <para>is a daemon used to manage smartcards. It is usually invoked by
319 <command>gpg-agent</command> and in general not used directly.</para>
320 <indexterm zone="gnupg2 scdaemon">
321 <primary sortas="b-scdaemon">scdaemon</primary>
322 </indexterm>
323 </listitem>
324 </varlistentry>
325
326 <varlistentry id="symcryptrun">
327 <term><command>symcryptrun</command></term>
328 <listitem>
329 <para>is a simple symmetric encryption tool.</para>
330 <indexterm zone="gnupg2 symcryptrun">
331 <primary sortas="b-symcryptrun">symcryptrun</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 <varlistentry id="watchgnupg">
337 <term><command>watchgnupg</command></term>
338 <listitem>
339 <para>is used to listen to a Unix Domain socket created by any of
340 the GnuPG tools.</para>
341 <indexterm zone="gnupg2 watchgnupg">
342 <primary sortas="b-watchgnupg">watchgnupg</primary>
343 </indexterm>
344 </listitem>
345 </varlistentry>
346
347 </variablelist>
348
349 </sect2>
350
351</sect1>
Note: See TracBrowser for help on using the repository browser.