Ignore:
Timestamp:
03/24/2020 07:19:44 PM (4 years ago)
Author:
Pierre Labastie <pieere@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
fa3edfef
Parents:
914049f6
Message:

Format postlfs/security and misc/forgotten

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@22884 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:
1 edited

Legend:

Unmodified
Added
Removed
  • postlfs/security/gnupg2.xml

    r914049f6 r47274444  
    3030    <title>Introduction to GnuPG</title>
    3131
    32     <para>The <application>GnuPG</application> package is GNU's tool for
    33     secure communication and data storage. It can be used to encrypt data and
    34     to create digital signatures. It includes an advanced key management
    35     facility and is compliant with the proposed OpenPGP Internet standard as
    36     described in RFC2440 and the S/MIME standard as described by several RFCs.
    37     GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
    38     S/MIME.</para>
     32    <para>
     33      The <application>GnuPG</application> package is GNU's tool for
     34      secure communication and data storage. It can be used to encrypt data and
     35      to create digital signatures. It includes an advanced key management
     36      facility and is compliant with the proposed OpenPGP Internet standard as
     37      described in RFC2440 and the S/MIME standard as described by several RFCs.
     38      GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and
     39      S/MIME.
     40    </para>
    3941
    4042    &lfs91_checked;
     
    4345    <itemizedlist spacing="compact">
    4446      <listitem>
    45         <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para>
    46       </listitem>
    47       <listitem>
    48         <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para>
    49       </listitem>
    50       <listitem>
    51         <para>Download MD5 sum: &gnupg2-md5sum;</para>
    52       </listitem>
    53       <listitem>
    54         <para>Download size: &gnupg2-size;</para>
    55       </listitem>
    56       <listitem>
    57         <para>Estimated disk space required: &gnupg2-buildsize;</para>
    58       </listitem>
    59       <listitem>
    60         <para>Estimated build time: &gnupg2-time;</para>
     47        <para>
     48          Download (HTTP): <ulink url="&gnupg2-download-http;"/>
     49        </para>
     50      </listitem>
     51      <listitem>
     52        <para>
     53          Download (FTP): <ulink url="&gnupg2-download-ftp;"/>
     54        </para>
     55      </listitem>
     56      <listitem>
     57        <para>
     58          Download MD5 sum: &gnupg2-md5sum;
     59        </para>
     60      </listitem>
     61      <listitem>
     62        <para>
     63          Download size: &gnupg2-size;
     64        </para>
     65      </listitem>
     66      <listitem>
     67        <para>
     68          Estimated disk space required: &gnupg2-buildsize;
     69        </para>
     70      </listitem>
     71      <listitem>
     72        <para>
     73          Estimated build time: &gnupg2-time;
     74        </para>
    6175      </listitem>
    6276    </itemizedlist>
     
    103117  <sect2 role="installation">
    104118    <title>Installation of GnuPG</title>
    105     <!-- It's been well over three years. I think this can be commented for now.
    106     <warning>
    107       <para>
    108         If you are upgrading from gnupg prior to version 2.1, upstream
    109         developers recommend backing up
    110         <filename class="directory">~/.gnupg</filename> because some additional
    111         configuration will probably be necessary and you could lose your keys.
    112         You can find instructions at
    113         <ulink url="http://jo-ke.name/wp/?p=111"></ulink> and
    114         <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>.
    115       </para>
    116     </warning>
    117     -->
    118 
    119     <para>By default GnuPG doesn't install the deprecated gpg-zip script,
    120     but it is still needed by some programs.  Make GnuPG install it with:
     119
     120    <para>
     121      By default GnuPG doesn't install the deprecated gpg-zip script,
     122      but it is still needed by some programs.  Make GnuPG install it with:
    121123    </para>
    122124
     
    124126    -i tools/Makefile.in</userinput></screen>
    125127
    126     <para>Install <application>GnuPG</application> by running the following
    127     commands:</para>
     128    <para>
     129      Install <application>GnuPG</application> by running the following
     130      commands:
     131    </para>
    128132
    129133<screen><userinput>./configure --prefix=/usr            \
     
    137141make -C doc html</userinput></screen>
    138142
    139     <para>If you have <xref linkend="texlive"/>
    140     installed and you wish to create documentation in alternate formats,
    141     issue the following commands
    142     (<ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> is needed for
    143     the ps format):</para>
     143    <para>
     144      If you have <xref linkend="texlive"/>
     145      installed and you wish to create documentation in alternate formats,
     146      issue the following commands
     147      (<ulink url="http://mcj.sourceforge.net/">fig2dev</ulink> is needed for
     148      the ps format):
     149    </para>
    144150
    145151<screen remap="doc"><userinput>make -C doc pdf ps</userinput></screen>
    146152
    147     <para>To test the results, issue: <command>make check</command>.</para>
    148 
    149     <para>Note that if you have already installed
    150     <application>GnuPG</application>, the instructions below will overwrite
    151     <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
    152     <systemitem class="username">root</systemitem> user:</para>
     153    <para>
     154      To test the results, issue: <command>make check</command>.
     155    </para>
     156
     157    <para>
     158      Note that if you have already installed
     159      <application>GnuPG</application>, the instructions below will overwrite
     160      <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the
     161      <systemitem class="username">root</systemitem> user:
     162    </para>
    153163
    154164<screen role="root"><userinput>make install &amp;&amp;
     
    161171install -v -m644    doc/gnupg.html/* \
    162172                    /usr/share/doc/gnupg-&gnupg2-version;/html</userinput></screen>
    163     <para>If you created alternate formats of the documentation, install them
    164     using the following command as the
    165     <systemitem class="username">root</systemitem> user:</para>
     173    <para>
     174      If you created alternate formats of the documentation, install them
     175      using the following command as the
     176      <systemitem class="username">root</systemitem> user:
     177    </para>
    166178
    167179<screen role="root"
     
    174186    <title>Command Explanations</title>
    175187
    176     <para><command>sed ... tools/Makefile.in</command>:
    177     This command is needed to build the gpg-zip program.</para>
    178 
    179     <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
    180     This switch changes the default docdir to <filename
    181     class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para>
    182 
    183     <para><parameter>--enable-symcryptrun</parameter>: This switch enables
    184     building the symcryptrun program.</para>
     188    <para>
     189      <command>sed ... tools/Makefile.in</command>:
     190      This command is needed to build the gpg-zip program.
     191    </para>
     192
     193    <para>
     194      <parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>:
     195      This switch changes the default docdir to <filename
     196      class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.
     197    </para>
     198
     199    <para>
     200      <parameter>--enable-symcryptrun</parameter>: This switch enables
     201      building the symcryptrun program.
     202    </para>
    185203
    186204    <para>
     
    223241        <term><command>addgnupghome</command></term>
    224242        <listitem>
    225           <para>is used to create and populate a user's
    226           <filename class='directory'>~/.gnupg</filename> directories</para>
     243          <para>
     244            is used to create and populate a user's
     245            <filename class='directory'>~/.gnupg</filename> directories
     246          </para>
    227247          <indexterm zone="gnupg2 addgnupghome">
    228248            <primary sortas="b-addgnupghome">addgnupghome</primary>
     
    234254        <term><command>applygnupgdefaults</command></term>
    235255        <listitem>
    236           <para>is a wrapper script used to run <command>gpgconf</command>
    237           with the <parameter>--apply-defaults</parameter> parameter on all
    238           user's GnuPG home directories.</para>
     256          <para>
     257            is a wrapper script used to run <command>gpgconf</command>
     258            with the <parameter>--apply-defaults</parameter> parameter on all
     259            user's GnuPG home directories.
     260          </para>
    239261          <indexterm zone="gnupg2 applygnupgdefaults">
    240262            <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary>
     
    246268        <term><command>dirmngr</command></term>
    247269        <listitem>
    248           <para> is a tool that takes care of accessing the OpenPGP keyservers.
     270          <para>
     271            is a tool that takes care of accessing the OpenPGP keyservers.
    249272          </para>
    250273          <indexterm zone="gnupg2 dirmngr">
     
    257280        <term><command>dirmngr-client</command></term>
    258281        <listitem>
    259           <para> is a tool to contact a running dirmngr and test whether a
    260           certificate has been revoked. </para>
     282          <para>
     283            is a tool to contact a running dirmngr and test whether a
     284            certificate has been revoked.
     285          </para>
    261286          <indexterm zone="gnupg2 dirmngr-client">
    262287            <primary sortas="b-dirmngr-client">dirmngr-client</primary>
     
    268293        <term><command>g13</command></term>
    269294        <listitem>
    270           <para>is a tool to create, mount or unmount an encrypted file system
    271           container (optional).</para>
     295          <para>
     296            is a tool to create, mount or unmount an encrypted file system
     297            container (optional).
     298          </para>
    272299          <indexterm zone="gnupg2 g13">
    273300            <primary sortas="b-g13">g13</primary>
     
    279306        <term><command>gpg-agent</command></term>
    280307        <listitem>
    281           <para>is a daemon used to manage secret (private) keys independently
    282           from any protocol. It is used as a backend for <command>gpg2</command>
    283           and <command>gpgsm</command> as well as for a couple of other
    284           utilities.</para>
     308          <para>
     309            is a daemon used to manage secret (private) keys independently
     310            from any protocol. It is used as a backend for
     311            <command>gpg2</command> and <command>gpgsm</command> as well as
     312            for a couple of other utilities.
     313          </para>
    285314          <indexterm zone="gnupg2 gpg-agent">
    286315            <primary sortas="b-gpg-agent">gpg-agent</primary>
     
    292321        <term><command>gpg-connect-agent</command></term>
    293322        <listitem>
    294           <para>is a utility used to communicate with a running
    295           <command>gpg-agent</command>.</para>
     323          <para>
     324            is a utility used to communicate with a running
     325            <command>gpg-agent</command>.
     326          </para>
    296327          <indexterm zone="gnupg2 gpg-connect-agent">
    297328            <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary>
     
    303334        <term><command>gpg</command></term>
    304335        <listitem>
    305           <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
    306           tool used to provide digital encryption and signing services using
    307           the OpenPGP standard.</para>
     336          <para>
     337            is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a
     338            tool used to provide digital encryption and signing services using
     339            the OpenPGP standard.
     340          </para>
    308341          <indexterm zone="gnupg2 gpg">
    309342            <primary sortas="b-gpg">gpg</primary>
     
    315348        <term><command>gpgconf</command></term>
    316349        <listitem>
    317           <para>is a utility used to automatically and reasonably safely
    318           query and modify configuration files in the
    319           <filename class='directory'>~/.gnupg</filename> home directory. It is
    320           designed not to be invoked manually by the user, but automatically by
    321           graphical user interfaces.</para>
     350          <para>
     351            is a utility used to automatically and reasonably safely
     352            query and modify configuration files in the
     353            <filename class='directory'>~/.gnupg</filename> home directory. It
     354            is designed not to be invoked manually by the user, but
     355            automatically by graphical user interfaces.
     356          </para>
    322357          <indexterm zone="gnupg2 gpgconf">
    323358            <primary sortas="b-gpgconf">gpgconf</primary>
     
    329364        <term><command>gpgparsemail</command></term>
    330365        <listitem>
    331           <para>is a utility currently only useful for debugging. Run it with
    332           <parameter>--help</parameter> for usage information.</para>
     366          <para>
     367            is a utility currently only useful for debugging. Run it with
     368            <parameter>--help</parameter> for usage information.
     369          </para>
    333370          <indexterm zone="gnupg2 gpgparsemail">
    334371            <primary sortas="b-gpgparsemail">gpgparsemail</primary>
     
    340377        <term><command>gpgscm</command></term>
    341378        <listitem>
    342           <para>executes the given scheme program or spawns an interactive
    343           shell.</para>
     379          <para>
     380            executes the given scheme program or spawns an interactive shell.
     381          </para>
    344382          <indexterm zone="gnupg2 gpgscm">
    345383            <primary sortas="b-gpgscm">gpgscm</primary>
     
    351389        <term><command>gpgsm</command></term>
    352390        <listitem>
    353           <para>is a tool similar to <command>gpg2</command> used to provide
    354           digital encryption and signing services on X.509 certificates and the
    355           CMS protocol. It is mainly used as a backend for S/MIME mail
    356           processing.</para>
     391          <para>
     392            is a tool similar to <command>gpg2</command> used to provide
     393            digital encryption and signing services on X.509 certificates and
     394            the CMS protocol. It is mainly used as a backend for S/MIME mail
     395            processing.
     396          </para>
    357397          <indexterm zone="gnupg2 gpgsm">
    358398            <primary sortas="b-gpgsm">gpgsm</primary>
     
    364404        <term><command>gpgtar</command></term>
    365405        <listitem>
    366           <para> is a tool to encrypt or sign files into an archive.</para>
     406          <para>
     407            is a tool to encrypt or sign files into an archive.
     408          </para>
    367409          <indexterm zone="gnupg2 gpgtar">
    368410            <primary sortas="b-gpgtar">gpgtar</primary>
     
    374416        <term><command>gpgv</command></term>
    375417        <listitem>
    376           <para>is a verify only version of <command>gpg2</command>.</para>
     418          <para>
     419            is a verify only version of <command>gpg2</command>.
     420          </para>
    377421          <indexterm zone="gnupg2 gpgv">
    378422            <primary sortas="b-gpgv">gpgv</primary>
     
    384428        <term><command>gpg-wks-server</command></term>
    385429        <listitem>
    386           <para>provides a server for the
    387           <application>Web Key Service</application> protocol.</para>
     430          <para>
     431            provides a server for the
     432            <application>Web Key Service</application> protocol.
     433          </para>
    388434          <indexterm zone="gnupg2 gpg-wks-server">
    389435            <primary sortas="b-gpg-wks-server">gpg-wks-server</primary>
     
    395441        <term><command>gpg-zip</command></term>
    396442        <listitem>
    397           <para>encrypts or signs files into an archive.</para>
     443          <para>
     444            encrypts or signs files into an archive.
     445          </para>
    398446          <indexterm zone="gnupg2 gpg-zip">
    399447            <primary sortas="b-gpg-zip">gpg-zip</primary>
     
    405453        <term><command>kbxutil</command></term>
    406454        <listitem>
    407           <para>is used to list, export and import Keybox data.</para>
     455          <para>
     456            is used to list, export and import Keybox data.
     457          </para>
    408458          <indexterm zone="gnupg2 kbxutil">
    409459            <primary sortas="b-kbxutil">kbxutil</primary>
     
    415465        <term><command>symcryptrun</command></term>
    416466        <listitem>
    417           <para>is a simple symmetric encryption tool.</para>
     467          <para>
     468            is a simple symmetric encryption tool.
     469          </para>
    418470          <indexterm zone="gnupg2 symcryptrun">
    419471            <primary sortas="b-symcryptrun">symcryptrun</primary>
     
    425477        <term><command>watchgnupg</command></term>
    426478        <listitem>
    427           <para>is used to listen to a Unix Domain socket created by any of
    428           the GnuPG tools.</para>
     479          <para>
     480            is used to listen to a Unix Domain socket created by any of
     481            the GnuPG tools.
     482          </para>
    429483          <indexterm zone="gnupg2 watchgnupg">
    430484            <primary sortas="b-watchgnupg">watchgnupg</primary>
Note: See TracChangeset for help on using the changeset viewer.