Changeset cbc3f97 for postlfs/security/gnupg2.xml
- Timestamp:
- 01/30/2016 08:17:30 PM (8 years ago)
- Branches:
- systemd-13485
- Children:
- b93238f0
- Parents:
- 852ccfd5
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
postlfs/security/gnupg2.xml
r852ccfd5 rcbc3f97 8 8 <!ENTITY gnupg2-download-ftp "ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-&gnupg2-version;.tar.bz2"> 9 9 <!ENTITY gnupg2-md5sum "f0a7cb09fe119f8b82eba7efecd27dc0"> 10 <!ENTITY gnupg2-size "5 MB">11 <!ENTITY gnupg2-buildsize "112 MB (with tests and doc s - additional 8 MB for alternate formats docs)">12 <!ENTITY gnupg2-time "0.9 SBU (with tests and doc s)">10 <!ENTITY gnupg2-size "5.0 MB"> 11 <!ENTITY gnupg2-buildsize "112 MB (with tests and documentation included. Add an additional 8 MB for more formats."> 12 <!ENTITY gnupg2-time "0.9 SBU (with tests and documentation)"> 13 13 ]> 14 14 … … 17 17 18 18 <sect1info> 19 <othername>$LastChangedBy $</othername>20 <date>$Date $</date>19 <othername>$LastChangedBy: krejzi $</othername> 20 <date>$Date: 2014-10-26 14:56:10 +0100 (Sun, 26 Oct 2014) $</date> 21 21 </sect1info> 22 22 … … 30 30 <title>Introduction to GnuPG</title> 31 31 32 <para>The <application>GnuPG</application> package is GNU's tool for 33 secure communication and data storage. It can be used to encrypt data and 34 to create digital signatures. It includes an advanced key management 35 facility and is compliant with the proposed OpenPGP Internet standard as 36 described in RFC2440 and the S/MIME standard as described by several RFCs. 37 GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and 38 S/MIME.</para> 39 40 &lfs78_checked; 32 <para> 33 The <application>GnuPG</application> package is GNU's tool for secure 34 communication and data storage. It can be used to encrypt data and to 35 create digital signatures. It includes an advanced key management 36 facility and is compliant with the proposed OpenPGP Internet standard 37 as described in RFC2440 and the S/MIME standard as described by several 38 RFCs. GnuPG 2 is the stable version of GnuPG integrating support for 39 OpenPGP and S/MIME. 40 </para> 41 42 &lfs77_checked; 41 43 42 44 <bridgehead renderas="sect3">Package Information</bridgehead> 43 45 <itemizedlist spacing="compact"> 44 46 <listitem> 45 <para>Download (HTTP): <ulink url="&gnupg2-download-http;"/></para> 47 <para> 48 Download (HTTP): <ulink url="&gnupg2-download-http;"/> 49 </para> 46 50 </listitem> 47 51 <listitem> 48 <para>Download (FTP): <ulink url="&gnupg2-download-ftp;"/></para> 52 <para> 53 Download (FTP): <ulink url="&gnupg2-download-ftp;"/> 54 </para> 49 55 </listitem> 50 56 <listitem> 51 <para>Download MD5 sum: &gnupg2-md5sum;</para> 57 <para> 58 Download MD5 sum: &gnupg2-md5sum; 59 </para> 52 60 </listitem> 53 61 <listitem> 54 <para>Download size: &gnupg2-size;</para> 62 <para> 63 Download size: &gnupg2-size; 64 </para> 55 65 </listitem> 56 66 <listitem> 57 <para>Estimated disk space required: &gnupg2-buildsize;</para> 67 <para> 68 Estimated disk space required: &gnupg2-buildsize; 69 </para> 58 70 </listitem> 59 71 <listitem> 60 <para>Estimated build time: &gnupg2-time;</para> 72 <para> 73 Estimated build time: &gnupg2-time; 74 </para> 61 75 </listitem> 62 76 </itemizedlist> 63 77 64 <bridgehead renderas="sect3">GnuPG 2Dependencies</bridgehead>78 <bridgehead renderas="sect3">GnuPG Dependencies</bridgehead> 65 79 66 80 <bridgehead renderas="sect4">Required</bridgehead> … … 68 82 <xref linkend="libassuan"/>, 69 83 <xref linkend="libgcrypt"/>, 70 <xref linkend="libksba"/> ,and84 <xref linkend="libksba"/> and 71 85 <xref linkend="npth"/> 72 86 </para> … … 74 88 <bridgehead renderas="sect4">Recommended</bridgehead> 75 89 <para role="recommended"> 76 <xref linkend="pinentry"/> (Run-time requirement for most of77 the package's functionality)90 <xref linkend="pinentry"/> (Run-time requirement for 91 most of the package's functionality) 78 92 </para> 79 93 … … 85 99 <xref linkend="openldap"/>, 86 100 <xref linkend="sqlite"/>, 87 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>) ,and101 <xref linkend="texlive"/> (or <xref linkend="tl-installer"/>) and 88 102 <ulink url="http://www.chiark.greenend.org.uk/~ian/adns/">GNU 89 adns</ulink>103 ADNS</ulink> 90 104 </para> 91 105 92 106 <para condition="html" role="usernotes">User Notes: 93 <ulink url="&blfs-wiki;/gnupg2"/></para>94 107 <ulink url="&blfs-wiki;/gnupg2"/> 108 </para> 95 109 </sect2> 96 110 … … 99 113 100 114 <warning> 101 102 If you are upgrading from gnupg prior to version2.1, upstream103 104 105 configuration will probably be necessary, and you couldlose your keys.106 You can find instructions at107 <ulink url="http://jo-ke.name/wp/?p=111"></ulink>and108 109 115 <para> 116 If you are upgrading from a version of GnuPG prior to 2.1, upstream 117 developers recommend to backup 118 <filename class="directory">~/.gnupg</filename>, because some additional 119 configuration will likely be necessary, and you may lose your keys. 120 You can find instructions for this at 121 <ulink url="http://go-ke.name/wp/?p=111"></ulink>, and 122 <ulink url="https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1"></ulink>. 123 </para> 110 124 </warning> 111 125 112 <para>If the top directory path where the source is unpacked contains 113 symbolic links, the openpgp tests might fail. If this is your case and 114 you wish to run the test suite, fix that with:</para> 126 <para> 127 If the directory path where the source is unpacked contains 128 symlinks, the openpgp tests will very likely fail. If this is the case, 129 and you wish to run the test suite, run the following command to fix it: 130 </para> 115 131 116 132 <screen><userinput>sed -e 's|\(GNUPGHOME\)=\$(abs_builddir)|\1=`/bin/pwd`|' \ 117 -i tests/openpgp/Makefile.in</userinput></screen> 118 119 <para>Install <application>GnuPG</application> by running the following 120 commands:</para> 121 122 <screen><userinput>./configure --prefix=/usr \ 133 -i tests/openpgp/Makefile.in</userinput></screen> 134 135 <para> 136 Install <application>GnuPG</application> by running the following 137 commands: 138 </para> 139 140 <screen><userinput>./configure --prefix=/usr \ 141 --sysconfdir=/etc \ 123 142 --enable-symcryptrun \ 124 143 --docdir=/usr/share/doc/gnupg-&gnupg2-version; && 125 144 make && 126 145 127 makeinfo --html --no-split \128 -o doc/gnupg_nochunks.html doc/gnupg.texi && 129 makeinfo --plaintext \ 130 -o doc/gnupg.txt doc/gnupg.texi</userinput></screen>131 132 <para>If you have <xref linkend="texlive"/>133 installed and you wish to create documentation in alternate formats,134 issue the following commands:</para>146 makeinfo --html --no-split -o doc/gnupg_nochunks.html doc/gnupg.texi && 147 makeinfo --plaintext -o doc/gnupg.txt doc/gnupg.texi</userinput></screen> 148 149 <para> 150 If you have <xref linkend="texlive"/> installed and you wish 151 to create documentation in alternate formats, issue the 152 following commands: 153 </para> 135 154 136 155 <screen><userinput>make -C doc pdf ps html</userinput></screen> 137 156 138 <para>To test the results, issue: <command>make check</command>.</para> 139 140 <para>Note that if you have already installed 141 <application>GnuPG</application>, the instructions below will overwrite 142 <filename>/usr/share/man/man1/gpg-zip.1</filename>. Now, as the 143 <systemitem class="username">root</systemitem> user:</para> 157 <para> 158 To test the results, issue: <command>make check</command>. 159 </para> 160 161 <para> 162 Now, as the <systemitem class="username">root</systemitem> user: 163 </para> 144 164 145 165 <screen role="root"><userinput>make install && 146 166 147 install -v -m755 -d /usr/share/doc/gnupg-&gnupg2-version;/html && 148 install -v -m644 doc/gnupg_nochunks.html \ 149 /usr/share/doc/gnupg-&gnupg2-version;/html/gnupg.html && 150 install -v -m644 doc/*.texi doc/gnupg.txt \ 151 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen> 152 153 <para>We recommend the creation of symlinks for compatibility with the first 154 version of GnuPG, because some programs or scripts need them. Issue, as 155 <systemitem class="username">root</systemitem> user:</para> 156 157 <screen role="root"><userinput>for f in gpg gpgv 158 do 159 ln -svf ${f}2.1 /usr/share/man/man1/$f.1 && 160 ln -svf ${f}2 /usr/bin/$f 161 done 162 unset f</userinput></screen> 163 164 <para>If you created alternate formats of the documentation, install it 165 using the following command as the 166 <systemitem class="username">root</systemitem> user:</para> 167 for f in gpg gpgv ; do 168 ln -sfv ${f}2 /usr/bin/${f} && 169 ln -sfv ${f}2.1 /usr/share/man/man1/${f}.1 170 done && 171 172 install -v -dm755 /usr/share/doc/gnupg-&gnupg2-version;/html && 173 install -v -m644 doc/gnupg_nochunks.html \ 174 /usr/share/doc/gnupg-&gnupg2-version;/gnupg.html && 175 install -v -m644 doc/*.texi doc/gnupg.txt \ 176 /usr/share/doc/gnupg-&gnupg2-version;</userinput></screen> 177 178 <para> 179 If you created alternate formats of the documentation, install 180 it using the following command as the 181 <systemitem class="username">root</systemitem> user: 182 </para> 167 183 168 184 <screen role="root"><userinput>install -v -m644 doc/gnupg.html/* \ … … 176 192 <title>Command Explanations</title> 177 193 178 <para><parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>: 179 This switch changes the default docdir to <filename 180 class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>.</para> 181 182 <para><parameter>--enable-symcryptrun</parameter>: This switch enables 183 building the symcryptrun program.</para> 184 185 <para><option>--enable-g13</option>: This switch enables building the 186 g13 program.</para> 194 <para> 195 <parameter>--enable-symcryptrun</parameter>: This switch enables 196 building the symcryptrun program. 197 </para> 198 199 <para> 200 <parameter>--docdir=/usr/share/doc/gnupg-&gnupg2-version;</parameter>: 201 This switch changes the default documentation directory to 202 <filename class="directory">/usr/share/doc/gnupg-&gnupg2-version;</filename>. 203 </para> 204 205 <para> 206 <parameter>--enable-gl3</parameter>: This switch enables building the 207 gl3 program. 208 </para> 209 210 <para> 211 <command>ln -sfv ...</command>: This command creates symlinks for 212 compatibility with the first version of 213 <application>GnuPG</application>. 214 </para> 187 215 188 216 </sect2> … … 197 225 198 226 <seglistitem> 199 <seg>addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13, 200 gpg-agent, gpg-connect-agent, gpg, gpg2, gpgconf, gpgkey2ssh, 201 gpgparsemail, gpgsm, gpgtar, gpgv, gpgv2, kbxutil, symcryptrun, and 202 watchgnupg</seg> 203 <seg>None</seg> 204 <seg>/usr/share/doc/gnupg-&gnupg2-version; and 205 /usr/share/gnupg</seg> 227 <seg> 228 addgnupghome, 229 applygnupgdefaults, 230 dirmngr, 231 dirmngr-client, 232 gl3, 233 gpg, 234 gpg2, 235 gpg-agent, 236 gpgconf, 237 gpgkey2ssh, 238 gpgparsemail, 239 gpgsm, 240 gpgtar, 241 gpgv, 242 gpgv2, 243 kbxutil, 244 symcryptrun, 245 and watchgnupg 246 </seg> 247 <seg> 248 None 249 </seg> 250 <seg> 251 /usr/share/doc/gnupg-&gnupg2-version; and 252 /usr/share/gnupg 253 </seg> 206 254 </seglistitem> 207 255 </segmentedlist> … … 215 263 <term><command>addgnupghome</command></term> 216 264 <listitem> 217 <para>is used to create and populate user's 218 <filename class='directory'>~/.gnupg</filename> directories</para> 265 <para> 266 is used to create and populate user's 267 <filename class="directory">~/.gnupg</filename> directories. 268 </para> 219 269 <indexterm zone="gnupg2 addgnupghome"> 220 270 <primary sortas="b-addgnupghome">addgnupghome</primary> … … 226 276 <term><command>applygnupgdefaults</command></term> 227 277 <listitem> 228 <para>is a wrapper script used to run <command>gpgconf</command> 229 with the <parameter>--apply-defaults</parameter> parameter on all 230 user's GnuPG home directories.</para> 278 <para> 279 is a wrapper script used to run <command>gpgconf</command> 280 with the <parameter>--apply-defaults</parameter> parameter 281 on all user's GnuPG home directories. 282 </para> 231 283 <indexterm zone="gnupg2 applygnupgdefaults"> 232 284 <primary sortas="b-applygnupgdefaults">applygnupgdefaults</primary> … … 238 290 <term><command>dirmngr</command></term> 239 291 <listitem> 240 <para> is a tool that takes care of accessing the OpenPGP keyservers. 292 <para> 293 is a tool that takes care of accessing the OpenPGP keyservers. 241 294 </para> 242 295 <indexterm zone="gnupg2 dirmngr"> … … 249 302 <term><command>dirmngr-client</command></term> 250 303 <listitem> 251 <para> is a tool to contact a running dirmngr and test whether a 252 certificate has been revoked. </para> 304 <para> 305 is a tool to contact a running dirmngr and test whether a 306 certificate has been revoked. 307 </para> 253 308 <indexterm zone="gnupg2 dirmngr-client"> 254 309 <primary sortas="b-dirmngr-client">dirmngr-client</primary> … … 257 312 </varlistentry> 258 313 259 <varlistentry id="g13"> 260 <term><command>g13</command></term> 261 <listitem> 262 <para>is a tool to create, mount or unmount an encrypted file system 263 container (optional).</para> 264 <indexterm zone="gnupg2 g13"> 265 <primary sortas="b-g13">g13</primary> 266 </indexterm> 267 </listitem> 268 </varlistentry> 269 314 <varlistentry id="gl3"> 315 <term><command>gl3</command></term> 316 <listitem> 317 <para> 318 is a tool to create, mount, or unomunt an encrypted filesystem 319 container (optional). 320 </para> 321 <indexterm zone="gnupg2 gl3"> 322 <primary sortas="b-gl3">gl3</primary> 323 </indexterm> 324 </listitem> 325 </varlistentry> 326 270 327 <varlistentry id="gpg-agent"> 271 328 <term><command>gpg-agent</command></term> 272 329 <listitem> 273 <para>is a daemon used to manage secret (private) keys independently 274 from any protocol. It is used as a backend for <command>gpg2</command> 275 and <command>gpgsm</command> as well as for a couple of other 276 utilities.</para> 330 <para> 331 is a daemon used to manage secret (private) keys independently 332 from any protocol. It is used as a backend for 333 <command>gpg</command> and <command>gpgsm</command> as well as 334 for a couple of other utilities. 335 </para> 277 336 <indexterm zone="gnupg2 gpg-agent"> 278 337 <primary sortas="b-gpg-agent">gpg-agent</primary> … … 284 343 <term><command>gpg-connect-agent</command></term> 285 344 <listitem> 286 <para>is a utility used to communicate with a running 287 <command>gpg-agent</command>.</para> 345 <para> 346 is a utility used to communicate with a running 347 <command>gpg-agent</command>. 348 </para> 288 349 <indexterm zone="gnupg2 gpg-connect-agent"> 289 350 <primary sortas="b-gpg-connect-agent">gpg-connect-agent</primary> … … 295 356 <term><command>gpg</command></term> 296 357 <listitem> 297 <para>(optional) is a symlink to <command>gpg2</command> for 298 compatibility with the first version of GnuPG.</para> 358 <para> 359 is a symlink to <command>gpg2</command> for compatibility 360 with the first version of <application>GnuPG</application>. 361 </para> 299 362 <indexterm zone="gnupg2 gpg"> 300 363 <primary sortas="b-gpg">gpg</primary> … … 306 369 <term><command>gpg2</command></term> 307 370 <listitem> 308 <para>is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a 309 tool used to provide digital encryption and signing services using 310 the OpenPGP standard.</para> 371 <para> 372 is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a 373 tool used to provide digital encryption and signing services 374 using the OpenPGP standard. 375 </para> 311 376 <indexterm zone="gnupg2 gpg2"> 312 377 <primary sortas="b-gpg2">gpg2</primary> … … 318 383 <term><command>gpgconf</command></term> 319 384 <listitem> 320 <para>is a utility used to automatically and reasonably safely 321 query and modify configuration files in the 322 <filename class='directory'>~/.gnupg</filename> home directory. It is 323 designed not to be invoked manually by the user, but automatically by 324 graphical user interfaces.</para> 385 <para> 386 is a utility used to automatically and reasonable safely 387 query and modify configuration files in the 388 <filename class="directory">~/.gnupg</filename> home 389 directory. It is designed not to be invoked manually by 390 the user, but automatically by graphical user interfaces. 391 </para> 325 392 <indexterm zone="gnupg2 gpgconf"> 326 393 <primary sortas="b-gpgconf">gpgconf</primary> … … 343 410 <term><command>gpgparsemail</command></term> 344 411 <listitem> 345 <para>is a utility currently only useful for debugging. Run it with 346 <parameter>--help</parameter> for usage information.</para> 412 <para> 413 is a utility currently only useful for debugging. Run it with 414 <parameter>--help</parameter> for usage information. 415 </para> 347 416 <indexterm zone="gnupg2 gpgparsemail"> 348 417 <primary sortas="b-gpgparsemail">gpgparsemail</primary> … … 354 423 <term><command>gpgsm</command></term> 355 424 <listitem> 356 <para>is a tool similar to <command>gpg2</command> used to provide 357 digital encryption and signing services on X.509 certificates and the 358 CMS protocol. It is mainly used as a backend for S/MIME mail 359 processing.</para> 425 <para> 426 is a tool similar to <command>gpg</command> used to provide digital 427 encryption and signing services on X.509 certificates and the CMS 428 protocol. It is mainly used as a backend for S/MIME mail processing. 429 </para> 360 430 <indexterm zone="gnupg2 gpgsm"> 361 431 <primary sortas="b-gpgsm">gpgsm</primary> … … 364 434 </varlistentry> 365 435 366 <varlistentry id="gpgtar"> 367 <term><command>gpgtar</command></term> 368 <listitem> 369 <para> is a tool to encrypt or sign files into an archive.</para> 370 <indexterm zone="gnupg2 gpgtar"> 371 <primary sortas="b-gpgtar">gpgtar</primary> 436 <varlistentry id="gpgsm-gencert.sh"> 437 <term><command>gpgsm-gencert.sh</command></term> 438 <listitem> 439 <para> 440 is a simple tool used to interactively generate a certificate 441 request which will be printed to stdout. 442 </para> 443 <indexterm zone="gnupg2 gpgsm-gencert.sh"> 444 <primary sortas="b-gpgsm-gencert.sh">gpgsm-gencert.sh</primary> 372 445 </indexterm> 373 446 </listitem> … … 377 450 <term><command>gpgv</command></term> 378 451 <listitem> 379 <para>(optional) is a symlink to <command>gpgv2</command> for 380 compatibility with the first version of GnuPG.</para> 452 <para> 453 is a symlink to <command>gpgv2</command> for compatibility 454 with the first version of <application>GnuPG</application>. 455 </para> 381 456 <indexterm zone="gnupg2 gpgv"> 382 457 <primary sortas="b-gpgv">gpgv</primary> … … 388 463 <term><command>gpgv2</command></term> 389 464 <listitem> 390 <para>is a verify only version of <command>gpg2</command>.</para> 465 <para> 466 is a verify only version of <command>gpg2</command>. 467 </para> 391 468 <indexterm zone="gnupg2 gpgv2"> 392 469 <primary sortas="b-gpgv2">gpgv2</primary> … … 398 475 <term><command>kbxutil</command></term> 399 476 <listitem> 400 <para>is used to list, export and import Keybox data.</para> 477 <para> 478 is used to list, export and import Keybox data. 479 </para> 401 480 <indexterm zone="gnupg2 kbxutil"> 402 481 <primary sortas="b-kbxutil">kbxutil</primary> … … 408 487 <term><command>symcryptrun</command></term> 409 488 <listitem> 410 <para>is a simple symmetric encryption tool.</para> 489 <para> 490 is a simple symmetric encryption tool. 491 </para> 411 492 <indexterm zone="gnupg2 symcryptrun"> 412 493 <primary sortas="b-symcryptrun">symcryptrun</primary> … … 418 499 <term><command>watchgnupg</command></term> 419 500 <listitem> 420 <para>is used to listen to a Unix Domain socket created by any of 421 the GnuPG tools.</para> 501 <para> 502 is used to listen to a Unix Domain socket created by any of 503 the GnuPG tools. 504 </para> 422 505 <indexterm zone="gnupg2 watchgnupg"> 423 506 <primary sortas="b-watchgnupg">watchgnupg</primary>
Note:
See TracChangeset
for help on using the changeset viewer.