gpg.conf

[David Gray-3]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi

 

Could anyone point me in the right direction for a manual/examples

on how to edit the gpg.conf file for GnuPG 2.0.12 (GPG 4 Win)?

 

The pdf manual which gets installed with this kit contains no references

and the readme only tells me that gpg.conf gets created during install.   

 

I would like to see examples of how to add further keyrings but also it would

be good to know what other options & features could be used if configured properly.

 

Thanks

Dave

Registered Office: Turpin Distribution Services Ltd, Pegasus Drive, Stratton Business Park, Biggleswade, Bedfordshire, SG18 8TQ, UK. ***** Registered in England No. 1331778 ***** This email may contain confidential information and/or copyright material. This email is intended for the use of the addressee only. Any unauthorised use may be unlawful. If you receive this email by mistake, please advise the sender immediately by using the reply facility in your email software.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[Michel Messerschmidt]

On Mon, Nov 02, 2009 at 10:51:46AM -0000, David Gray wrote:
> Could anyone point me in the right direction for a manual/examples
> on how to edit the gpg.conf file for GnuPG 2.0.12 (GPG 4 Win)?

http://www.gnupg.org/documentation/manuals/gnupg/Invoking-GPG.html#Invoking-GPG

Within this manual you'll find:
###
gpg.conf
    This is the standard configuration file read by gpg2 on startup. It may contain any valid long option; the leading two dashes may not be entered and the option may not be abbreviated. This default name may be changed on the command line (see option –options). You should backup this file.
###

Valid options are listed in
http://www.gnupg.org/documentation/manuals/gnupg/GPG-Options.html#GPG-Options



> I would like to see examples of how to add further keyrings

Use the "keyring" option:
--keyring file
    Add file to the current list of keyrings. If file begins with a tilde and a slash, these are replaced by the $HOME directory. If the filename does not contain a slash, it is assumed to be in the GnuPG home directory ("~/.gnupg" if --homedir or $GNUPGHOME is not used).

    Note that this adds a keyring to the current list. If the intent is to use the specified keyring alone, use --keyring along with --no-default-keyring.



HTH,
Michel

_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[David Gray-3]

Hello John,

Thanks for the man page and skeleton file for gpg.conf, both very useful.  

The main issue at the moment (thread: "No secret key under different account") is how
to access the keyring files under a different account.  I'm looking for the
best (least duplication of data/settings ) solution to this and someone suggested
adding a reference to gpg.conf.  

I've installed GPG under the 'Administrator' account but the C# executable
which runs GPG, will run from a SQL Server 2005 agent job, the account for this
is SQLService, therefore this account needs to see the keyrings owned by Administrator.

Apart from that it's good to see what else can be changed and the skeleton you sent me
is a good place to begin.

Regards
Dave


-----Original Message-----
From: John Clizbe [mailto:John@...]
Sent: 02 November 2009 11:41
To: David Gray
Subject: Re: gpg.conf

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Gray wrote:
> Hi
> Could anyone point me in the right direction for a manual/examples on
> how to edit the gpg.conf file for GnuPG 2.0.12 (GPG 4 Win)?

For a server, I'd recommend GnuPG 1.4.10 - at least it comes with the man page Werner has said that gpg4win is more of a desktop application

> The pdf manual which gets installed with this kit contains no references
> and the readme only tells me that gpg.conf gets created during install.  

Attached are the gpg man page as well as an (out-of-date, sorry) options.skel that explains a lot of the common options.

> I would like to see examples of how to add further keyrings but also
> it would be good to know what other options & features could be used
> if configured properly.

Perhaps if we knew exactly what it is you're trying to accomplish.  There are many ways of sharing keyrings, which is best is difficult to say without more information.

If you'd like, you may email me directly

- --
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys@...?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11-svn5166-2009-09-28 (Windows XP)
Comment: When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!
Comment: Be part of the £33† ECHELON -- Use Strong Encryption.
Comment: It's YOUR right - for the time being.
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iJwEAQECAAYFAkruxTgACgkQvh+YERi7Nzq3ygP/Qp/hpeIwqEH333cCBoKa4pdX
Uyl/HkMDbvY8oLbwCtrNoNEnUvwz6ygubdzFLWuroNrpagGL2nGYaSpXwEaGFrXa
vv/lvBaSglW1vYiKqkRWgPTy7pXFuFDcMpXaATP0os+9AK4VGj/z58FV9kyYUJQD
6rsVIirDtx8fJIr9ZAaIRgQBEQIABgUCSu7FOAAKCRAdBKxKYI0qEH+FAKDpTmBs
zT2g4m8QTh3+R0FFlP/4QQCgyl0skei7ZzBjbOpo7Zn6d9HdX7w=
=bggn
-----END PGP SIGNATURE-----
_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[John Clizbe-2]

David Gray wrote:
> Hello John,
>
> Thanks for the man page and skeleton file for gpg.conf, both very useful.  

Anytime

> The main issue at the moment (thread: "No secret key under different account") is how
> to access the keyring files under a different account.  I'm looking for the
> best (least duplication of data/settings ) solution to this and someone suggested
> adding a reference to gpg.conf.  

I think that was me :-)

> I've installed GPG under the 'Administrator' account but the C# executable
> which runs GPG, will run from a SQL Server 2005 agent job, the account for this
> is SQLService, therefore this account needs to see the keyrings owned by Administrator.

Ok, simple redirection. Same as relocating keys to portable media.

In SQLService's gpg.conf, something like:

no-default-keyring
keyring ..\..\..\Administrator\Applic~1\GnuPG\pubring.gpg
secret-keyring ..\..\..\Administrator\Applic~1\GnuPG\secring.gpg
trustdb-name ..\..\..\Administrator\Applic~1\GnuPG\trustdb.gpg

You'll need to also make sure SQLService has +R+W permissions to those files.

Alternatively, as David Shaw pointed out in the other thread, you may invoke
gpg/gpg2 with the --homedir option to point it to the directory containing
Administrator's keyring and conf files

> Apart from that it's good to see what else can be changed and the skeleton you sent me
> is a good place to begin.

--
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys@...?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"



_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users

[David Gray-3]

Hi Michel,
Thanks for the information, most useful.

Regards
David



-----Original Message-----
From: gnupg-users-bounces@... [mailto:gnupg-users-bounces@...] On Behalf Of Michel Messerschmidt
Sent: 02 November 2009 11:10
To: gnupg-users@...
Subject: Re: gpg.conf

On Mon, Nov 02, 2009 at 10:51:46AM -0000, David Gray wrote:
> Could anyone point me in the right direction for a manual/examples
> on how to edit the gpg.conf file for GnuPG 2.0.12 (GPG 4 Win)?

http://www.gnupg.org/documentation/manuals/gnupg/Invoking-GPG.html#Invoking-GPG

Within this manual you'll find:
###
gpg.conf
    This is the standard configuration file read by gpg2 on startup. It may contain any valid long option; the leading two dashes may not be entered and the option may not be abbreviated. This default name may be changed on the command line (see option –options). You should backup this file.
###

Valid options are listed in
http://www.gnupg.org/documentation/manuals/gnupg/GPG-Options.html#GPG-Options



> I would like to see examples of how to add further keyrings

Use the "keyring" option:
--keyring file
    Add file to the current list of keyrings. If file begins with a tilde and a slash, these are replaced by the $HOME directory. If the filename does not contain a slash, it is assumed to be in the GnuPG home directory ("~/.gnupg" if --homedir or $GNUPGHOME is not used).

    Note that this adds a keyring to the current list. If the intent is to use the specified keyring alone, use --keyring along with --no-default-keyring.



HTH,
Michel

_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users
_______________________________________________
Gnupg-users mailing list
Gnupg-users@...
http://lists.gnupg.org/mailman/listinfo/gnupg-users