From 8d97fc48fe1958a6242e95a1a1d8e9150e0bbeb9 Mon Sep 17 00:00:00 2001 From: David Shaw Date: Sun, 27 Apr 2003 04:12:47 +0000 Subject: [PATCH] * gpg.sgml: Document --no-textmode and --no-use-agent. Clarify the interoperability section. * DETAILS (VALIDSIG): Add version, pk algo, digest algo, sig class, and a reserved field for flags in a future version. --- doc/ChangeLog | 8 ++++++++ doc/DETAILS | 24 ++++++++++++++---------- doc/gpg.sgml | 34 +++++++++++++++++++--------------- 3 files changed, 41 insertions(+), 25 deletions(-) diff --git a/doc/ChangeLog b/doc/ChangeLog index dff1da8ff..cd7fce75c 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,3 +1,11 @@ +2003-04-27 David Shaw + + * gpg.sgml: Document --no-textmode and --no-use-agent. Clarify + the interoperability section. + + * DETAILS (VALIDSIG): Add version, pk algo, digest algo, sig + class, and a reserved field for flags in a future version. + 2003-04-22 Werner Koch * gnupg-w32.reg: Use HLM for the program and make sure the entries diff --git a/doc/DETAILS b/doc/DETAILS index a9d76a165..27ad043c2 100644 --- a/doc/DETAILS +++ b/doc/DETAILS @@ -157,17 +157,21 @@ more arguments in future versions. this signature. sig_class is a 2 byte hex-value. VALIDSIG - + + - The signature with the keyid is good. This is the same - as GOODSIG but has the fingerprint as the argument. Both - status lines are emitted for a good signature. - sig-timestamp is the signature creation time in seconds after - the epoch. expire-timestamp is the signature expiration time - in seconds after the epoch (zero means "does not expire"). - PRIMARY-KEY-FPR is the fingerprint of the primary key or - identical to the first argument. This is useful to get back - to the primary key without running gpg again for this purpose. + The signature with the keyid is good. This is the same as + GOODSIG but has the fingerprint as the argument. Both status + lines are emitted for a good signature. All arguments here + are on one long line. sig-timestamp is the signature creation + time in seconds after the epoch. expire-timestamp is the + signature expiration time in seconds after the epoch (zero + means "does not expire"). sig-version, pubkey-algo, hash-algo, + and sig-class (a 2-byte hex value) are all straight from the + signature packet. PRIMARY-KEY-FPR is the fingerprint of the + primary key or identical to the first argument. This is + useful to get back to the primary key without running gpg + again for this purpose. SIG_ID This is emitted only for signatures of class 0 or 1 which diff --git a/doc/gpg.sgml b/doc/gpg.sgml index b85f4a1d4..0b933702b 100644 --- a/doc/gpg.sgml +++ b/doc/gpg.sgml @@ -865,13 +865,13 @@ compression level of zlib (normally 6). -t, --textmode +--no-textmode -Use canonical text mode. If -t (but not ---textmode) is used together with armoring -and signing, this enables clearsigned messages. -This kludge is needed for PGP compatibility; -normally you would use --sign or --clearsign -to selected the type of the signature. +Use canonical text mode. --no-textmode disables this option. If -t +(but not --textmode) is used together with armoring and signing, this +enables clearsigned messages. This kludge is needed for PGP +compatibility; normally you would use --sign or --clearsign to +selected the type of the signature. @@ -1709,10 +1709,12 @@ distribution for details on how to use it. --use-agent +--no-use-agent Try to use the GnuPG-Agent. Please note that this agent is still under development. With this option, GnuPG first tries to connect to the -agent before it asks for a passphrase. +agent before it asks for a passphrase. --no-use-agent disables this +option. @@ -2482,17 +2484,19 @@ cannot be read by the intended recipient. For example, as of this writing, no version of official PGP supports the BLOWFISH cipher algorithm. If you use it, no PGP user will be able to decrypt your message. The same thing applies to the ZLIB -compression algorithm. By default, GnuPG will do the right thing and -create messages that are usable by any OpenPGP program. Only override -this safe default if you know what you are doing. +compression algorithm. By default, GnuPG uses the OpenPGP preferences +system that will always do the right thing and create messages that +are usable by all recipients, regardless of which OpenPGP program they +use. Only override this safe default if you know what you are doing. -If you absolutely must override the safe default, you are far better -off using the --pgp2, --pgp6, or --pgp7 options. These options are -safe as they do not force any particular algorithms in violation of -OpenPGP, but rather reduce the available algorithms to a "PGP-safe" -list. +If you absolutely must override the safe default, or if the +preferences on a given key are invalid for some reason, you are far +better off using the --pgp2, --pgp6, --pgp7, or --pgp8 options. These +options are safe as they do not force any particular algorithms in +violation of OpenPGP, but rather reduce the available algorithms to a +"PGP-safe" list.