1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00

gpg: New command --quick-tsign-key.

* g10/gpg.c (aQuickTSignKey): New.
(opts): Add new command.
(main): Parse args for it.
* g10/keyedit.c: Include mbox-util.h.
(parse_trustsig_string): New.
(sign_uids): Add arg trustsig for use in quick mode.
(keyedit_quick_sign): Also add arg trustsig and print a diagnostic on
error.
This commit is contained in:
Werner Koch 2025-04-29 18:35:29 +02:00
parent 6d49e86bba
commit d90b290f97
No known key found for this signature in database
GPG key ID: E3FDFF218E45B72B
5 changed files with 183 additions and 18 deletions

View file

@ -1137,8 +1137,10 @@ from @option{--edit-key}.
@item --quick-sign-key @var{fpr} [@var{names}]
@itemx --quick-lsign-key @var{fpr} [@var{names}]
@itemx --quick-tsign-key @var{fpr} @var{trustspec} [@var{names}]
@opindex quick-sign-key
@opindex quick-lsign-key
@opindex quick-tsign-key
Directly sign a key from the passphrase without any further user
interaction. The @var{fpr} must be the verified primary fingerprint
of a key in the local keyring. If no @var{names} are given, all
@ -1153,6 +1155,17 @@ non-exportable. If such a non-exportable signature already exists the
you need to update an existing signature, for example to add or change
notation data, you need to use the option @option{--force-sign-key}.
The command @option{--quick-tsign-key} creates a trust signature using
the information from the @var{trustspec} string. The @var{trustspec}
uses the format [T=]@var{dept},@var{value}[,@var{domain}]. @var{depth}
is the length of the trust chain in the range 0 (identical to a
standard key signature) to 255 (ridiculous long trust chain); the most
common lengths for trust signatures are 1 and 2. @var{value} is
either "f" or "full" which are mapped to a value of 120 or "m" or
"marginal" which are mapped to a value of 60. The allowed range is 0
to 255 but it is highly suggested to use only 60 or 120. @var{domain}
is optional and a plain domain name like "example.org".
This command uses reasonable defaults and thus does not provide the
full flexibility of the "sign" subcommand from @option{--edit-key}.
Its intended use is to help unattended key signing by utilizing a list