security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-04-17 15:44:34 +02:00
Code Activity

* gpg.texi: Update from gnupg-2.

Browse Source
This commit is contained in:
David Shaw 2007-10-27 15:52:02 +00:00
parent 9a2a818887
commit e5a8a24977
2 changed files with 26 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/ChangeLog
View File

@ -1,3 +1,7 @@
2007-10-27 David Shaw <dshaw@jabberwocky.com>
* gpg.texi: Update from gnupg-2.
2007-10-23 Werner Koch <wk@g10code.com> 2007-10-23 Werner Koch <wk@g10code.com>
* gpg.texi: Updated from gnupg-2. * gpg.texi: Updated from gnupg-2.

40
doc/gpg.texi
View File

@ -1845,16 +1845,15 @@ normally you would use @option{--sign} or @option{--clearsign} to select
the type of the signature. the type of the signature.
@end ifset @end ifset
@item --force-v3-sigs @item --force-v3-sigs
@itemx --no-force-v3-sigs @itemx --no-force-v3-sigs
OpenPGP states that an implementation should generate v4 signatures OpenPGP states that an implementation should generate v4 signatures
but PGP versions 5 through 7 only recognize v4 signatures on key but PGP versions 5 through 7 only recognize v4 signatures on key
material. This option forces v3 signatures for signatures on data. material. This option forces v3 signatures for signatures on data.
Note that this option overrides @option{--ask-sig-expire}, as v3 signatures Note that this option implies @option{--ask-sig-expire},
cannot have expiration dates. @option{--no-force-v3-sigs} disables this @option{--sig-policy-url}, @option{--sig-notation}, and
option. @option{--sig-keyserver-url}, as these features cannot be used with v3
signatures. @option{--no-force-v3-sigs} disables this option.
@item --force-v4-certs @item --force-v4-certs
@itemx --no-force-v4-certs @itemx --no-force-v4-certs
@ -1953,15 +1952,20 @@ override a different compliance option in the gpg.conf file.
@opindex openpgp @opindex openpgp
Reset all packet, cipher and digest options to strict OpenPGP Reset all packet, cipher and digest options to strict OpenPGP
behavior. Use this option to reset all previous options like behavior. Use this option to reset all previous options like
@option{--rfc1991}, @option{--force-v3-sigs}, @option{--s2k-*}, @option{--s2k-*}, @option{--cipher-algo}, @option{--digest-algo} and
@option{--cipher-algo}, @option{--digest-algo} and
@option{--compress-algo} to OpenPGP compliant values. All PGP @option{--compress-algo} to OpenPGP compliant values. All PGP
workarounds are disabled. workarounds are disabled.
@item --rfc4880
@opindex rfc4880
Reset all packet, cipher and digest options to strict RFC-4880
behavior. Note that this is currently the same thing as
@option{--openpgp}.
@item --rfc2440 @item --rfc2440
@opindex rfc2440 @opindex rfc2440
Reset all packet, cipher and digest options to strict RFC-2440 Reset all packet, cipher and digest options to strict RFC-2440
behavior. Note that this is currently the same thing as @option{--openpgp}. behavior.
@item --rfc1991 @item --rfc1991
@opindex rfc1991 @opindex rfc1991
@ -1975,11 +1979,10 @@ a message that PGP 2.x will not be able to handle. Note that `PGP
2.x' here means `MIT PGP 2.6.2'. There are other versions of PGP 2.x 2.x' here means `MIT PGP 2.6.2'. There are other versions of PGP 2.x
available, but the MIT release is a good common baseline. available, but the MIT release is a good common baseline.
This option implies @option{--rfc1991 --disable-mdc --no-force-v4-certs This option implies @option{--rfc1991 --disable-mdc
--no-sk-comment --escape-from-lines --force-v3-sigs --no-ask-sig-expire --no-force-v4-certs --no-sk-comment --escape-from-lines
--no-ask-cert-expire --cipher-algo IDEA --digest-algo MD5 --force-v3-sigs --cipher-algo IDEA --digest-algo MD5 --compress-algo
--compress-algo 1}. It also disables @option{--textmode} when ZIP}. It also disables @option{--textmode} when encrypting.
encrypting.
@item --pgp6 @item --pgp6
@opindex pgp6 @opindex pgp6
@ -1991,7 +1994,7 @@ compression algorithms none and ZIP. This also disables
does not understand signatures made by signing subkeys. does not understand signatures made by signing subkeys.
This option implies @option{--disable-mdc --no-sk-comment This option implies @option{--disable-mdc --no-sk-comment
--escape-from-lines --force-v3-sigs --no-ask-sig-expire}. --escape-from-lines --force-v3-sigs}.
@item --pgp7 @item --pgp7
@opindex pgp7 @opindex pgp7
@ -2709,10 +2712,11 @@ standard. In particular, GnuPG implements many of the optional parts
of the standard, such as the SHA-512 hash, and the ZLIB and BZIP2 of the standard, such as the SHA-512 hash, and the ZLIB and BZIP2
compression algorithms. It is important to be aware that not all compression algorithms. It is important to be aware that not all
OpenPGP programs implement these optional algorithms and that by OpenPGP programs implement these optional algorithms and that by
forcing their use via the @option{--cipher-algo}, @option{--digest-algo}, forcing their use via the @option{--cipher-algo},
@option{--cert-digest-algo}, or @option{--compress-algo} options in GnuPG, it is @option{--digest-algo}, @option{--cert-digest-algo}, or
possible to create a perfectly valid OpenPGP message, but one that @option{--compress-algo} options in GnuPG, it is possible to create a
cannot be read by the intended recipient. perfectly valid OpenPGP message, but one that cannot be read by the
intended recipient.
There are dozens of variations of OpenPGP programs available, and each There are dozens of variations of OpenPGP programs available, and each
supports a slightly different subset of these optional algorithms. supports a slightly different subset of these optional algorithms.