GnuPG
Links
- The GNU Privacy Handbook: https://gnupg.org/gph/en/manual.html
- Man page: https://www.gnupg.org/documentation/manpage.html
- Options
- agent options: https://www.gnupg.org/documentation/manuals/gnupg/Agent-Options.html
- configuration options: https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html
- protocol specific options: https://www.gnupg.org/documentation/manuals/gnupg/OpenPGP-Options.html
- GnuPG files: https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration.html
- YubiKey-Guide: https://github.com/drduh/YubiKey-Guide
Commands
Keyserver Commands
- download key from keyserver:
gpg --recv-keys <key_id> - update all keys from keyserver:
gpg --refresh-keys - import key with all signatures:
gpg --recv-key --verbose --keyserver-options no-import-clean --keyserver-options no-self-sigs-only <key_id>
Get Key Infos
- list all keys:
gpg --list-keys - list all secret keys:
gpg --list-secret-keys
Key Card Commands (YubiKey)
gpg --card-edit- also see https://www.gnupg.org/howtos/card-howto/en/ch03s02.html
Keyserver Links
Mac install
- install with
brew install gnupg pinentry-mac - set
pinentry-program /opt/homebrew/bin/pinentry-macin~/.gnupg/gpg-agent.conf
Important Keys
- CAcert
A31D 4F81 EF4E BD07 B456 FA04 D2BB 0D01 65D0 FD58: http://www.cacert.org/index.php?id=3 - Pierre Schmitz (Arch Linux packager)
3E80 CA1A 8B89 F69C BA57 D98A 76A5 EF90 5444 9A5C: https://archlinux.org/download/ - Debian CD signing key:
DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B: https://www.debian.org/CD/verify - Tails:
A490 D0F4 D311 A415 3E2B B7CA DBB8 02B2 58AC D84F
Last modified February 17, 2023: add gpg key server links (36de5b2)