diff options
| author | Werner Koch <[email protected]> | 2019-07-01 13:14:59 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2019-07-01 13:23:23 +0000 |
| commit | adb120e663fc5e78f714976c6e42ae233c1990b0 (patch) | |
| tree | 0e3df1cd79ac5d77abac88011100a0659845e1e4 /doc/gpg.texi | |
| parent | gpg: Make read_block in import.c more flexible. (diff) | |
| download | gnupg-adb120e663fc5e78f714976c6e42ae233c1990b0.tar.gz gnupg-adb120e663fc5e78f714976c6e42ae233c1990b0.zip | |
gpg: New import and keyserver option "self-sigs-only"
* g10/options.h (IMPORT_SELF_SIGS_ONLY): New.
* g10/import.c (parse_import_options): Add option "self-sigs-only".
(read_block): Handle that option.
--
This option is intended to help against importing keys with many bogus
key-signatures. It has obvious drawbacks and is not a bullet-proof
solution because a self-signature can also be faked and would be
detected only later.
GnuPG-bug-id: 4591
Signed-off-by: Werner Koch <[email protected]>
(cherry picked from commit 15a425a1dfe60bd976b17671aa8e3d9aed12e1c0)
Diffstat (limited to 'doc/gpg.texi')
| -rw-r--r-- | doc/gpg.texi | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi index 74862e526..b00d23af6 100644 --- a/doc/gpg.texi +++ b/doc/gpg.texi @@ -2327,6 +2327,14 @@ opposite meaning. The options are: on the keyring. This option is the same as running the @option{--edit-key} command "clean" after import. Defaults to no. + @item self-sigs-only + Accept only self-signatures while importing a key. All other + key-signatures are skipped at an early import stage. This option + can be used with @code{keyserver-options} to mitigate attempts to + flood a key with bogus signatures from a keyserver. The drawback is + that all other valid key-signatures, as required by the Web of Trust + are also not imported. + @item repair-keys After import, fix various problems with the keys. For example, this reorders signatures, and strips duplicate |