diff options
| author | Werner Koch <[email protected]> | 2015-10-06 18:31:43 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2015-10-06 18:31:43 +0000 |
| commit | 9ac31f91b10059474da1c9580fb99e94278d4c11 (patch) | |
| tree | 04f6667ad289aa69cb2b0b1e0ef01f3eed398863 /doc | |
| parent | dirmngr: Addlow fetching keys using OpenPGP DANE (diff) | |
| download | gnupg-9ac31f91b10059474da1c9580fb99e94278d4c11.tar.gz gnupg-9ac31f91b10059474da1c9580fb99e94278d4c11.zip | |
gpg: Add new --auto-key-locate mechanism "dane".
* g10/call-dirmngr.c (gpg_dirmngr_dns_cert): Allow fetching via DANE.
* g10/keyserver.c (keyserver_import_cert): Add arg "dane_mode".
* g10/options.h (AKL_DANE): New.
* g10/getkey.c (get_pubkey_byname): Implement AKL_DANE.
(parse_auto_key_locate): Ditto.
--
To test this use
gpg --auto-key-locate clear,dane,local --locate-key -v [email protected]
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/gpg.texi | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi index 7d78e9e3e..980d32643 100644 --- a/doc/gpg.texi +++ b/doc/gpg.texi @@ -1463,6 +1463,10 @@ mechanisms, in the order they are to be tried: @item pka Locate a key using DNS PKA. + @item dane + Locate a key using DANE, as specified + in draft-ietf-dane-openpgpkey-05.txt. + @item ldap Using DNS Service Discovery, check the domain in question for any LDAP keyservers to use. If this fails, attempt to locate the key using the |