From 6983fd131f648ba4acd57b266de9868911874d14 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Mon, 19 Oct 2015 13:12:24 +0200 Subject: dirmngr: Make --use-tor work - still leaks DNS. * dirmngr/dirmngr.c (set_tor_mode): New. (main, reread_configuration): Call it. * dirmngr/http.c (http_raw_connect, send_request): Check whether TOR mode is enabled if the FORCE_TOR flag is given. -- The patch for http.c is a sanity check because tor mode is anyway global as long as the Assuan socket wrappers are used. Signed-off-by: Werner Koch --- doc/dirmngr.texi | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'doc') diff --git a/doc/dirmngr.texi b/doc/dirmngr.texi index 18e818975..d1d421194 100644 --- a/doc/dirmngr.texi +++ b/doc/dirmngr.texi @@ -238,9 +238,11 @@ useful for debugging. @item --use-tor @opindex use-tor -This options is not yet functional! It will eventually switch GnuPG -into a TOR mode to route all network access via TOR (an anonymity -network). +This option switches Dirmngr and thus GnuPG into ``TOR mode'' to route +all network access via TOR (an anonymity network). WARNING: As of now +this still leaks the DNS queries; e.g. to lookup the hosts in a +keyserver pool. Certain other features are disabled if this mode is +active. @item --keyserver @code{name} @opindex keyserver -- cgit v1.2.3