aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWerner Koch <[email protected]>2018-08-29 13:04:44 +0000
committerWerner Koch <[email protected]>2018-08-29 13:05:26 +0000
commit2d700f2c6c1831d8a113b6cf4b8ca81db363b09a (patch)
treed5fe9bb957283cfd0893c9108fc9bd727601c4c5
parentgpg: Remove unused function get_pubkeys. (diff)
downloadgnupg-2d700f2c6c1831d8a113b6cf4b8ca81db363b09a.tar.gz
gnupg-2d700f2c6c1831d8a113b6cf4b8ca81db363b09a.zip
doc: Minor additions to the gpg man page
-- Includes a fix for GnuPG-bug-id: 3906 Signed-off-by: Werner Koch <[email protected]> (cherry picked from commit 420dc2b49ad816bdd27b40db45d900551c71476f)
Diffstat (limited to '')
-rw-r--r--doc/gpg.texi14
1 files changed, 10 insertions, 4 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi
index dc7e02171..3f8f6b9f4 100644
--- a/doc/gpg.texi
+++ b/doc/gpg.texi
@@ -675,6 +675,10 @@ supplied passphrase is used for the new key and the agent does not ask
for it. To create a key without any protection @code{--passphrase ''}
may be used.
+Note that it is possible to create a primary key and a subkey using
+non-default algorithms by using ``default'' and changing the default
+parameters using the option @option{--default-new-key-algo}.
+
@item --quick-set-expire @var{fpr} @var{expire} [*|@var{subfprs}]
@opindex quick-set-expire
With two arguments given, directly set the expiration time of the
@@ -702,7 +706,8 @@ and other ECC curves. For example the string ``rsa'' adds an RSA key
with the default key length; a string ``rsa4096'' requests that the
key length is 4096 bits. The string ``future-default'' is an alias
for the algorithm which will likely be used as default algorithm in
-future versions of gpg.
+future versions of gpg. To list the supported ECC curves the command
+@code{gpg --with-colons --list-config curve} can be used.
Depending on the given @var{algo} the subkey may either be an
encryption subkey or a signing subkey. If an algorithm is capable of
@@ -3304,13 +3309,14 @@ user.
@opindex override-session-key
Don't use the public key but the session key @var{string} respective
the session key taken from the first line read from file descriptor
-@var{fd}. The format of this string is the same as the one printed
-by @option{--show-session-key}. This option is normally not used but
+@var{fd}. The format of this string is the same as the one printed by
+@option{--show-session-key}. This option is normally not used but
comes handy in case someone forces you to reveal the content of an
encrypted message; using this option you can do this without handing
out the secret key. Note that using @option{--override-session-key}
may reveal the session key to all local users via the global process
-table.
+table. Often it is useful to combine this option with
+@option{--no-keyring}.
@item --ask-sig-expire
@itemx --no-ask-sig-expire