aboutsummaryrefslogtreecommitdiffstats
path: root/doc/gpg.texi
diff options
context:
space:
mode:
authorWerner Koch <[email protected]>2021-04-25 18:03:07 +0000
committerWerner Koch <[email protected]>2021-04-25 18:03:07 +0000
commit100037ac0f558e8959fc065d4703c85c2962489e (patch)
tree67bbdbb9102b4c8b1701fbb054280b64f25af184 /doc/gpg.texi
parentscd:p15: Fix last commit and improve D-TRUST detection. (diff)
downloadgnupg-100037ac0f558e8959fc065d4703c85c2962489e.tar.gz
gnupg-100037ac0f558e8959fc065d4703c85c2962489e.zip
gpg: Auto import keys specified with --trusted-keys.
* g10/getkey.c (get_pubkey_with_ldap_fallback): New. * g10/trustdb.c (verify_own_keys): Use it.
Diffstat (limited to 'doc/gpg.texi')
-rw-r--r--doc/gpg.texi12
1 files changed, 6 insertions, 6 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi
index b4997731f..4d7654ec7 100644
--- a/doc/gpg.texi
+++ b/doc/gpg.texi
@@ -1702,13 +1702,13 @@ claim" signatures are always accepted.
@item --trusted-key @var{long key ID or fingerprint}
@opindex trusted-key
-Assume that the specified key (which must be given
-as a full 8 byte key ID, a 20 byte, or 32 byte fingerprint)
-is as trustworthy as one of
-your own secret keys. This option is useful if you
-don't want to keep your secret keys (or one of them)
+Assume that the specified key (which should be given as fingerprint)
+is as trustworthy as one of your own secret keys. This option is
+useful if you don't want to keep your secret keys (or one of them)
online but still want to be able to check the validity of a given
-recipient's or signator's key.
+recipient's or signator's key. If the given key is not locally
+available but an LDAP keyserver is configured the missing key is
+imported from that server.
@item --trust-model @{pgp|classic|tofu|tofu+pgp|direct|always|auto@}
@opindex trust-model