X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=subdir_files%2F.gnupg%2Fgpg.conf;h=8d728b276f076febef7b0728aac3c01356d8cd13;hb=f0a35267f28e274ef3c2f63ffc20a26ca864e37c;hp=730369def06ac853cc539070941b7a21d44a13b1;hpb=8c9f3c9c69a1f76d8ffba1343fc0ab308fb4661a;p=distro-setup diff --git a/subdir_files/.gnupg/gpg.conf b/subdir_files/.gnupg/gpg.conf index 730369d..8d728b2 100644 --- a/subdir_files/.gnupg/gpg.conf +++ b/subdir_files/.gnupg/gpg.conf @@ -6,11 +6,30 @@ keyserver-options auto-key-retrieve # start gpg agent on login use-agent + # standard short key ids are easy to collide # https://security.stackexchange.com/questions/84280/short-openpgp-key-ids-are-insecure-how-to-configure-gnupg-to-use-long-key-ids-i # https://evil32.com/ # another option is 0xshort keyid-format 0xlong -# iank@fsf.org -default-key B125F60B7B287FF6A2B7DF8F170AF0E2954295DF \ No newline at end of file + +default-key B125F60B7B287FF6A2B7DF8F170AF0E2954295DF + +# financial key +#default-key 0xFB40960C541A7D1F + +# note, i did this so that gpg-agent would not hold open the .gnupg dir. +# so I could unmount the filesystem which holds the .gnupg dir while +# running gpg-agent. +# also, symlinking things like keys in the .gnupg dir is a recipe +# for trouble +# https://askubuntu.com/questions/777900/how-to-configure-gnupgs-s-gpg-agent-socket-location + +# rm -f ~/.gnupg/S.gpg-agent +# echo -e "%Assuan%\nsocket=${HOME}/gpg-agent-socket/s" > ~/.gnupg/S.gpg-agent +# # this is also in my conflink scrpt: +# install -d -m700 ~/gpg-agent-socket +# and in /etc/X11/Xsession.d/01iank +# install -o iank -g iank -d -m700 /home/iank/gpg-agent-socket +# because something keeps deleting that directory