X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=subdir_files%2F.gnupg%2Fgpg.conf;h=f45b4ee6cea240fcf9d3668578d1bf5db53d9ba7;hb=a83e91030893a823da5f057d6b848dbac7593f01;hp=730369def06ac853cc539070941b7a21d44a13b1;hpb=8c9f3c9c69a1f76d8ffba1343fc0ab308fb4661a;p=distro-setup diff --git a/subdir_files/.gnupg/gpg.conf b/subdir_files/.gnupg/gpg.conf index 730369d..f45b4ee 100644 --- a/subdir_files/.gnupg/gpg.conf +++ b/subdir_files/.gnupg/gpg.conf @@ -6,11 +6,25 @@ keyserver-options auto-key-retrieve # start gpg agent on login use-agent + # standard short key ids are easy to collide # https://security.stackexchange.com/questions/84280/short-openpgp-key-ids-are-insecure-how-to-configure-gnupg-to-use-long-key-ids-i # https://evil32.com/ # another option is 0xshort keyid-format 0xlong -# iank@fsf.org -default-key B125F60B7B287FF6A2B7DF8F170AF0E2954295DF \ No newline at end of file +default-key B125F60B7B287FF6A2B7DF8F170AF0E2954295DF + +default-key 0xFB40960C541A7D1F + +# note, i did this so that gpg-agent would not hold open the .gnupg dir. +# so I could unmount the filesystem which holds the .gnupg dir while +# running gpg-agent. +# also, symlinking things like keys in the .gnupg dir is a recipe +# for trouble +# https://askubuntu.com/questions/777900/how-to-configure-gnupgs-s-gpg-agent-socket-location + +# rm -f ~/.gnupg/S.gpg-agent +# echo -e "%Assuan%\nsocket=${HOME}/gpg-agent-socket/s" > ~/.gnupg/S.gpg-agent +# # this is also in my conflink scrpt: +# install -d -m700 ~/gpg-agent-socket