| author | Alan Coopersmith <Alan.Coopersmith@Oracle.COM> |
| Tue, 15 Nov 2016 15:00:17 -0800 | |
| changeset 7332 | 50a475baa0cd |
| parent 3533 | 0b8107a40da7 |
| permissions | -rw-r--r-- |
|
3533
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
1 |
# When verifying a signature made from a subkey, ensure that the cross |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
2 |
# certification "back signature" on the subkey is present and valid. |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
3 |
# This protects against a subtle attack against subkeys that can sign. |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
4 |
# Defaults to --no-require-cross-certification. However for new |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
5 |
# installations it should be enabled. |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
6 |
require-cross-certification |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
7 |
|
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
8 |
keyserver hkp://keys.gnupg.net |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
9 |
keyserver-options honor-http-proxy auto-key-retrieve |