author | John Beck <John.Beck@Oracle.COM> |
Mon, 02 Mar 2015 16:15:04 -0800 | |
changeset 3898 | acd7f120a52a |
parent 3533 | 0b8107a40da7 |
permissions | -rw-r--r-- |
3533
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
1 |
# When verifying a signature made from a subkey, ensure that the cross |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
2 |
# certification "back signature" on the subkey is present and valid. |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
3 |
# This protects against a subtle attack against subkeys that can sign. |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
4 |
# Defaults to --no-require-cross-certification. However for new |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
5 |
# installations it should be enabled. |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
6 |
require-cross-certification |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
7 |
|
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
8 |
keyserver hkp://keys.gnupg.net |
0b8107a40da7
20183619 userland should support PGP signatures
Danek Duvall <danek.duvall@oracle.com>
parents:
diff
changeset
|
9 |
keyserver-options honor-http-proxy auto-key-retrieve |