Re: Disable keyboxd system-wide?

2023-12-07 Thread Werner Koch via Gnupg-users
On Thu,  7 Dec 2023 12:07, Conrad Hoffmann said:

> Thanks a lot, that did the trick. I only got to an empty
> /etc/gnupg/common.conf, but was not yet aware of the [ignore] syntax,
> very useful.

There is also a

--8<---cut here---start->8---
[force]
some-option
[-force]
--8<---cut here---end--->8---

Which uses the option but ignore them in the ~/.gnupg conf files.

FWIW, you can also do things like

--8<---cut here---start->8---
# Options to handle embedded keys
[getreg flag \Software\GNU\GnuPG:AutoKeyImport]
[if $flag != 0]
  auto-key-import
[fi]
[getreg flag \Software\GNU\GnuPG:IncludeKeyBlock]
[if $flag != 0]
  include-key-block
[fi]
--8<---cut here---end--->8---

To read values from the Windows Registry or with getenv from the
environment.  Another hack is this:

--8<---cut here---start->8---
# From 2024-01-01 on we require at least rsa3000
[if $_epoch >= 1704067200 ]
  min-rsa-length 3000
[fi]
--8<---cut here---end--->8---



Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Disable keyboxd system-wide?

2023-12-07 Thread Conrad Hoffmann via Gnupg-users

On 12/7/23 09:29, Werner Koch wrote:
> Hi!
>
> On Wed,  6 Dec 2023 12:29, Conrad Hoffmann said:
>> it on. But as temporary workaround, I would be interested if there is
>> a way to disable keyboxd system-wide (as opposed to
>> ~/.gnupg/common.conf), so unsuspecting new users do not run into this?
>
> If you put this
>
> --8<---cut here---start->8---
> [ignore]
> use-keyboxd
> [-ignore]
> --8<---cut here---end--->8---
>
> int /etc/gnupg/common.conf the use-keyboxd option in the
> ~/.gnupg/common.conf file should be ignored.

Thanks a lot, that did the trick. I only got to an empty 
/etc/gnupg/common.conf, but was not yet aware of the [ignore] syntax, 
very useful.


Cheers,
Conrad

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Disable keyboxd system-wide?

2023-12-07 Thread Werner Koch via Gnupg-users
Hi!

On Wed,  6 Dec 2023 12:29, Conrad Hoffmann said:
> it on. But as temporary workaround, I would be interested if there is
> a way to disable keyboxd system-wide (as opposed to
> ~/.gnupg/common.conf), so unsuspecting new users do not run into this?

If you put this

--8<---cut here---start->8---
[ignore]
use-keyboxd
[-ignore]
--8<---cut here---end--->8---

int /etc/gnupg/common.conf the use-keyboxd option in the 
~/.gnupg/common.conf file should be ignored.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users