summaryrefslogtreecommitdiff
path: root/.gnupg
diff options
context:
space:
mode:
authorSean Whitton <spwhitton@spwhitton.name>2022-12-05 10:15:09 -0700
committerSean Whitton <spwhitton@spwhitton.name>2022-12-05 22:34:30 -0700
commit5605040517be0e0b13b9009defff9c4fb4ff055f (patch)
treeb68025718f64c0c71baea10a9e15d346d403b220 /.gnupg
parent0d76f161631860a467d9178d243b31712c126ad5 (diff)
downloaddotfiles-5605040517be0e0b13b9009defff9c4fb4ff055f.tar.gz
update and tidy gpg & dirmngr configuration
Diffstat (limited to '.gnupg')
-rw-r--r--.gnupg/gpg.conf20
1 files changed, 4 insertions, 16 deletions
diff --git a/.gnupg/gpg.conf b/.gnupg/gpg.conf
index 6352d548..89d75235 100644
--- a/.gnupg/gpg.conf
+++ b/.gnupg/gpg.conf
@@ -1,12 +1,6 @@
-no-greeting
default-key 8DC2487E51ABDD90B5C4753F0F56D0553B6D411B
default-recipient-self
-#encrypt-to some-key-id
-keyserver-options no-honor-keyserver-url
-#keyserver-options no-try-dns-srv
keyserver-options include-revoked
-# not needed with gpg 2.1 and can break duplicity
-#use-agent
verify-options show-primary-uid-only
keyid-format 0xlong
with-fingerprint
@@ -14,14 +8,8 @@ list-options show-uid-validity
verify-options show-uid-validity
personal-cipher-preferences AES256 AES192 AES CAST5
-personal-digest-preferences SHA512 SHA384 SHA256 SHA224
-cert-digest-algo SHA512
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
-# see "Configure mutt to use Debian keyrings for verification" in
-# SmallTasks.org for why these are commented out atm
-#keyring /usr/share/keyrings/debian-archive-keyring.gpg
-#keyring /usr/share/keyrings/debian-keyring.gpg
-#keyring /usr/share/keyrings/debian-maintainers.gpg
-#keyring /usr/share/keyrings/debian-nonupload.gpg
-#keyring /usr/share/keyrings/debian-role-keys.gpg
+# default-preference-list now has SHA512 first upstream.
+# These two are the defaults on Debian, but only thanks to a Debian patch.
+cert-digest-algo SHA512
+personal-digest-preferences SHA512 SHA384 SHA256 SHA224