aboutsummaryrefslogtreecommitdiff
path: root/gnupg
diff options
context:
space:
mode:
Diffstat (limited to 'gnupg')
-rw-r--r--gnupg/gpg-agent.conf2
-rw-r--r--gnupg/gpg.conf.mi548
-rw-r--r--gnupg/profile.d/gnupg.sh.mi53
3 files changed, 3 insertions, 50 deletions
diff --git a/gnupg/gpg-agent.conf b/gnupg/gpg-agent.conf
deleted file mode 100644
index c50602c5..00000000
--- a/gnupg/gpg-agent.conf
+++ /dev/null
@@ -1,2 +0,0 @@
-# Cache keys for two hours
-default-cache-ttl 7200
diff --git a/gnupg/gpg.conf.mi5 b/gnupg/gpg.conf.mi5
deleted file mode 100644
index 97726d20..00000000
--- a/gnupg/gpg.conf.mi5
+++ /dev/null
@@ -1,48 +0,0 @@
-# Retrieve certs automatically if possible
-auto-key-locate cert pka
-
-# Use SHA512 as the hash when making key signatures
-cert-digest-algo SHA512
-
-# Specify the hash algorithms to be used for new keys as available
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
-
-# In the absence of any other recipient, encrypt messages for myself
-default-recipient-self
-
-# Show complete dates and use proper column separation for --with-colon listing
-# mode
-fixed-list-mode
-
-# Use only fingerprints as key IDs
-keyid-format <% KEYID_FORMAT %>
-
-# Use a pool of servers which support HKPS (encrypted key retrieval)
-keyserver <% KEYSERVER %>
-
-# Retrieve keys automatically; check the keyserver port cert; use whichever
-# server is proffered from the pool
-keyserver-options auto-key-retrieve no-honor-keyserver-url
-
-# Include trust/validity for UIDs in listings
-list-options show-uid-validity
-
-# Suppress the copyright message
-no-greeting
-
-# Use SHA512 as my message digest, overriding GnuPG's efforts to use the lowest
-# common denominator in hashing algorithms
-personal-digest-preferences SHA512
-
-# Suppress a lot of output; sometimes I add --verbose to undo this
-quiet
-
-# Use the GPG agent for key management and decryption
-use-agent
-
-# Include trust/validity for UIDs when verifying signatures
-verify-options pka-lookups show-uid-validity
-
-# Assume "yes" is the answer to most questions, that is, don't keep asking me
-# to confirm something I've asked to be done
-yes
diff --git a/gnupg/profile.d/gnupg.sh.mi5 b/gnupg/profile.d/gnupg.sh.mi5
new file mode 100644
index 00000000..33a57dd0
--- /dev/null
+++ b/gnupg/profile.d/gnupg.sh.mi5
@@ -0,0 +1,3 @@
+# GPG key details
+GPG_KEYID=<% GPG_KEYID %>
+export GPG_KEYID