git: 5ffcb5c257 - main - Committer's guide: Review gpg.conf options

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Sergio Carlavilla Delgado <carlavilla_at_FreeBSD.org>
Date: Thu, 07 Sep 2023 17:42:38 UTC
The branch main has been updated by carlavilla:

URL: https://cgit.FreeBSD.org/doc/commit/?id=5ffcb5c257b63b96356f85b9f93d4623f4f11757

commit 5ffcb5c257b63b96356f85b9f93d4623f4f11757
Author:     Matteo Riondato <matteo@FreeBSD.org>
AuthorDate: 2023-09-07 17:41:00 +0000
Commit:     Sergio Carlavilla Delgado <carlavilla@FreeBSD.org>
CommitDate: 2023-09-07 17:41:00 +0000

    Committer's guide: Review gpg.conf options
    
    Discussed by email with philip@
    
    Changed the original patch to add the 'link' macro
    
    PR:             262174
---
 .../content/en/articles/committers-guide/_index.adoc         | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/documentation/content/en/articles/committers-guide/_index.adoc b/documentation/content/en/articles/committers-guide/_index.adoc
index b2b1e4da4e..dfdd674457 100644
--- a/documentation/content/en/articles/committers-guide/_index.adoc
+++ b/documentation/content/en/articles/committers-guide/_index.adoc
@@ -124,18 +124,14 @@ For those who do not yet have an OpenPGP key, or need a new key to meet FreeBSD
 [[pgpkeys-create-steps]]
 [.procedure]
 ====
-. Install [.filename]#security/gnupg#. Enter these lines in [.filename]#~/.gnupg/gpg.conf# to set minimum acceptable defaults:
+. Install [.filename]#security/gnupg#. Enter these lines in [.filename]#~/.gnupg/gpg.conf# to set minimum acceptable defaults for signing and new key preferences (see the link:https://www.gnupg.org/documentation/manuals/gnupg/GPG-Options.html[GnuPG options documentation] for more details):
 +
 [.programlisting]
 ....
-fixed-list-mode
-keyid-format 0xlong
+# Sorted list of preferred algorithms for signing (strongest to weakest).
 personal-digest-preferences SHA512 SHA384 SHA256 SHA224
-default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 BZIP2 ZLIB ZIP Uncompressed
-verify-options show-uid-validity
-list-options show-uid-validity
-sig-notation issuer-fpr@notations.openpgp.fifthhorseman.net=%g
-cert-digest-algo SHA512
+# Default preferences for new keys
+default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 CAMELLIA256 AES192 CAMELLIA192 AES CAMELLIA128 CAST5 BZIP2 ZLIB ZIP Uncompressed
 ....
 . Generate a key:
 +