===================
GnuPG Configuration
===================

Client
======

Configuration Locations
-----------------------

GnuPG knows the following configurations locations:

* **Local:** ``~/.gnupg/gpg.conf``

Configuration
-------------

View user IDs seperat from keys
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   fixed-list-mode

Display long IDs
~~~~~~~~~~~~~~~~

.. code-block:: bash

   keyid-format 0xlong

Display fingerprints
~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   with-fingerprint

Display UIDs
~~~~~~~~~~~~

.. code-block:: bash

   list-options show-uid-validity
   verify-options show-uid-validity

Don't display introductionary message
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   no-greeting

Set default keyserver
~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   sudo wget https://sks-keyservers.net/sks-keyservers.netCA.pem -O /etc/ssl/private/sks-keyservers.netCA.pem

.. code-block:: bash

   keyserver hkps://hkps.pool.sks-keyservers.net
   keyserver-options ca-cert-file=/etc/ssl/private/sks-keyservers.netCA.pem

Fetch keys automatically from keyserver
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   keyserver-options auto-key-retrieve

Use strong digests for new keys
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 BZIP2 ZLIB ZIP Uncompressed

Use strong digests for signatures
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   cert-digest-algo SHA512

Use strong digests for recipients
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   personal-digest-preferences SHA512 SHA384 SHA256 SHA224

Set a default key
~~~~~~~~~~~~~~~~~

.. code-block:: bash

   FIXME underlined and italic
   default-key *KEY_ID*

Server
======

Configuration
-------------

Avoid using any remote key servers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.. code-block:: bash

   keyserver-options no-honor-keyserver-url