summaryrefslogtreecommitdiffstats
path: root/doc/gpg-agent.texi
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2019-03-06 17:58:39 +0100
committerWerner Koch <wk@gnupg.org>2019-03-06 17:58:39 +0100
commit91ae3e7fb66271691f6fe507262a62fc7e2663a3 (patch)
treeafc8a348aa4a1441c4a5b43b470e2e239346f947 /doc/gpg-agent.texi
parentgpgtar: Improve error messages. (diff)
downloadgnupg2-91ae3e7fb66271691f6fe507262a62fc7e2663a3.tar.xz
gnupg2-91ae3e7fb66271691f6fe507262a62fc7e2663a3.zip
agent: Re-introduce --enable-extended-key-format.
* agent/gpg-agent.c (oEnableExtendedKeyFormat): Re-introduce. (parse_rereadable_options): Handle it in a special way. * agent/protect.c (agent_protect): Be safe and set use_ocb only to 1 or 0. * tools/gpgconf-comp.c: Add --enable-extended-key-format again. -- This is required for backward compatible with profiles. Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'doc/gpg-agent.texi')
-rw-r--r--doc/gpg-agent.texi15
1 files changed, 9 insertions, 6 deletions
diff --git a/doc/gpg-agent.texi b/doc/gpg-agent.texi
index 770da17b0..d518c246b 100644
--- a/doc/gpg-agent.texi
+++ b/doc/gpg-agent.texi
@@ -585,16 +585,19 @@ local gpg-agent and use its private keys. This enables decrypting or
signing data on a remote machine without exposing the private keys to the
remote machine.
-@item --disable-extended-key-format
+@item --enable-extended-key-format
+@itemx --disable-extended-key-format
+@opindex enable-extended-key-format
@opindex disable-extended-key-format
Since version 2.3 keys are created in the extended private key format.
Changing the passphrase of a key will also convert the key to that new
format. This new key format is supported since GnuPG version 2.1.12
-and thus there should be no need to disable it. However, this options
-allows to revert to the old behaviour for new keys; be aware that keys
-are never migrated back to the old format. The advantage of the
-extended private key format is that it is text based and can carry
-additional meta data.
+and thus there should be no need to disable it. The disable option
+allows to revert to the old behavior for new keys; be aware that keys
+are never migrated back to the old format. However if the enable
+option has been used the disable option won't have an effect. The
+advantage of the extended private key format is that it is text based
+and can carry additional meta data.
@anchor{option --enable-ssh-support}
@item --enable-ssh-support