diff options
author | Werner Koch <wk@gnupg.org> | 2019-08-22 16:37:31 +0200 |
---|---|---|
committer | Werner Koch <wk@gnupg.org> | 2019-08-22 16:38:27 +0200 |
commit | d3f5d8544fdb43082ff34b106122bbf0619a0ead (patch) | |
tree | 3e4a6c85e8a564fff126c8eda61f4c8f883eea7b /doc/gpg.texi | |
parent | gpg: Use modern spelling for the female salutation. (diff) | |
download | gnupg2-d3f5d8544fdb43082ff34b106122bbf0619a0ead.tar.xz gnupg2-d3f5d8544fdb43082ff34b106122bbf0619a0ead.zip |
gpg: Extend --quick-gen-key for creating keys from a card.
* g10/keygen.c (parse_key_parameter_part): Add arg R_KEYGRIP and
support the special algo "card".
(parse_key_parameter_string): Add args R_KEYGRIP and R_SUBKEYGRIP.
Handle the "card" algo. Adjust callers.
(parse_algo_usage_expire): Add arg R_KEYGRIP.
(quickgen_set_para): Add arg KEYGRIP and put it into the parameter
list.
(quick_generate_keypair): Handle algo "card".
(generate_keypair): Also handle the keygrips as returned by
parse_key_parameter_string.
(ask_algo): Support ed25519 from a card.
--
Note that this allows to create a new OpenPGP key from an initialized
OpenPGP card or from any other supported cards. It has been tested
with the TCOS Netkey card. Right now a stub file for the cards might
be needed; this can be achieved by running "gpgsm --learn" with the
card plugged in.
Example:
gpg --quick-gen-key foo@example.org card
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'doc/gpg.texi')
-rw-r--r-- | doc/gpg.texi | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi index 212defe0c..5a2d8768a 100644 --- a/doc/gpg.texi +++ b/doc/gpg.texi @@ -683,6 +683,15 @@ supplied passphrase is used for the new key and the agent does not ask for it. To create a key without any protection @code{--passphrase ''} may be used. +To create an OpenPGP key from the keys available on the currently +inserted smartcard, the special string ``card'' can be used for +@var{algo}. If the card features an encryption and a signing key, gpg +will figure them out and creates an OpenPGP key consisting of the +usual primary key and one subkey. This works only with certain +smartcards. Note that the interactive @option{--full-gen-key} command +allows to do the same but with greater flexibility in the selection of +the smartcard keys. + Note that it is possible to create a primary key and a subkey using non-default algorithms by using ``default'' and changing the default parameters using the option @option{--default-new-key-algo}. |