summaryrefslogtreecommitdiffstats
path: root/doc/gpg.texi
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2019-08-22 16:37:31 +0200
committerWerner Koch <wk@gnupg.org>2019-08-22 16:38:27 +0200
commitd3f5d8544fdb43082ff34b106122bbf0619a0ead (patch)
tree3e4a6c85e8a564fff126c8eda61f4c8f883eea7b /doc/gpg.texi
parentgpg: Use modern spelling for the female salutation. (diff)
downloadgnupg2-d3f5d8544fdb43082ff34b106122bbf0619a0ead.tar.xz
gnupg2-d3f5d8544fdb43082ff34b106122bbf0619a0ead.zip
gpg: Extend --quick-gen-key for creating keys from a card.
* g10/keygen.c (parse_key_parameter_part): Add arg R_KEYGRIP and support the special algo "card". (parse_key_parameter_string): Add args R_KEYGRIP and R_SUBKEYGRIP. Handle the "card" algo. Adjust callers. (parse_algo_usage_expire): Add arg R_KEYGRIP. (quickgen_set_para): Add arg KEYGRIP and put it into the parameter list. (quick_generate_keypair): Handle algo "card". (generate_keypair): Also handle the keygrips as returned by parse_key_parameter_string. (ask_algo): Support ed25519 from a card. -- Note that this allows to create a new OpenPGP key from an initialized OpenPGP card or from any other supported cards. It has been tested with the TCOS Netkey card. Right now a stub file for the cards might be needed; this can be achieved by running "gpgsm --learn" with the card plugged in. Example: gpg --quick-gen-key foo@example.org card Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'doc/gpg.texi')
-rw-r--r--doc/gpg.texi9
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi
index 212defe0c..5a2d8768a 100644
--- a/doc/gpg.texi
+++ b/doc/gpg.texi
@@ -683,6 +683,15 @@ supplied passphrase is used for the new key and the agent does not ask
for it. To create a key without any protection @code{--passphrase ''}
may be used.
+To create an OpenPGP key from the keys available on the currently
+inserted smartcard, the special string ``card'' can be used for
+@var{algo}. If the card features an encryption and a signing key, gpg
+will figure them out and creates an OpenPGP key consisting of the
+usual primary key and one subkey. This works only with certain
+smartcards. Note that the interactive @option{--full-gen-key} command
+allows to do the same but with greater flexibility in the selection of
+the smartcard keys.
+
Note that it is possible to create a primary key and a subkey using
non-default algorithms by using ``default'' and changing the default
parameters using the option @option{--default-new-key-algo}.