On Thu,  7 Dec 2023 12:07, Conrad Hoffmann said:

> Thanks a lot, that did the trick. I only got to an empty
> /etc/gnupg/common.conf, but was not yet aware of the [ignore] syntax,
> very useful.

There is also a

--8<---------------cut here---------------start------------->8---
[force]
some-option
[-force]
--8<---------------cut here---------------end--------------->8---

Which uses the option but ignore them in the ~/.gnupg conf files.

FWIW, you can also do things like

--8<---------------cut here---------------start------------->8---
# Options to handle embedded keys
[getreg flag \Software\GNU\GnuPG:AutoKeyImport]
[if $flag != 0]
  auto-key-import
[fi]
[getreg flag \Software\GNU\GnuPG:IncludeKeyBlock]
[if $flag != 0]
  include-key-block
[fi]
--8<---------------cut here---------------end--------------->8---

To read values from the Windows Registry or with getenv from the
environment.  Another hack is this:

--8<---------------cut here---------------start------------->8---
# From 2024-01-01 on we require at least rsa3000
[if $_epoch >= 1704067200 ]
  min-rsa-length 3000
[fi]
--8<---------------cut here---------------end--------------->8---



Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

Attachment: openpgp-digital-signature.asc
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to