Beyond Linux® From Scratch (systemd 版) - Version r12.0-1055+

第4章 セキュリティ

GnuPG-2.4.3

GnuPG の概要

The GnuPG package is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described by several RFCs. GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and S/MIME.

[注記]

注記

LFS や依存パッケージが本ブックに示す最新安定バージョンでなかった場合には、BLFS 開発版においては、パッケージのビルドや処理実行が適切に行われないことがあります。

パッケージ情報

  • ダウンロード (HTTP): https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.4.3.tar.bz2

  • ダウンロード MD5 sum: e21ab42c629af80f19f813eeb61aa939

  • ダウンロードサイズ: 7.0 MB

  • 必要ディスク容量: 127 MB (with tests)

  • 概算ビルド時間: 0.7 SBU (with tests; using parallelism=4)

Additional Downloads

GnuPG 2 の依存パッケージ

必須

libassuan-2.5.6, libgcrypt-1.10.3, libksba-1.6.5, npth-1.6, OpenLDAP-2.6.6

推奨

GnuTLS-3.8.2 (required to communicate with keyservers using https or hkps protocol), pinentry-1.2.1 (本パッケージのほとんどの機能に対して実行時に必要)

任意

cURL-8.5.0, Fuse-3.16.2, ImageMagick-7.1.1-15 (for the convert utility, used for generating the documentation), libusb-1.0.26, an MTA, SQLite-3.44.2, texlive-20230313 (or install-tl-unx), fig2dev (for generating documentation), and GNU adns

GnuPG のインストール

First, fix a compatibility issue with emacs: 

patch -Np1 -i ../gnupg-2.4.3-emacs-1.patch

以下のコマンドを実行して GnuPG 2 をビルドします。 

mkdir build &&
cd    build &&

../configure --prefix=/usr           \
             --localstatedir=/var    \
             --sysconfdir=/etc       \
             --docdir=/usr/share/doc/gnupg-2.4.3 &&
make &&

makeinfo --html --no-split -I doc -o doc/gnupg_nochunks.html ../doc/gnupg.texi &&
makeinfo --plaintext       -I doc -o doc/gnupg.txt           ../doc/gnupg.texi &&
make -C doc html

texlive-20230313 をインストールしていて、種々のフォーマットのドキュメントを生成したい場合は、以下のコマンドを実行します。 （ps フォーマットに対しては fig2dev が必要になります。） 

make -C doc pdf ps

ビルド結果をテストする場合は make check を実行します。

Now, as the root user: 

make install &&

install -v -m755 -d /usr/share/doc/gnupg-2.4.3/html            &&
install -v -m644    doc/gnupg_nochunks.html \
                    /usr/share/doc/gnupg-2.4.3/html/gnupg.html &&
install -v -m644    ../doc/*.texi doc/gnupg.txt \
                    /usr/share/doc/gnupg-2.4.3 &&
install -v -m644    doc/gnupg.html/* \
                    /usr/share/doc/gnupg-2.4.3/html

種々のフォーマットのドキュメントを生成した場合は root ユーザーになり以下のコマンドを実行します。 

install -v -m644 doc/gnupg.{pdf,dvi,ps} \
                 /usr/share/doc/gnupg-2.4.3

コマンド説明

mkdir build && cd build: the Gnupg2 developers recommend to build the package in a dedicated directory.

--docdir=/usr/share/doc/gnupg-2.4.3: This switch changes the default docdir to /usr/share/doc/gnupg-2.4.3.

--enable-all-tests: This switch allows more tests to be run with make check.

--enable-g13: This switch enables building the g13 program.

パッケージ構成

インストールプログラム: addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13 (optional), gpg-agent, gpg-card, gpg-connect-agent, gpg, gpgconf, gpgparsemail, gpgscm, gpgsm, gpgsplit, gpgtar, gpgv, gpg-wks-client, gpg-wks-server, kbxutil, watchgnupg
インストールライブラリ: なし
インストールディレクトリ: /usr/share/doc/gnupg-2.4.3, /usr/share/gnupg

Short Descriptions

addgnupghome

is used to create and populate a user's ~/.gnupg directories

applygnupgdefaults

is a wrapper script used to run gpgconf with the --apply-defaults parameter on all user's GnuPG home directories

dirmngr

is a tool that takes care of accessing the OpenPGP keyservers

dirmngr-client

is a tool to contact a running dirmngr and test whether a certificate has been revoked

g13

is a tool to create, mount or unmount an encrypted file system container (optional)

gpg-agent

is a daemon used to manage secret (private) keys independently from any protocol. It is used as a backend for gpg and gpgsm as well as for a couple of other utilities

gpg-card

is a tool to manage smart cards and tokens

gpg-connect-agent

is a utility used to communicate with a running gpg-agent

gpg

is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a tool used to provide digital encryption and signing services using the OpenPGP standard

gpgconf

is a utility used to automatically and reasonably safely query and modify configuration files in the ~/.gnupg home directory. It is designed not to be invoked manually by the user, but automatically by graphical user interfaces

gpgparsemail

is a utility currently only useful for debugging. Run it with --help for usage information

gpgscm

executes the given scheme program or spawns an interactive shell

gpgsm

is a tool similar to gpg used to provide digital encryption and signing services on X.509 certificates and the CMS protocol. It is mainly used as a backend for S/MIME mail processing

gpgsplit

splits an OpenPGP message into packets

gpgtar

is a tool to encrypt or sign files into an archive

gpgv

is a verify only version of gpg

gpg-wks-client

is a client for the Web Key Service protocol

gpg-wks-server

provides a server for the Web Key Service protocol

kbxutil

is used to list, export and import Keybox data

watchgnupg

is used to listen to a Unix Domain socket created by any of the GnuPG tools