@ifset gpgtwoone macro not working in gpg.texi?
Daniel Kahn Gillmor
dkg at fifthhorseman.net
Fri Oct 25 17:16:00 CEST 2013
I don't think @ifset gpgtwoone is being evaluated properly in gpg.texi
(though i don't know why). I'm using debian, and have both gpg (1.4.15)
and gpg2 (2.0.22) installed.
gpg(1) says:
--try-secret-key name
For hidden recipients GPG needs to know the keys to use
for trial decryption. The key set with --default-key is
always tried first, but this is often not sufficient.
This option allows to set more keys to be used for trial
decryption. Although any valid user-id specification may
be used for name it makes sense to use at least the long
keyid to avoid ambiguities. Note that gpg-agent might pop
up a pinentry for a lot keys to do the trial decryption.
If you want to stop all further trial decryption you may
use close-window button instead of the cancel button.
But the argument doesn't work in these versions:
0 dkg at alice:~$ gpg --try-secret-key 'Daniel Kahn Gillmor <dkg at fifthhorseman.net>' < tmp/x.gpg
gpg: Invalid option "--try-secret-key"
2 dkg at alice:~$ gpg2 --try-secret-key 'Daniel Kahn Gillmor <dkg at fifthhorseman.net>' < tmp/x.gpg
gpg: invalid option "--try-secret-key"
2 dkg at alice:~$
Looking in the source, i see that the documentation is supposed to be
wrapped in an "@ifset gpgtwoone" in doc/gpg.texi. The same is true for
--with-keygrip -- it shows up in the manpage output.
Interestingly, "@ifclear gpgtwoone" is also evaluating to true, because
the export-secret-subkeys documentation contains the reference to
--simple-sk-checksum:
--export-secret-subkeys
Same as --export, but exports the secret keys instead.
This is normally not very useful and a security risk. The
second form of the command has the special property to
render the secret part of the primary key useless; this is
a GNU extension to OpenPGP and other implementations can
not be expected to successfully import such a key. See
the option --simple-sk-checksum if you want to import
such an exported key with an older OpenPGP implementation.
Any ideas what might be going wrong in the documentation generation
process?
--dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 965 bytes
Desc: not available
URL: </pipermail/attachments/20131025/df5bf669/attachment.sig>
More information about the Gnupg-devel
mailing list