diff options
| author | Werner Koch <wk@gnupg.org> | 2023-03-31 09:31:02 +0200 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2023-03-31 09:35:07 +0200 |
| commit | 4b9346492e3f66caf73c9128ad15c614ae74b1bf (patch) | |
| tree | 7c11d4a644952311454faf8192837d6b8f357342 /doc/DETAILS | |
| parent | agent: New option --restricted for PRESET_PASSPHRASE. (diff) | |
| download | gnupg2-4b9346492e3f66caf73c9128ad15c614ae74b1bf.tar.xz gnupg2-4b9346492e3f66caf73c9128ad15c614ae74b1bf.zip | |
gpgsm: Remove conditional compilation for older libksba versions.
* sm/sign.c (add_signed_attribute): Return an error because the option
--attribute is not yet working.
--
We require libskba 1.6 anyway.
Diffstat (limited to 'doc/DETAILS')
| -rw-r--r-- | doc/DETAILS | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/doc/DETAILS b/doc/DETAILS index 4c1e9b67c..eee640a01 100644 --- a/doc/DETAILS +++ b/doc/DETAILS @@ -1695,6 +1695,7 @@ Description of some debug flags: - RFC-1750 :: Randomness Recommendations for Security - RFC-1991 :: PGP Message Exchange Formats (obsolete) - RFC-2144 :: The CAST-128 Encryption Algorithm + - RFC-2253 :: UTF-8 String Representation of Distinguished Names. - RFC-2279 :: UTF-8, a transformation format of ISO 10646 - RFC-2440 :: OpenPGP (obsolete). - RFC-3156 :: MIME Security with Pretty Good Privacy (PGP). @@ -1813,3 +1814,27 @@ Description of some debug flags: it is also possible to set them direct: Use a "=" character directly followed by a combination of "a" (for authentication), "s" (for signing), or "c" (for certification). + +** extendedKeyUsage and keyUsage in gpgsm + +This table describes how the extended KeyUsage masks the KeyUsage. + + | ExtKeyUsage | Valid KeyUsages | + |-----------------+------------------| + | serverAuth | digitalSignature | + | | keyEncipherment | + | | keyAgreement | + |-----------------+------------------| + | clientAuth | digitalSignature | + | | keyAgreement | + |-----------------+------------------| + | codeSigning | digitalSignature | + |-----------------+------------------| + | emailProtection | digitalSignature | + | | nonRepudiation | + | | keyEncipherment | + | | keyAgreement | + |-----------------+------------------| + | timeStamping | digitalSignature | + | | nonRepudiation | + |-----------------+------------------| |