0

I am not sure whether GPG supports more than 1 keyring. Is there standard practice for configuration with 2 keyrings - one for users keys and other for system keys (read only for regular user)? If possible with priority for system keyring, i.e. GPG tries to find a key in system keyring first, then user's. In the same time, if new key is added it goes in user's keyring. I know this can be done with keyring path as command line option but expect keyrings can be defined in configuration file and located automatically. At least, is there default file location for system keyring?

And one additional question - is there new version of PGP (at least for Windows) or only GPG is supported?

i486
  • 101

1 Answers1

1

I know this can be done with keyring path as command line option but expect keyrings can be defined in configuration file and located automatically.

If you look at the GnuPG manual, you will see that it has a configuration file (gpg.conf) and that all of its options are exactly like command-line options. You can list as many keyring statements in gpg.conf as you want.

At least, is there default file location for system keyring?

There isn't. (Not sure if it would make much sense.) Though a template gpg.conf can be pre-created for all new users, and GnuPG has an "addgpghome" tool to deploy one for existing users as well.

is there new version of PGP (at least for Windows) or only GPG is supported?

The original "PGP for Windows" (the one that came before GnuPG) still exists – it is now known as "Symantec Encryption Desktop", earlier "Symantec PGP Desktop". Sold by Broadcom, it seems.

Linux has Sequoia as a new OpenPGP implementation. Thunderbird's built-in OpenPGP support uses RNP. Sequoia has its own sq CLI, and both Sequoia and RNP have versions of the standardized "SOP" CLI for script usage.

grawity
  • 17,092