DIRMNGR(8) (NAME) dirmngr - GnuPG (SYNOPSIS) dirmngr [ ] (DESCRIPTION) dirmngr (CRL) (OCSP) OpenPGP (keyservers) GnuPG . . GnuPG dirmngr OpenPGP . (CRL) X.509 X.509 OCSP . Dirmngr gpg gpgsm gpg-connect-agent . (COMMANDS) . --version (). . --help, -h . . --dump-options . . --server (stdin). . . --daemon . dirmngr GnuPG . dirmngr gpgconf --launch dirmngr . --supervised (stderr) . . --list-crls () CRL (stdout). . --load-crl file Dirmngr CRL file . Dirmngr (CA) . --call-dirmngr loadcrl filename gpgsm gpgsm dirmngr . --fetch-crl url dirmngr CRL url . . dirmngr-client dirmngr . --shutdown Dirmngr . . --flush CRL Dirmngr . () CRL . (OPTIONS) --options --homedir . --options file file . `dirmngr.conf' . --homedir dir dir. . `.gnupg' GNUPGHOME . . -v --verbose . dirmngr -vv . --log-file file file. . `socket://' . --compatibility-flags flags . flags OR . "none" . "help" . --faked-system-time epoch epoch . epoch ISO ( "20070924T154812") . --debug-level level . level : none . . basic . . advanced . . expert . . guru . . . . . --debug flags . OR flags C ( 0x0042) . "help" . . --debug-all --debug=0xffffffff --tls-debug level TLS level. TLS . --debug-wait n n (PID) . (debugger) . --disable-check-own-socket dirmngr . . -s --sh -c --csh Bourne C-shell. SHELL . --force CRL . --use-tor --no-use-tor --use-tor Dirmngr GnuPG <<>> (Tor mode) . . --use-tor dirmngr . --no-use-tor . dirmngr . SOCKS 9050 9150 --no-use-tor . --standard-resolver DNS . . DNS <> . <> . --recursive-resolver (recursive resolver) (stub resolver). --resolver-timeout n (timeout) DNS N . . --connect-timeout n --connect-quick-timeout n HTTP TCP N . --quick Assuan . . . . --listen-backlog n . . --allow-version-check Dirmngr https://versions.gnupg.org . . --query-swdb gpgconf . : gpg-connect-agent --dirmngr 'loadswdb --force' /bye --keyserver name name . gpg . name (URI) : `scheme:[//]keyservername[:port]` (scheme) : "hkp" HTTP "ldap" LDAP. GnuPG . . . --keyserver-options gpg . . DNS (round- robin) . (.onion) Dirmngr . . dirmngr hkps://keys.openpgp.org . none . . GnuPG https://keyserver.ubuntu.com . /usr/share/doc/gpgconf/NEWS.Debian.gz . (Active Directory) ldap:/// name . LDAP name ldaps://ldap.example.com . BaseDN . : ( .. ) --ldapserver . : keyserver ldap:ldap.example.com::uid=USERNAME,ou=GnuPG Users,dc=example,dc=com:PASSWORD::starttls URL name : keyserver ldaps://ldap.example.com/????bindname=uid=USERNAME%2Cou=GnuPG%20Users%2Cdc=example%2Cdc=com,password=PASSWORD '%2C' . USERNAME PASSWORD 'dc' LDAP . ( ) ldaps ( .. "ldaps" STARTTLS ). AD gpgNtds=1 bindname password . --nameserver ipaddr << >> Dirmngr DNS . 8.8.8.8 . IP ( IPv6 IPv4) ipaddr . --disable-ipv4 --disable-ipv6 IPv4 IPv6. --disable-ldap LDAP. --disable-http HTTP. --ignore-http-dp CRL CRL ( DP) URL CRL . DP . HTTP DP . --ignore-ldap-dp --ignore-http-dp LDAP . DP . --ignore-ocsp-service-url URL OCSP . (responder) . --honor-http-proxy `http_proxy' HTTP . . --http-proxy host[:port] host port HTTP. --honor-http-proxy `http_proxy' (override) . --ldap-proxy host[:port] host port LDAP. port ( LDAP) . LDAP . --only-ldap-proxy <<>> LDAP --ldap-proxy . "proxy" dirmngr LDAP . --ldapserverlist-file file LDAP CRL X.509 . file `dirmngr_ldapservers.conf' . LDAP : hostname:port:username:password:base_dn:flags `#' () . UTF-8 . Latin-1 . ( ). ([ gpgconf (percent-escaped) .]) --ldapserver spec LDAP CRL X.509 . `dirmngr_ldapservers.conf' ( --ldapserverlist-file) . `dirmngr_ldapservers.conf' --ldapserver . spec LDAP : hostname:port:username:password:base_dn:flags: ldap: ( URL LDAP ). flags : plain : TLS . starttls STARTTLS . ldaptls LDAP TLS . ntds LDAP . areconly LDAP A AAAA . URL ldaps:// STARTTLS LDAP-over-TLS. --ldaptimeout secs (query) LDAP . . . --add-servers dirmngr CRL CRL . . CRL ldapserverlist . Dirmngr CRL CRL . dirmngr CRL --add-servers . (Caveat emptor): (DoS) . LDAP LDAP . --allow-ocsp OCSP . OCSP . --ocsp-responder url url OCSP . --ocsp-signer . --ocsp-signer fpr|file fpr OCSP. . (~) . : `HOME' . file "./" . . FILE SHA-1 . (#) . --ocsp-max-clock-skew n OCSP . ( ) . --ocsp-max-period n thisUpdate . ( ) . --ocsp-current-period n OCSP NEXT_UPDATE . ( ) . --max-replies n n . . --ignore-cert-extension oid oid . oid 2.5.29.3. . (critical) OID . . --ignore-crl-extension oid oid CRL. oid . CRL OID . . --ignore-cert fpr|file fpr. . . : `HOME' . file "./" . SHA-1 . (#) . . --hkp-cacert file file TLS hkps ( TLS). PEM .pem file . . (~) . hkp-cacert dirmngr (CA) . (EXAMPLES) OpenPGP dirmngr . API . gpg-connect-agent --dirmngr 'keyserver --hosttable' /bye : gpg-connect-agent --dirmngr 'keyserver --dead pgpkeys.bnd.de' /bye keyserver : gpg-connect-agent --dirmngr 'help keyserver' /bye (FILES) Dirmngr : dirmngr . ( [option --homedir] ). dirmngr.conf dirmngr . . SIGHUP . ( [option --options] ). . /etc/gnupg/trusted-certs (Root CA) CRL OCSP . dirmngr . DER `.crt' `.der' . dirmngr SIGHUP . X.509 . dirmngr ( gpgsm) extra-certs ( ) . OCSP --ocsp-signer OCSP . /etc/gnupg/extra-certs . dirmngr ( gpgsm) . CA OCSP . . DER `.crt' `.der' . ~/.gnupg/crls.d CRL . `crls.d' dirmngr . TLS CRL . (Root CA) : (System) . . ROOT CA . : `/etc/ssl/ca-bundle.pem' `/etc/ssl/certs/ca-certificates.crt' `/etc/pki/tls/cert.pem' `/usr/local/share/certs/ca-root-nss.crt' `/etc/ssl/cert.pem'. GnuPG GnuPG `/etc/gnupg/trusted-certs' CRL . OpenPGP (OpenPGP keyserver) OpenPGP hkp-cacert . OpenPGP (OpenPGP keyserver pool) `/usr/share/gnupg/gnupg/sks-keyservers.netCA.pem' . hkps.pool.sks-keyservers.net ( `hkps://keys.gnupg.net') . gpgsm Root CA `trustlist.txt' . dirmngr . (NOTES) `~/.gnupg/dirmngr.conf' : log-file ~/dirmngr.log verbose . OCSP : allow-ocsp GnuPG dirmngr dirmngr : gpgconf --kill dirmngr dirmngr : gpg-connect-agent --dirmngr HELP HELP . (SIGNALS) dirmngr kill . : SIGHUP CRL . . . : gpgconf --reload dirmngr SIGTERM . . : gpgconf --kill dirmngr SIGINT . SIGUSR1 () . (SEE ALSO) gpgsm(1) dirmngr-client(1) Texinfo . GnuPG info info gnupg . gnupg DIRMNGR(8)