X-Git-Url: https://git.saurik.com/apt.git/blobdiff_plain/002b1bc46b18e9d309d337ddb15a6ccdfb6c9dde..ab59037f9e62bf7ab7eb859c26cd19882d17ee04:/doc/apt-key.8.xml?ds=sidebyside
diff --git a/doc/apt-key.8.xml b/doc/apt-key.8.xml
index 41628aff6..57200b1ed 100644
--- a/doc/apt-key.8.xml
+++ b/doc/apt-key.8.xml
@@ -13,7 +13,7 @@
&apt-email;
&apt-product;
- 2012-06-09T00:00:00Z
+ 2016-07-07T00:00:00Z
@@ -36,6 +36,15 @@
by apt to authenticate packages. Packages which have been
authenticated using these keys will be considered trusted.
+
+ Note that if usage of apt-key is desired the additional
+ installation of the GNU Privacy Guard suite (packaged in
+ gnupg) is required. For this reason alone the programmatic
+ usage (especially in package maintainerscripts!) is strongly discouraged.
+ Further more the output format of all commands is undefined and can and does
+ change whenever the underlying commands change. apt-key will
+ try to detect such usage and generates warnings on stderr in these cases.
+ Commands
@@ -53,6 +62,12 @@
verified to belong to the owner of the repositories they claim to be for
otherwise the &apt-secure; infrastructure is completely undermined.
+
+ Instead of using this command a keyring can be placed directly in the
+ /etc/apt/trusted.gpg.d/ directory with a descriptive name
+ (same rules for filename apply as for &apt-conf; files) and "gpg"
+ as file extension.
+
@@ -89,28 +104,17 @@
-
+ ,
- List trusted keys.
+ List trusted keys with fingerprints.
-
-
-
-
-
- List fingerprints of trusted keys.
-
-
-
-
-
@@ -124,17 +128,21 @@
-
+ (deprecated)
-
Update the local keyring with the archive keyring and remove from
the local keyring the archive keys which are no longer valid.
The archive keyring is shipped in the archive-keyring package of your
distribution, e.g. the &keyring-package; package in &keyring-distro;.
-
-
+
+ Note that a distribution does not need to and in fact should not use
+ this command any longer and instead ship keyring files in the
+ /etc/apt/trusted.gpg directory directly as this
+ avoids a dependency on gnupg and it is easier to manage
+ keys by simply adding and removing files for maintainers and users alike.
+
@@ -177,18 +185,6 @@
&file-trustedgpg;
- /etc/apt/trustdb.gpg
- Local trust database of archive keys.
-
-
- &keyring-filename;
- Keyring of &keyring-distro; archive trusted keys.
-
-
- &keyring-removed-filename;
- Keyring of &keyring-distro; archive removed trusted keys.
-
-