Changeset 1255

Timestamp:

09/28/08 20:17:46 (2 months ago)

Author:

mbr

Message:

added GPG_NO_OPTIONS, GPG_NO_REQUIRE_PREFIX, and GPG_PATH access.conf vars

Files:

• fwknop/trunk/fwknopd.8 (modified) (1 diff)

fwknop/trunk/fwknopd.8

@@ -213 +213 @@
-.B /etc/fwknop/access.conf
-then fwknopd will default to using the /root/.gnupg directory for the server key(s).
+.TP
+.B GPG_NO_OPTIONS
+Make sure that GnuPG does not reference any options file when decrypting incoming
+SPA packets that have been encrypted with GnuPG by the fwknop client.
+.TP
+.B GPG_NO_REQUIRE_PREFIX
+This option controls whether the GnuPG 'hQ' prefix is added before base64 decoding
+and decrypting.  Normally this option is not needed, but if there appear to be
+communications issues between the fwknop client and the fwknopd server in GnuPG
+mode, then this option can be useful to ensure that encrypted SPA data is sent
+through the GnuPG decryption routine.  The 'hQ' prefix is a heuristic derived from
+the file 'magic' database for describing data encrypted with GnuPG, and the fwknop
+client normally strips this data from outgoing SPA packets (unless the
+--Include-gpg-prefix option is used).
+.TP
+.B GPG_PATH: <path>
+Specify a path to the gpg binary (commonly at /usr/bin/gpg).  This can be used to
+switch between gpg vs. gpg2, or provide a path to a custom compiled version of gpg
+for testing purposes.
-.TP
-.B FW_ACCESS_TIMEOUT: <seconds>