initial commit

diff --git a/.gitignore.d/gnupg b/.gitignore.d/gnupg
new file mode 100644 (file)
index 0000000..03368b0
--- /dev/null
+++ b/.gitignore.d/gnupg
@@ -0,0 +1,9 @@
+*
+!/.gnupg
+!/.gnupg/dirmngr.conf
+!/.gnupg/.gitignore
+!/.gnupg/gpg-agent.conf
+!/.gnupg/gpg.conf
+!/.gnupg/scdaemon.conf
+!/.gnupg/sshcontrol
+!/.gnupg/trustlist.txt

diff --git a/.gnupg/.gitignore b/.gnupg/.gitignore
new file mode 100644 (file)
index 0000000..3f70984
--- /dev/null
+++ b/.gnupg/.gitignore
@@ -0,0 +1,13 @@
+*~
+/openpgp-revocs.d
+/private-keys-v1.d
+/crls.d
+/pubring.gpg
+/pubring.kbx
+/trustdb.gpg
+/tofu.db
+/random_seed
+/reader_?.status
+/ownertrust-export.txt
+/.#lk0x.*
+/trustlist.txt

diff --git a/.gnupg/dirmngr.conf b/.gnupg/dirmngr.conf
new file mode 100644 (file)
index 0000000..c9532a8
--- /dev/null
+++ b/.gnupg/dirmngr.conf
@@ -0,0 +1 @@
+use-tor

diff --git a/.gnupg/gpg-agent.conf b/.gnupg/gpg-agent.conf
new file mode 100644 (file)
index 0000000..f5aaa18
--- /dev/null
+++ b/.gnupg/gpg-agent.conf
@@ -0,0 +1,6 @@
+default-cache-ttl 3600
+max-cache-ttl 86400
+enable-ssh-support
+no-allow-external-cache
+#debug-level guru
+#log-file /tmp/gpg-agent.log

diff --git a/.gnupg/gpg.conf b/.gnupg/gpg.conf
new file mode 100644 (file)
index 0000000..e052e66
--- /dev/null
+++ b/.gnupg/gpg.conf
@@ -0,0 +1,38 @@
+charset utf-8
+no-greeting
+default-key 2ccb26bc5c49bc221f20794255c9882d999bbcc4
+encrypt-to 2ccb26bc5c49bc221f20794255c9882d999bbcc4
+escape-from-lines
+with-fingerprint
+keyid-format long
+no-emit-version
+no-comments
+lock-once
+allow-secret-key-import
+no-auto-check-trustdb
+ask-cert-level
+default-cert-level 2
+use-agent
+export-options export-clean
+default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
+#personal-digest-preferences SHA512 SHA384 SHA256 SHA224 RIPEMD160
+#personal-cipher-preferences AES256 AES192 AES TWOFISH BLOWFISH
+#personal-compress-preferences ZIP ZLIB BZIP2 Uncompressed
+cert-digest-algo SHA512
+keyserver hkp://jirk5u4osbsr34t5.onion
+keyserver-options auto-key-retrieve
+keyserver-options include-revoked
+keyserver-options include-subkeys
+keyserver-options no-honor-keyserver-url
+keyserver-options honor-pka-record
+#keyserver-options no-try-dns-srv
+verify-options show-policy-url
+verify-options show-notations
+#verify-options show-photos
+cert-policy-url http://martin-krafft.net/gpg/cert-policy/55c9882d999bbcc4/201412051354?sha512sum=a5f417ebe563ed63cc3bbc4b14da4983e30d8ada7b2ba94b6de5e7a74bee6ab55c6ca307e163c33a6bf242e8ce4ca5fe99a271dd3b41626d3b4a10203a5c7225
+sig-policy-url http://martin-krafft.net/gpg/sig-policy/55c9882d999bbcc4/201101241125?sha512sum=1cad96fd27d3233f53e22849533648107e5ee8d5be655251d74c8f1c5c3bc42f2304fa515150f7bd4dd05e9819924f049513ee9962ca71709f81d94515852bd8
+list-options show-policy-urls
+list-options show-notations
+list-options show-uid-validity
+
+# vim:tw=0:ft=gpg

diff --git a/.gnupg/scdaemon.conf b/.gnupg/scdaemon.conf
new file mode 100644 (file)
index 0000000..c063c30
--- /dev/null
+++ b/.gnupg/scdaemon.conf
@@ -0,0 +1,3 @@
+#debug-level guru
+#log-file /tmp/scdaemon.log
+card-timeout 60

diff --git a/.gnupg/sshcontrol b/.gnupg/sshcontrol
new file mode 100644 (file)
index 0000000..7994ed9
--- /dev/null
+++ b/.gnupg/sshcontrol
@@ -0,0 +1,13 @@
+# List of allowed ssh keys.  Only keys present in this file are used
+# in the SSH protocol.  The ssh-add tool may add new entries to this
+# file to enable them; you may also add them manually.  Comment
+# lines, like this one, as well as empty lines are ignored.  Lines do
+# have a certain length limit but this is not serious limitation as
+# the format of the entries is fixed and checked by gpg-agent. A
+# non-comment line starts with optional white spaces, followed by the
+# keygrip of the key given as 40 hex digits, optionally followed by a
+# caching TTL in seconds, and another optional field for arbitrary
+# flags.   Prepend the keygrip with an '!' mark to disable it.
+# RSA key added on: 2017-06-08 10:46:21
+# MD5 Fingerprint:  36:5e:9e:bc:0c:22:68:d5:2c:c1:74:52:9a:e0:ea:45
+DECBA6F44E10111A890244EA3EE526EA4F005F91 0