stm32_part1 More progress on first draft, admonition fixes

This commit is contained in:
Bastian de Byl
2020-02-12 23:07:44 -05:00
parent 4f3d51cb51
commit eb50ed1e5e
7 changed files with 125 additions and 26 deletions

View File

@@ -84,37 +84,37 @@ this via:
+ **Debian/Ubuntu, RHEL:** `sudo update-ca-certificates`
{{% admonition tip "CA Path" %}}
{{< admonition tip "CA Path" >}}
On my system the full path to the CA certs is:
- `/etc/ca-certificates/extracted/cadir/sks-keyservers.net_CA.pem`
{{% /admonition %}}
{{< /admonition >}}
Two following parameters should be added to your `~/.gnupg` configuration files:
### GnuPG Versions >2.1
{{% admonition note "gpg.conf" %}}
{{< admonition note "gpg.conf" >}}
```
keyserver hkps://hkps.pool.sks-keyservers.net
```
{{% /admonition %}}
{{< /admonition >}}
{{% admonition note "dirmngr.conf" %}}
{{< admonition note "dirmngr.conf" >}}
```
hkp-cacert /etc/ca-certificates/path/to/CA.pem
```
{{% /admonition %}}
{{< /admonition >}}
### GnuPG Versions <2.1
{{% admonition note "gpg.conf" %}}
{{< admonition note "gpg.conf" >}}
```
keyserver hkps://hkps.pool.sks-keyservers.net
keyserver-options ca-cert-file=/path/to/CA/sks-keyservers.netCA.pem
```
{{% /admonition %}}
{{< /admonition >}}
## *Optional* - Ensure keys refreshed through keyserver
To ensure no keys are pulled from insecure sources, or that an attacked would