Skip to content

Fetch keys via HTTP, avoid dirmngr

paz requested to merge keyservers-directly into release-5.0

This implements fetching keys via HTTP (without dirmngr), and only use gpg for importing them. It also features looking up keys at a VKS keyserver (e.g. keys.openpgp.org) first, before looking them up at a SKS keyserver.

It adds a new dependency: (lib)curl. That is required by the networking library, which was chosen because it allows to specify socks-proxies (with which one can route traffic via TOR).

It's a breaking change because we drop a config option (keyserver) and also change the way how network requests can be influenced (no dirmngr.conf anymore but new config options).

Closes #361 (closed)

Merge request reports