Added gpg-agent.conf to disable the gnupg scdaemon

This fixes an issue where smartcards, such a Yubikey, would cause the
keyring to fail locally signing, thus also failing to verify signed
packages.

Signed-off-by: Eric Renfro <psi-jack@linux-help.org>
Signed-off-by: Allan McRae <allan@archlinux.org>
This commit is contained in:
Eric Renfro via pacman-dev 2018-02-27 08:27:49 -05:00 committed by Allan McRae
parent 3e619ccffe
commit 0565cebfc3

View file

@ -210,6 +210,12 @@ initialize() {
add_gpg_conf_option "$conffile" 'lock-never' add_gpg_conf_option "$conffile" 'lock-never'
add_gpg_conf_option "$conffile" 'keyserver-options' 'timeout=10' add_gpg_conf_option "$conffile" 'keyserver-options' 'timeout=10'
# gpg-agent.conf
agent_conffile="${PACMAN_KEYRING_DIR}/gpg-agent.conf"
[[ -f $agent_conffile ]] || touch "$agent_conffile"
chmod 644 "$agent_conffile"
add_gpg_conf_option "$agent_conffile" 'disable-scdaemon'
# set up a private signing key (if none available) # set up a private signing key (if none available)
if [[ $(secret_keys_available) -lt 1 ]]; then if [[ $(secret_keys_available) -lt 1 ]]; then
generate_master_key generate_master_key