2 Use this custom program instead of "`gpg`" found on `$PATH` when
3 making or verifying a PGP signature. The program must support the
4 same command-line interface as GPG, namely, to verify a detached
5 signature, "`gpg --verify $signature - <$file`" is run, and the
6 program is expected to signal a good signature by exiting with
7 code 0, and to generate an ASCII-armored detached signature, the
8 standard input of "`gpg -bsau $key`" is fed with the contents to be
9 signed, and the program is expected to send the result to its
13 Specifies which key format to use when signing with `--gpg-sign`.
14 Default is "openpgp" and another possible value is "x509".
16 gpg.<format>.program::
17 Use this to customize the program used for the signing format you
18 chose. (see `gpg.program` and `gpg.format`) `gpg.program` can still
19 be used as a legacy synonym for `gpg.openpgp.program`. The default
20 value for `gpg.x509.program` is "gpgsm".
23 Specifies a minimum trust level for signature verification. If
24 this option is unset, then signature verification for merge
25 operations require a key with at least `marginal` trust. Other
26 operations that perform signature verification require a key
27 with at least `undefined` trust. Setting this option overrides
28 the required trust-level for all operations. Supported values,
29 in increasing order of significance: