--server | run in server mode (foreground) | help |
--daemon | run in daemon mode (background) | help |
--list-crls | list the contents of the CRL cache | help |
--load-crl FILE | load CRL from FILE into cache | help |
--fetch-crl URL | fetch a CRL from URL | help |
--shutdown | shutdown the dirmngr | help |
--flush | flush the cache | help |
--no-detach | do not detach from the console | help |
-s, --sh | sh-style command output | help + man + man |
-c, --csh | Format the info output in daemon mode for use with the standard Bourne shell respective the C-shell. | help + man + man |
--options FILE | Reads configuration from file instead of from the default per-user configuration file. | help + man |
-v, --verbose | Outputs additional information while running. | help + man + man |
-q, --quiet | be somewhat more quiet | help |
--debug-level LEVEL | Select the debug level for investigating problems. | help + man |
--log-file FILE | Append all logging output to file. | help + man |
--allow-version-check | Allow Dirmngr to connect to https://versions.gnupg.org to get the list of current software versions. | help + man |
--max-replies N | Do not return more that n items in one query. | help + man |
--use-tor | route all network traffic via Tor | help + man |
--disable-http | Disable the use of HTTP to fetch CRLs. | help + man |
--ignore-http-dp | When looking for the location of a CRL, the to be tested certificate usually contains so called CRL Distribution Point (DP) entries which are URLs describing the way to access the CRL. | help + man |
--http-proxy URL | redirect all HTTP requests to URL | help |
--honor-http-proxy | If the environment variable ‘http_proxy’ has been set, use its value to access HTTP servers. | help + man |
--keyserver URL | Use name as your keyserver. | help + man |
--hkp-cacert FILE | Use the root certificates in file for verification of the TLS certificates used with hkps (keyserver access over TLS). | help + man |
--disable-ldap | Entirely disables the use of LDAP. | help + man |
--ignore-ldap-dp | This is similar to --ignore-http-dp but ignores entries using the LDAP scheme. | help + man |
--ldap-proxy HOST | use HOST for LDAP queries | help |
--only-ldap-proxy | Never use anything else but the LDAP "proxy" as configured with --ldap-proxy. | help + man |
--ldapserver SPEC | This is an alternative way to specify LDAP servers for CRL and X.509 certificate retrieval. | help + man |
--ldapserverlist-file FILE | Read the list of LDAP servers to consult for CRLs and X.509 certificates from file instead of the default per-user ldap server list file. | help + man |
--add-servers | This option makes dirmngr add any servers it discovers when validating certificates against CRLs to the internal list of servers to consult for certificates and CRLs. | help + man |
--ldaptimeout N | Specify the number of seconds to wait for an LDAP query before timing out. | help + man |
--allow-ocsp | This option enables OCSP support if requested by the client. | help + man |
--ignore-ocsp-service-url | Ignore all OCSP URLs contained in the certificate. | help + man |
--ocsp-responder URL | Use url as the default OCSP Responder if the certificate does not contain information about an assigned responder. | help + man |
--ocsp-signer FPR | Use the certificate with the fingerprint fpr to check the responses of the default OCSP Responder. | help + man |
--force | Enabling this option forces loading of expired CRLs; | help + man |
--homedir dir | Set the name of the home directory to dir. (in the manual page but not in --help) | man |
--compatibility-flags flags | Set compatibility flags to work around certain problems or to emulate bugs. (in the manual page but not in --help) | man |
--faked-system-time epoch | This option is only useful for testing; (in the manual page but not in --help) | man |
--debug flags | Set debug flags. (in the manual page but not in --help) | man |
--debug-all | Same as --debug=0xffffffff (in the manual page but not in --help) | man |
--tls-debug level | Enable debugging of the TLS layer at level. (in the manual page but not in --help) | man |
--debug-wait n | When running in server mode, wait n seconds before entering the actual processing loop and print the pid. (in the manual page but not in --help) | man |
--disable-check-own-socket | On some platforms dirmngr is able to detect the removal of its socket file and shutdown itself. (in the manual page but not in --help) | man |
--no-use-tor | The option --use-tor switches Dirmngr and thus GnuPG into Tor mode'' to route all network access via Tor (an anonymity network). (in the manual page but not in --help) | man |
--standard-resolver | This option forces the use of the system's standard DNS resolver code. (in the manual page but not in --help) | man |
--recursive-resolver | When possible use a recursive resolver instead of a stub resolver. (in the manual page but not in --help) | man |
--resolver-timeout n | Set the timeout for the DNS resolver to N seconds. (in the manual page but not in --help) | man |
--connect-timeout n | (in the manual page but not in --help) | man |
--connect-quick-timeout n | Set the timeout for HTTP and generic TCP connection attempts to N seconds. (in the manual page but not in --help) | man |
--listen-backlog n | Set the size of the queue for pending connections. (in the manual page but not in --help) | man |
--nameserver ipaddr | In Tor mode'' Dirmngr uses a public resolver via Tor to resolve DNS names. (in the manual page but not in --help) | man |
--disable-ipv4 | (in the manual page but not in --help) | man |
--disable-ipv6 | Disable the use of all IPv4 or IPv6 addresses. (in the manual page but not in --help) | man |
--ocsp-max-clock-skew n | The number of seconds a skew between the OCSP responder and them local clock is accepted. (in the manual page but not in --help) | man |
--ocsp-max-period n | Seconds a response is at maximum considered valid after the time given in the thisUpdate field. (in the manual page but not in --help) | man |
--ocsp-current-period n | The number of seconds an OCSP response is considered valid after the time given in the NEXT_UPDATE datum. (in the manual page but not in --help) | man |
--ignore-cert-extension oid | Add oid to the list of ignored certificate extensions. (in the manual page but not in --help) | man |
--ignore-crl-extension oid | Add oid to the list of ignored CRL extensions. (in the manual page but not in --help) | man |
--ignore-cert fpr|file | Entirely ignore certificates with the fingerprint fpr. (in the manual page but not in --help) | man |