Using "Modern" GnuPG ==================== As of version 2.1.11-7+exp1, the gnupg package is provided by the "modern" version of GnuPG. This means: * supporting daemons are auto-launched as needed * all access to secret key material is handled by gpg-agent * all smartcard access is handled by scdaemon * all network access is handled by dirmngr * PGPv3 keys are no longer supported * secret keys are no longer stored in $GNUPGHOME/secring.gpg, but instead in $GNUPGHOME/private-keys-v1.d/ * public keyrings are stored in keybox format (~/.gnupg/pubring.kbx) by default for new users. Upgrading users will continue to use pubring.gpg until they decide to explicitly convert. Converting an existing installation ----------------------------------- If you have an existing GnuPG homedir from "classic" GnuPG, secret keys should be migrated automatically upon the first run of the "modern" version. If you have any secret keys that are stored only in a smartcard, after your first use of "modern" gpg you should insert the card and run: gpg --card-status (see https://bugs.debian.org/795881) Public keys will not be automatically migrated from pubring.gpg to pubring.kbx, however. If you want to migrate your public keyring, you can use a script like /usr/bin/migrate-pubring-from-classic-gpg -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>, Mon, 18 Apr 2016 19:08:36 -0400