Package: gcaff
gcaffis a graphical tool for signing OpenPGP keys.  Its main
use case is for signing many keys at once, after a keysigning party
for example.Features include:display photo IDs and select for signingsign with multiple signing keys in one passchoose the certification level on a per-key basisemail each signature separately, only to the associated email
addressDifferences fromcaffgcaffis inspried bycaff, a command-line signing assistant.
Apart fromcaffbeing a CLI program andgcaffhaving a GUI,
there are some important differences:gcaffdoes not remove uids from keys.caffsends only the
uid that was signed to each email address.gcaffsends all
uids, but only one uid will have the new signature.gcaffsends signatures for photo uids or uids without an email
address toall email addresseson the key.  Signatures on
regular uids are sent to the corresponding email address only.gcaffhas no pinentry mechanism; users must have a workinggpg-agentto usegcaff.gcaffrequires the user to supply a file containing keys to be
signed; no keys are fetched from keyservers.Cryptographic concernsgcaffsigns keys using the SHA256 digest.  Future work could
allow users to choose a different digest for signing.  Patches are
welcome!Secret keys are never exportedfrom the GnuPG home directory,
however, the corresponding public keys are exported to a temporary
GnuPG keyring during the signing process.No keys in the user’s GnuPG home directory are modified during the
signing process.  Once signing is complete, all the signatures are
written to a file whose location is reported.  The user may
(manually) import keys from this file into her regular keyring.  A
future version could offer to perform this step for the user.
Contributions are welcome.DependenciesGnuPG and gpg-agentPython 2.7PyGTK >=2, <3a local mailer (SMTP), e.g. sendmailDebian / UbuntuInstall Python 2.7 and PyGTK in the normal way for your operating
system.  Note that on many systems PyGTK cannot be installed withpip.To install dependencies on a Debian or Ubuntu system (or other
systems using APT):sudo apt-get install gnupg gnupg-agent python-pip postfix python-gtk2Ifgnupg-agentwas not previously installed you will probably
need to log out and log in again to ensure thatgpg-agentis
running and the appropriate environment variables are set.During the postfix configuration dialog ensure you selectInternet
Siteas the “General type of mail configuration”.  If postfix is
not accepting mail you can run the configuration again:sudo dpkg-reconfigure postfixFedoraFedora 20 and later releases do not have an MTA installed by
default.  To install and configure:sudo yum install -y postfix
sudo systemctl start postfix
sudo systemctl enable postfixInstallationTo install for all users, on a Unix system:sudo pip install gcaffTo perform an installation to user site-packages:pip install gcaff --userEnsure that the user sitebin/directory is on thePATHif
installing to user site-packages.Usagegcaff --keyring keys-to-sign.ascLicensegcaffis free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.ContributingBug reports, general feedback, patches and translations are welcome.A list of desirable enhancements can be found in the fileTODO.rst.To submit a patch, please usegitsend-emailor generate a
pull/merge request.  Write awell formed commit message.  If your
patch is nontrivial, add a copyright notice (or, if appropriate,
update an existing notice) at the top of each file added or changed.