X-Git-Url: https://git.distorted.org.uk/~mdw/tripe/blobdiff_plain/0647ba7c7c989692ecd256674316fbf71ca76fed..67bb121fe7f962872421d0b8a16953ade26bfb43:/keys/tripe-keys.conf.5.in

diff --git a/keys/tripe-keys.conf.5.in b/keys/tripe-keys.conf.5.in
index 49e360d2..b6bc6eb6 100644
--- a/keys/tripe-keys.conf.5.in
+++ b/keys/tripe-keys.conf.5.in
@@ -117,6 +117,13 @@ default.  Usually set up automatically.
 Additional options for generating master keys.  Default is
 .RB ` -l '.
 .TP
+.I master-attrs
+Additional attributes to set on the master key,
+as
+.IB key = value
+pairs separated by spaces.
+Default is empty.
+.TP
 .I hk-master
 The fingerprint of the current master signing key.  No default.  Usually
 set up automatically.
@@ -141,6 +148,47 @@ or
 .B ec
 (elliptic curves).  The default is
 .BR dh .
+.ne 7
+.TP
+.I kx-genalg
+Key generation algorithm name to pass to
+.B "key add"
+when generating keys.
+Default depends on
+.I kx
+as follows.
+.TS
+center;
+| ci | ci |
+| lb | lb |.
+_
+kx	kx-genalg
+_
+dh	dh
+ec	ec
+_
+.TE
+.ne 7
+.TP
+.I kx-param-genalg
+Key generation algorithm name to pass to
+.B "key add"
+when generating the parameters key.
+Default depends on
+.I kx
+as follows.
+.TS
+center;
+| ci | ci |
+| lb | lb |.
+_
+kx	kx-param-genalg
+_
+dh	dh-param
+ec	ec-param
+_
+.TE
+.ne 7
 .TP
 .I kx-param
 Options to pass to
@@ -160,6 +208,14 @@ ec	\-Cnist-p256
 _
 .TE
 .TP
+.I kx-attrs
+Additional attributes to set on the parameters
+(and therefore copied to peer keys),
+as
+.IB key = value
+pairs separated by spaces.
+Default is empty.
+.TP
 .I kx-expire
 Expiry time for generated keys.  Default is
 .BR "now + 1 year" .
@@ -184,7 +240,7 @@ This is probably a good choice.
 .TP
 .I cipher
 Symmetric encryption scheme to use.  Default is
-.BR blowfish-cbc .
+.BR rijndael-cbc .
 .TP
 .I sig
 Signature scheme to use.  Must be one of those recognized by
@@ -201,6 +257,7 @@ if
 .I kx
 is
 .BR ec .
+.ne 10
 .TP
 .I sig-genalg
 Key-generation algorithm for signing key.  Default depends on
@@ -221,6 +278,7 @@ ecdsa	ec
 eckcdsa	ec
 _
 .TE
+.ne 8
 .TP
 .I sig-param
 Signature-key generation parameters.  Default depends on
@@ -262,7 +320,9 @@ Hash function to use for key fingerprinting.  Default is
 Local base directory for the repository files.  This probably ought to
 end in a
 .RB ` / '
-character.  No default.
+character.  Unexpected files in this directory will be removed by the
+.B tripe-keys upload
+command.  No default.
 .TP
 .I repos-file
 Filename for local repository tarball.  Default is the concatenation of