# security/caff - The NetBSD Packages Collection

Various GnuPG related tools

    caff is a script that helps you in keysigning.  It takes a list of
    keyids on the command line, fetches them from a keyserver and calls
    GnuPG so that you can sign it.  It then mails each key to all its
    email addresses - only including the one UID that we send to in each
    mail.

    Features:
     * Easy to setup.
     * Attaches only the very UID that we send to in the mail.
     * Prunes the key from all signatures that are not self sigs and
       not done by you, thereby greatly reducing the size of mails.
     * Sends the mail encrypted if possible, will warn before sending
       unencrypted mail (sign only keys)
     * Creates proper PGP MIME messages.
     * Uses separate GNUPGHOME for all its operations.

    This package also provides a collection of PGP/GnuPG related scripts:
     * pgp-clean: removes all non-self signatures from key
     * pgp-fixkey: removes broken packets from keys
     * gpg-mailkeys: simply mail out a signed key to its owner
     * gpg-key2ps: generate PostScript file with fingerprint paper strips
     * gpglist: show who signed which of your UIDs
     * gpgsigs: annotates list of GnuPG keys with already done signatures
     * keylookup: ncurses wrapper around gpg --search

- Source version: `caff-2.11nb3`
- Maintainer: tonio AT NetBSD.org
- Website: https://packages.debian.org/sid/signing-party
- License: gnu-gpl-v2
- Package history: cvs, hg, git

## Build dependencies

pkgtools/mktools devel/automake devel/autoconf devel/gmake textproc/gsed lang/perl5 pkgtools/cwrappers

## Runtime dependencies

textproc/p5-Text-Template textproc/p5-Net-IDN-Encode mail/p5-MIME-tools security/p5-GnuPG-Interface misc/dialog security/gnupg2 lang/perl5

## Binary packages

OS | Architecture | Version
--- | --- | ---
NetBSD 10.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 10.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 10.0 | aarch64eb | caff-2.11nb3.tgz
NetBSD 10.0 | alpha | caff-2.11nb3.tgz
NetBSD 10.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 10.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 10.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 10.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 10.0 | i386 | caff-2.11nb3.tgz
NetBSD 10.0 | i386 | caff-2.11nb3.tgz
NetBSD 10.0 | powerpc | caff-2.11nb3.tgz
NetBSD 10.0 | powerpc | caff-2.11nb3.tgz
NetBSD 10.0 | powerpc | caff-2.11nb3.tgz
NetBSD 10.0 | sh3el | caff-2.11nb3.tgz
NetBSD 10.0 | sparc64 | caff-2.11nb3.tgz
NetBSD 10.0 | x86_64 | caff-2.11nb3.tgz
NetBSD 10.0 | x86_64 | caff-2.11nb3.tgz
NetBSD 11.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 11.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 11.0 | aarch64eb | caff-2.11nb3.tgz
NetBSD 11.0 | aarch64eb | caff-2.11nb3.tgz
NetBSD 11.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 11.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 11.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 11.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 11.0 | i386 | caff-2.11nb3.tgz
NetBSD 11.0 | i386 | caff-2.11nb3.tgz
NetBSD 11.0 | riscv64 | caff-2.11nb3.tgz
NetBSD 11.0 | riscv64 | caff-2.11nb3.tgz
NetBSD 11.0 | x86_64 | caff-2.11nb3.tgz
NetBSD 11.0 | x86_64 | caff-2.11nb3.tgz
NetBSD 9.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 9.0 | aarch64 | caff-2.11nb3.tgz
NetBSD 9.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 9.0 | earmv6hf | caff-2.11nb3.tgz
NetBSD 9.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 9.0 | earmv7hf | caff-2.11nb3.tgz
NetBSD 9.0 | i386 | caff-2.11nb3.tgz
NetBSD 9.0 | i386 | caff-2.11nb3.tgz
NetBSD 9.0 | powerpc | caff-2.11nb3.tgz
NetBSD 9.0 | x86_64 | caff-2.11nb3.tgz
NetBSD 9.0 | x86_64 | caff-2.11nb3.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

## Available build options

gnupg1
  Use GNU Privacy Guard (GnuPG) Version 1.x
gnupg2
  Use GNU Privacy Guard (GnuPG) Version 2.0

## Known vulnerabilities

(no vulnerabilities known)

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.

Problem reports, updates or suggestions for this package should be reported with send-pr.