File: gnupg.info,  Node: Input and Output,  Next: CMS Options,  Prev: Certificate Options,  Up: GPGSM Options

5.2.3 Input and Output
----------------------

'--armor'
'-a'
     Create PEM encoded output.  Default is binary output.

'--base64'
     Create Base-64 encoded output; i.e.  PEM without the header lines.

'--assume-armor'
     Assume the input data is PEM encoded.  Default is to autodetect the
     encoding but this is may fail.

'--assume-base64'
     Assume the input data is plain base-64 encoded.

'--assume-binary'
     Assume the input data is binary encoded.

'--input-size-hint N'
     This option can be used to tell GPGSM the size of the input data in
     bytes.  N must be a positive base-10 number.  It is used by the
     '--status-fd' line "PROGRESS" to provide a value for "total" if
     that is not available by other means.

'--p12-charset NAME'
     'gpgsm' uses the UTF-8 encoding when encoding passphrases for
     PKCS#12 files.  This option may be used to force the passphrase to
     be encoded in the specified encoding NAME.  This is useful if the
     application used to import the key uses a different encoding and
     thus will not be able to import a file generated by 'gpgsm'.
     Commonly used values for NAME are 'Latin1' and 'CP850'.  Note that
     'gpgsm' itself automagically imports any file with a passphrase
     encoded to the most commonly used encodings.

'--default-key USER_ID'
     Use USER_ID as the standard key for signing.  This key is used if
     no other key has been defined as a signing key.  Note, that the
     first '--local-users' option also sets this key if it has not yet
     been set; however '--default-key' always overrides this.

'--local-user USER_ID'
'-u USER_ID'
     Set the user(s) to be used for signing.  The default is the first
     secret key found in the database.

'--recipient NAME'
'-r'
     Encrypt to the user id NAME.  There are several ways a user id may
     be given (*note how-to-specify-a-user-id::).

'--output FILE'
'-o FILE'
     Write output to FILE.  The default is to write it to stdout.

'--with-key-data'
     Displays extra information with the '--list-keys' commands.
     Especially a line tagged 'grp' is printed which tells you the
     keygrip of a key.  This string is for example used as the file name
     of the secret key.  Implies '--with-colons'.

'--with-validation'
     When doing a key listing, do a full validation check for each key
     and print the result.  This is usually a slow operation because it
     requires a CRL lookup and other operations.

     When used along with '--import', a validation of the certificate to
     import is done and only imported if it succeeds the test.  Note
     that this does not affect an already available certificate in the
     DB. This option is therefore useful to simply verify a certificate.

'--with-md5-fingerprint'
     For standard key listings, also print the MD5 fingerprint of the
     certificate.

'--with-keygrip'
     Include the keygrip in standard key listings.  Note that the
     keygrip is always listed in '--with-colons' mode.

'--with-secret'
     Include info about the presence of a secret key in public key
     listings done with '--with-colons'.

'--no-pretty-dn'
     By default gpgsm prints distinguished names (DNs) like the Issuer
     or Subject in a more readable format (e.g.  using a well defined
     order of the parts).  However, this format can't be used as input
     strings.  This option reverts printing to standard RFC-2253 format
     and thus avoids the need to use -dump-cert or -with-colons to get
     the "real" name.