summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavid Sardari <d@duxsco.de>2023-04-21 13:39:53 +0200
committerMichał Górny <mgorny@gentoo.org>2023-04-22 18:07:12 +0200
commitd3c35b865f1800df33b7976c5a7c79e939e213b5 (patch)
treef6ae306711f7f0976cc7dcf58e57ab956f6a9c24
parent847cb37bf31fc3e75eb8145bf8f0a8589d0355b5 (diff)
downloadgemato-d3c35b865f1800df33b7976c5a7c79e939e213b5.tar.gz
openpgp: Use DNS resolver of OS
Signed-off-by: David Sardari <d@duxsco.de> Closes: https://github.com/projg2/gemato/pull/31 Signed-off-by: Michał Górny <mgorny@gentoo.org>
-rw-r--r--gemato/openpgp.py6
1 files changed, 6 insertions, 0 deletions
diff --git a/gemato/openpgp.py b/gemato/openpgp.py
index fb178af..4ede082 100644
--- a/gemato/openpgp.py
+++ b/gemato/openpgp.py
@@ -413,6 +413,12 @@ class IsolatedGPGEnvironment(SystemGPGEnvironment):
# honor user's http_proxy setting
honor-http-proxy
+# The default of "recursive-resolver" (see "man dirmngr") may cause
+# problems with corporate networks, where this is often prohibited.
+# It's better to setup the DNS resolver of your choice correctly
+# preferably with DNSSEC checks enabled and use the following setting:
+standard-resolver
+
# enable debugging, in case we needed it
log-file {os.path.join(self._home, 'dirmngr.log')}
debug-level guru