The base URL of the key repository (usually with a trailing
.RB ` / ').
Typically, this will be something like
-.RB http://www.distorted.org.uk/vpn/ .
+.RB ` http://www.distorted.org.uk/vpn/ '.
No default.
.TP
.B repos-base
The basename for the repository archive. Default is
-.BR tripe-keys.tar.gz .
+.RB ` tripe-keys.tar.gz '.
.TP
.B sig-base
The basename template for repository signatures. Default is
-.BR tripe-keys.sig-<SEQ> .
+.RB ` tripe-keys.sig-<SEQ> '.
The
.RB ` <SEQ> '
portion, if any, is replaced by the sequence number of the key which
and
.IR sig-file s.
Default is
-.B ": run upload hook"
+.RB ` ": run upload hook" '
which does nothing.
.SS "Crypto parameters"
.TP
or
.B ec
(elliptic curves). The default is
-.BR dh .
+.RB ` dh '.
.ne 9
.TP
.B kx-genalg
.TP
.B kx-expire
Expiry time for generated keys. Default is
-.BR "now + 1 year" .
+.RB ` "now + 1 year" '.
.TP
.B hash
Hashing algorithm to use. Default is
-.BR sha256 .
+.RB ` sha256 '.
.TP
.B bulk
The bulk crypto transform to use.
Default is
-.BR iiv .
+.RB ` iiv '.
.ne 8
.TP
.B mac
.TP
.B mgf
Mask-generation algorithm to use. Default is
-.IB hash -mgf \fR.
+.BI \fR` hash -mgf \fR'.
This is probably a good choice.
.ne 7
.TP
.TP
.B sig-fresh
Oldest time we should consider a signed archive to be fresh. Default is
-.BR always ,
+.RB ` always ',
meaning that all signatures are fresh.
.TP
.B sig-expire
Expiry time for master signing key. Default is
-.BR forever .
+.RB ` forever '.
.TP
.B fingerprint-hash
Hash function to use for key fingerprinting. Default is
end in a
.RB ` / '
character. Unexpected files in this directory will be removed by the
-.B tripe-keys upload
+.RB ` "tripe-keys upload" '
command. No default.
.TP
.B repos-file
.TP
.B conf-file
Filename for local repository configuration file. Default is
-.IB basedir /tripe-keys.conf \fR.
+.BI \fR` basedir /tripe-keys.conf \fR'.
.TP
.B kx-warn-days
The