Problems with listing secret keys in GnuPG 1.2.1

Robert J. Hansen cortana at earthlink.net
Thu Jun 12 09:16:03 CEST 2003


The following are not cut-and-pastes; I had to manually copy down the
outputs.  As a result, I may have a minor transcription error or two here.

The output of
"gpg --fixed-list-mode --with-colons --with-colons --with-fingerprint --with
-fingerprint --list-secret-key" (stripping off the header)

sec:u:1024:17:03D6F75D2CBE2E25:1020360671:scESC:
fpr:::::::::6069F40025033E911A51708203D6F75D2CBE2E25:
uid:u::::::::Robert J. Hansen <rjh at sixdemonbag.org>:
uid:r::::::::Robert J. Hansen <rjhansen at inav.net>:
uid:u::::::::Robert J. Hansen <cortana at earthlink.net>:
ssb::3072:16:B6EE81F27926E4DD:1020360737::::::e:
fpr:::::::::25CE8631803FB5DFC0B93CB3B6EE81F27926E4DD:

With the exact same command line, this time adding " rjh" to the end, I get
no header and the following output:

sec:u:1024:17:03D6F75D2CBE2E25:1020360671::
fpr:::::::::6069F40025033E911A51708203D6F75D2CBE2E25:
uid:u::::::::Robert J. Hansen <rjhansen at inav.net>:
uid:u::::::::Robert J. Hansen <rjh at sixdemonbag.org>:
ssb::3072:16:B6EE81F27926E4DD:1020360737:::::::
fpr:::::::::25CE8631803FB5DFC0B93CB3B6EE81F27926E4DD:

... As you can see, we've got some serious problems here.  First, a revoked
UID is showing up as being ultimately trusted, which I would consider to be
a serious problem.  Second, capabilities are missing from the lines
beginning with "sec" and "ssb", which is an orthogonality issue--why should
capabilities be omitted just because I'm listing one specific private key
instead of my entire private keyring, especially when my entire private
keyring consists of one key?  Third, the revoked UID shows up as being the
primary UID (following the implicit rule I've seen so far of the primary UID
always being displayed first in key listings).

My environment is a RH9 box with GnuPG 1.2.1.  I haven't tested this out on
Win32, so I can't say if the same thing happens.

Or am I doing something horribly and stupidly wrong?





More information about the Gnupg-devel mailing list