Create a key without subkey?

[David Shaw]

On Mon, Sep 25, 2006 at 06:59:46PM +0200, Eike Herzbach wrote:
> Hi,
> 
> How do I generate an encryption key with gnupg? I tried some options
> but it always generates me a sign-only key with an encryption subkey.
> I need to receive encrypted financial data from a system that uses
> PGP5. When I send in my key to that system it outputs me the
> following:
> 
> ----[PGP Ausgabeprotokoll]----
> Adding keys:
> Key ring: 'eike at example.com'
> Type Bits KeyID      Created    Expires    Algorithm       Use
> pub  1024 0xAF7B19C4 2006-09-25 ---------- DSS             Sign only
> sub  2048 0x508FA9D7 2006-09-25 ---------- Diffie-Hellman
> uid  Eike Herzbach <eike at example.com>
> 
> Later when the system tries to send me an encrypted message it fails
> and says that it can't encrypt with a Sign-only key. (I guess it is
> not able to use the subkey and only sees the 'outer' key)

This is a problem in PGP 5.  PGP 5 is extremely old and does not work
well at this point.  If you are being forced to use PGP 5 by a
financial company, this does not say good things about the company.

David