Yet another problem with trust in 1.0.6c

JanuszA.Urbanowicz JanuszA.Urbanowicz
Mon Jan 7 14:38:02 2002


Summary: for some encrypted and signed messages gpg in interactive mode
skips trust value check and reports the signature as fully valid, while in
batch mode the signature is reported as untrusted. Example:

:alex@sword:[~]:132:> gpg erik.asc
gpg: WARNING: --honor-http-proxy is deprecated.
gpg: please use "--keyserver-options honor-http-proxy" instead
gpg: NOTE: THIS IS A DEVELOPMENT VERSION!
gpg: It is only intended for test purposes and should NOT be
gpg: used in a production environment or with production keys!
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/tiger"
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/idea"

You need a passphrase to unlock the secret key for
user: "Janusz A. Urbanowicz <alex@bofh.org.pl>"
2048-bit ELG-E key, ID A2E48564, created 1997-09-24 (main key ID 21939169)

gpg: NOTE: secret key A2E48564 expired at Sun Dec 31 13:11:29 2000 CET
gpg: encrypted with 2048-bit ELG-E key, ID A2E48564, created 1997-09-24
      "Janusz A. Urbanowicz <alex@bofh.org.pl>"
File =05rik' exists. Overwrite (y/N)? y
gpg: Signature made Tue Nov 13 18:55:17 2001 CET using DSA key ID 43AD6AB8
gpg: Good signature from "Erik Arneson <erik@arneson.org>"
gpg:                 aka "Erik Arneson <erik@starseed.com>"
gpg:                 aka "Erik Arneson <erik@mind.net>"
gpg:                 aka "Erik Arneson <erik@wholegeek.net>"
gpg:                 aka "Erik Arneson (work) <earneson@yahoo-inc.com>"
gpg:                 aka "Erik Arneson (work) <earneson@musiciansfriend.com=
>"
:alex@sword:[~]:133:> gpg --batch --passphrase-fd 0 erik.asc < pass
gpg: WARNING: --honor-http-proxy is deprecated.
gpg: please use "--keyserver-options honor-http-proxy" instead
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/tiger"
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/idea"
gpg: NOTE: secret key A2E48564 expired at Sun Dec 31 13:11:29 2000 CET
gpg: encrypted with 2048-bit ELG-E key, ID A2E48564, created 1997-09-24
      "Janusz A. Urbanowicz <alex@bofh.org.pl>"
gpg: Signature made Tue Nov 13 18:55:17 2001 CET using DSA key ID 43AD6AB8
gpg: Good signature from "Erik Arneson <erik@arneson.org>"
gpg:                 aka "Erik Arneson <erik@starseed.com>"
gpg:                 aka "Erik Arneson <erik@mind.net>"
gpg:                 aka "Erik Arneson <erik@wholegeek.net>"
gpg:                 aka "Erik Arneson (work) <earneson@yahoo-inc.com>"
gpg:                 aka "Erik Arneson (work) <earneson@musiciansfriend.com=
>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owne=
r.
Fingerprint: D184 7A7C E5D2 8E8A 8B18  F565 75D4 5C1D 43AD 6AB8
:alex@sword:[~]:134:>

Alex
--=20
Janusz A. Urbanowicz | ALEX3-RIPE | SF-Framling | Thawte Web Of Trust Notary

Gdy daj=EA biednym chleb, nazywaj=B1 mnie =B6wi=EAtym. Gdy pytam,=20
dlaczego biedni nie maj=B1 chleba, nazywaj=B1 mnie komunist=B1. - abp. Held=
er Camara