Yet another problem with trust in 1.0.6c

Janusz A. Urbanowicz alex at bofh.torun.pl
Mon Jan 7 14:38:02 CET 2002


Summary: for some encrypted and signed messages gpg in interactive mode
skips trust value check and reports the signature as fully valid, while in
batch mode the signature is reported as untrusted. Example:

:alex at sword:[~]:132:> gpg erik.asc
gpg: WARNING: --honor-http-proxy is deprecated.
gpg: please use "--keyserver-options honor-http-proxy" instead
gpg: NOTE: THIS IS A DEVELOPMENT VERSION!
gpg: It is only intended for test purposes and should NOT be
gpg: used in a production environment or with production keys!
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/tiger"
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/idea"

You need a passphrase to unlock the secret key for
user: "Janusz A. Urbanowicz <alex at bofh.org.pl>"
2048-bit ELG-E key, ID A2E48564, created 1997-09-24 (main key ID 21939169)

gpg: NOTE: secret key A2E48564 expired at Sun Dec 31 13:11:29 2000 CET
gpg: encrypted with 2048-bit ELG-E key, ID A2E48564, created 1997-09-24
      "Janusz A. Urbanowicz <alex at bofh.org.pl>"
File rik' exists. Overwrite (y/N)? y
gpg: Signature made Tue Nov 13 18:55:17 2001 CET using DSA key ID 43AD6AB8
gpg: Good signature from "Erik Arneson <erik at arneson.org>"
gpg:                 aka "Erik Arneson <erik at starseed.com>"
gpg:                 aka "Erik Arneson <erik at mind.net>"
gpg:                 aka "Erik Arneson <erik at wholegeek.net>"
gpg:                 aka "Erik Arneson (work) <earneson at yahoo-inc.com>"
gpg:                 aka "Erik Arneson (work) <earneson at musiciansfriend.com>"
:alex at sword:[~]:133:> gpg --batch --passphrase-fd 0 erik.asc < pass
gpg: WARNING: --honor-http-proxy is deprecated.
gpg: please use "--keyserver-options honor-http-proxy" instead
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/tiger"
gpg: Warning: unsafe permissions on file "/usr/local/lib/gnupg/idea"
gpg: NOTE: secret key A2E48564 expired at Sun Dec 31 13:11:29 2000 CET
gpg: encrypted with 2048-bit ELG-E key, ID A2E48564, created 1997-09-24
      "Janusz A. Urbanowicz <alex at bofh.org.pl>"
gpg: Signature made Tue Nov 13 18:55:17 2001 CET using DSA key ID 43AD6AB8
gpg: Good signature from "Erik Arneson <erik at arneson.org>"
gpg:                 aka "Erik Arneson <erik at starseed.com>"
gpg:                 aka "Erik Arneson <erik at mind.net>"
gpg:                 aka "Erik Arneson <erik at wholegeek.net>"
gpg:                 aka "Erik Arneson (work) <earneson at yahoo-inc.com>"
gpg:                 aka "Erik Arneson (work) <earneson at musiciansfriend.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Fingerprint: D184 7A7C E5D2 8E8A 8B18  F565 75D4 5C1D 43AD 6AB8
:alex at sword:[~]:134:>

Alex
-- 
Janusz A. Urbanowicz | ALEX3-RIPE | SF-Framling | Thawte Web Of Trust Notary

Gdy daję biednym chleb, nazywają mnie świętym. Gdy pytam, 
dlaczego biedni nie mają chleba, nazywają mnie komunistą. - abp. Helder Camara




More information about the Gnupg-devel mailing list