encrypting to expired keys (was Re: Expire-date of subkey problem)

David Shaw dshaw@jabberwocky.com
Wed Aug 20 23:52:01 2003


--EeQfGwPcQSOJBaQU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 20, 2003 at 04:36:45PM -0400, Jason Harris wrote:
> On Wed, Aug 20, 2003 at 06:46:32PM +0200, Matto Fransen wrote:
>=20
> > I have not been able to the expire-date of a subkey. I have copied a
> > part of the edit-key procedure below:
>=20
> [moved from gnupg-users to gnupg-devel]
>=20
> Indeed, is there any combination of options to allow GPG (1.2.1 or 1.2.2)
> to encrypt to an _expired_ subkey?  It seems to me that --ignore-time-
> conflict, perhaps combined with --expert, should have been sufficient,
> although adding --trusted-key and fully specifying the subkey to use
> via -r <fingerprint of expired subkey>! didn't help either.

I'll admit to a certain curiosity as to why someone would want to do
such a thing.  This key is no more.  It has ceased to be.  It's
*expired*.

Using it after expiration is against the express wishes of the person
who put the key out there in the first place - the key owner.

David

--EeQfGwPcQSOJBaQU
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3rc2 (GNU/Linux)
Comment: Key available at http://www.jabberwocky.com/david/keys.asc

iEYEARECAAYFAj9D7cUACgkQ4mZch0nhy8nYEQCZAeojTFimTgMV0AOJ3knzTIPT
W/AAoKmH+hVdPWUMYXjpeTwe14JX28d0
=qDna
-----END PGP SIGNATURE-----

--EeQfGwPcQSOJBaQU--