encrypting to expired keys (was Re: Expire-date of subkey problem)

David Shaw dshaw at jabberwocky.com
Thu Aug 21 00:52:01 CEST 2003


On Wed, Aug 20, 2003 at 04:36:45PM -0400, Jason Harris wrote:
> On Wed, Aug 20, 2003 at 06:46:32PM +0200, Matto Fransen wrote:
> 
> > I have not been able to the expire-date of a subkey. I have copied a
> > part of the edit-key procedure below:
> 
> [moved from gnupg-users to gnupg-devel]
> 
> Indeed, is there any combination of options to allow GPG (1.2.1 or 1.2.2)
> to encrypt to an _expired_ subkey?  It seems to me that --ignore-time-
> conflict, perhaps combined with --expert, should have been sufficient,
> although adding --trusted-key and fully specifying the subkey to use
> via -r <fingerprint of expired subkey>! didn't help either.

I'll admit to a certain curiosity as to why someone would want to do
such a thing.  This key is no more.  It has ceased to be.  It's
*expired*.

Using it after expiration is against the express wishes of the person
who put the key out there in the first place - the key owner.

David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 268 bytes
Desc: not available
Url : /pipermail/attachments/20030820/7cdeb135/attachment.bin


More information about the Gnupg-devel mailing list