setting expiration date changes primary UID (was: Re: GnuPG race causes misordered uids?

Werner Koch wk at
Wed May 28 09:56:01 CEST 2003

On Tue, 27 May 2003 12:11:58 -0400, David Shaw said:

> I think it would be reasonable to ensure that the earliest user ID
> before the "expire" command is still the earliest after the command.

If you the want to change the expiration time of the earliest user ID,
the timestamp of the self-signature needs to be faked; i.e. set to the
old date or a date before any other self-signatures timestamp.  IMHO
it would be surprise to if a user-ID/self-signature get an new
expuration time but the timestamp does not reflect the date of the

Better make sure the primary flag has been set.  A warning should be



  Nonviolence is the greatest force at the disposal of
  mankind. It is mightier than the mightiest weapon of
  destruction devised by the ingenuity of man. -Gandhi

More information about the Gnupg-devel mailing list