Request for a new status code for untrusted keys

Werner Koch wk at gnupg.org
Mon Jan 29 18:06:10 CET 2007


On Tue, 26 Dec 2006 06:05, ueno at unixuser.org said:

> Hello,
>
> When I encrypt to a user whose key is not marked as trusted, gpg shows
> detail information about the key and asks me to confirm.  However, if
> --no-tty is specified, there is no status code to indicate which
> (sub)key is untrusted.
>
> $ gpg2 --no-tty --status-fd=1 --command-fd=0 -r 5B0358A2 \
>        --encrypt /dev/null
> gpg: C3680A6E: There is no assurance this key belongs to the named user
> [GNUPG:] GET_BOOL untrusted_key.override
>
> Sorry for bothering you again, may I request a new status code (perhaps
> NEED_TRUST <key-id>)?

What about this?

  $ gpg2 --no-tty --status-fd=1 --command-fd=0 -r B15813FE --encrypt -o /dev/null /dev/null 
  gpg: 2A9BEA2D: There is no assurance this key belongs to the named user
  [GNUPG:] USERID_HINT 4447461B2A9BEA2D Daiki Ueno <ueno at unixuser.org>
  [GNUPG:] GET_BOOL untrusted_key.override

This has the advantage of reusing the USERID_HINT as used with the
passphrase prompt.

It will display the subkey but that should not be a problem.


Shalom-Salam,

   Werner




More information about the Gnupg-devel mailing list