Automatic check of key revocation

David Shaw dshaw@jabberwocky.com
Thu Dec 19 19:04:32 2002


On Thu, Dec 19, 2002 at 11:45:59AM -0500, mike ledoux wrote:

> On Thu, Dec 19, 2002 at 05:28:23PM +0100, Erwan David wrote:
> > Le Thu 19/12/2002, David Shaw disait
> > > On Thu, Dec 19, 2002 at 09:53:54AM +0100, Erwan David wrote:
> > > > 	Is there a way to automatically check if a key was revoked on
> > > > the key server ? The company I work for wants to enforce this (for an
> > > > internal keyserver with the keys of people in the company). I cannot
> > > > find the feature on gnupg.
> > > 
> > > Use 'gpg --refresh <keyid>'.  If the key is revoked on the server, the
> > > key will then be revoked on your local keyring.
> > 
> > Isn't there a way to make this automatic ? I need to do this on all
> > keys from local domain...
> 
> 'gpg --refresh-keys' (with no other arguments) will do this for every
> key on your keyring.  For large keyrings, this can take a lot of time.

You can also do 'gpg --refresh-keys localdomain' to refresh only keys
that match localdomain.

David

-- 
   David Shaw  |  dshaw@jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson