"invalid subkey binding"

David Shaw dshaw@jabberwocky.com
Tue Jun 11 15:58:01 2002

On Tue, Jun 11, 2002 at 08:20:28AM -0500, David T-G wrote:
> Hi, all --
> When I opened a message a moment ago gpg automatically downloaded the
> key, just as expected, but I got an interesting error in my gpg output:
>   [-- PGP output follows -- Tue Jun 11 08:17:16 2002 --]gpg: Signature made Mon Jun 10 12:52:02 2002 EST using DSA key ID C3300BEC
>   gpg: requesting key C3300BEC from HKP keyserver wwwkeys.eu.pgp.net
>   gpg: key C3300BEC: invalid subkey binding


> I imagine that Michael has a subkey on his key and wouldn't be surprised
> to see the keyserver puke on it, from what I've heard, but this message
> gives the impression that gnupg is unhappy with it.  If that's the case,
> why should that be?

This is an example of the keyserver corrupting keys with multiple
subkeys.  GnuPG is unhappy with the key because it is missing one of
its two subkey binding signatures, and the other binding signature is
moved to the wrong subkey.


   David Shaw  |  dshaw@jabberwocky.com  |  WWW http://www.jabberwocky.com/
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson