FAQ addition
Todd
Todd <Freedom_Lover@pobox.com>
Mon Feb 10 06:04:02 2003
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Oliver White wrote:
> Q: I've imported my Windows' PGP keys, but Kmail refuses to use any of the
> keys, because they don't seem to be trusted.
>
> A:
> gpg --list-secret-keys (to get the number of your private key)
> gpg --edit-key [keynumber]
> > help
> > trust (5 is "ultimately trusted" for your own secret key)
> > quit
I initially though, why not this for an answer:
A:
copy (or mount) secring.skr to somewhere accessible by gpg and run:
lspgpot /path/to/secring.skr | gpg --import-ownertrust
But when I tried it I found that lspgpot doesn't work on secret keyrings.
So I made a quick attempt to modify it.
$ diff -u /usr/bin/lspgpot~ /usr/bin/lspgpot
- --- /usr/bin/lspgpot~ Mon Jan 27 22:51:54 2003
+++ /usr/bin/lspgpot Sun Feb 9 23:47:43 2003
@@ -14,10 +14,12 @@
BEGIN { FS=":"
printf "# Ownertrust listing generated by lspgpot\n"
printf "# This can be imported using the command:\n"
- - printf "# ggp --import-ownertrust\n\n" }
+ printf "# gpg --import-ownertrust\n\n" }
+$1 == "sec" { sc = 1 }
$1 == "fpr" { fpr = $10 }
$1 == "rtv" && $2 == 1 && $3 == 2 { printf "%s:3:\n", fpr; next }
$1 == "rtv" && $2 == 1 && $3 == 5 { printf "%s:4:\n", fpr; next }
$1 == "rtv" && $2 == 1 && $3 == 6 { printf "%s:5:\n", fpr; next }
- -'
+sc == 1 && fpr != "" { printf "%s:5:\n", fpr; next }
+' | uniq
I ran this on an old set of pgp keyrings containing 300+ public keys and a
dozen or more secret keys, several of which were revoked. It appears to
have worked fine for the secret keys and it didn't change the output of a
run on the public keys at all (except for the typo I fixed in the header).
- --
Todd OpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
============================================================================
The beatings will continue until morale improves.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.
iD8DBQE+RzMXuv+09NZUB1oRAt8kAKCr+guoyv3nwWf3NVPtDtHnLR8PSQCgo7sJ
ZU4a/mjbOkTwRRPgN8eEcCY=
=ZG65
-----END PGP SIGNATURE-----