[OT?]: Keyserver / Subkeys / replicating selfsigs

[Sascha Lüdecke]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi all!

After some keysigning I was notified that my key on wwwkeys.pgp.net
is unuseable.   After taking a closer look there are strange
effects.  This is my key:

pub  1024D/CC611EE6 2000-01-26 Sascha Luedecke (private) <sascha at meta-x.de>
uid                            Moxon <moxon at meta-x.de>
sub  2048g/85D3C1A7 2000-01-26 [expires: 2003-01-25]
sub  2048g/BC8DCB23 2003-04-04 [expires: 2006-04-03]
sub  1024D/5240B9BF 2003-04-04 [expires: 2006-04-03]


1. Problem: uploading to the keyserver
======================================

When I export my key to the hkp://wwwkeys.pgp.net keyserver:

a)  gnupg doesn't give me an error message

    gpg --verbose --send-key cc611ee6

    The key is silently accepted but the new subkeys are _not_ listed
    on the keyserver.  I tried this at least three times (giving it a
    night to update its databse) with no success (but other effects,
    see blow).

    Maybe GnuPG should give some error message (if hkp tells it about
    errors).


b)  parts of the key get rejected.  When submitting through the
    webinterface, the result is:

    Key block in add request contained no new
    keys, userid's, or signatures.
    Your key block contained 5 format errors,
    which were treated as if the erroneous elements
    hadn't been part of your submission.
    The last error was on key 0x037aaac0:
    Key block corrupt: more than one signature on subkey

    Aha.  gpg tells me that (gpg --export --armor cc611ee6 | gpg --verbose -)

    pub  1024D/CC611EE6 2000-01-26 Sascha Luedecke (private) <sascha at meta-x.de>
    [...]
    uid                            Moxon <moxon at meta-x.de>
    [...]
    sub  2048g/85D3C1A7 2000-01-26  [expires: 2003-01-25]
    sig        CC611EE6 2003-10-06   [selfsig]
    sig        CC611EE6 2000-01-26   [keybind]
    sub  2048g/BC8DCB23 2003-04-04  [expires: 2006-04-03]
    sig        CC611EE6 2003-04-04   [keybind]
    sub  1024D/5240B9BF 2003-04-04  [expires: 2006-04-03]
    sig        CC611EE6 2003-04-04   [keybind]

    Whats going wrong here?



2. Problem:  replicating selfsigs
=================================

I "gpg --recv-key" several times since I have been on a keysigning
party this weekend.  Each time I get some new signatures which is
great (thanks if anyone of them is listening).   But:  each time I
- --refresh-keys or --recv-key the list of selfsigs on my key grows,
currently (other sigs removed):


    pub  1024D/CC611EE6 2000-01-26 Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2000-02-10   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2003-10-06   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2003-10-06   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>
    sig 3       CC611EE6 2004-05-08   Sascha Luedecke (private) <sascha at meta-x.de>

Fine, I definitely trust myself and since I forget a lot of things I
express this twice, 3x, ... DAILY *bg*

so:

a)  what can I do to get rid of this selfsigs
b)  how can I stop the keyserver or gnupg from replicating this sigs?


Regards,
Sascha

PS: If you want my key, get it from http://meta-x.de/openpgp.asc,
    _not_ from the keyserver!!


- -- 
He who dies with the most toys is dead.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAn0iEwapeXFJAub8RAuRlAJ9VQztHkMd+D/xPFInE9CN8Q6Iu5ACePEla
w2wK83csKz2SzqzqCj+DwaA=
=rIe8
-----END PGP SIGNATURE-----