stripping GD sigs (was: Re: clean sigs)

[Jason Harris]

On Thu, Sep 08, 2005 at 08:00:25PM -0400, David Shaw wrote:
> On Fri, Sep 09, 2005 at 12:33:47AM +0200, Dirk Traulsen wrote:

> > 3. Because now I was irritated, I did the same again with a different 
> > keyserver 'keyserver.kjsl.com' and I got a completely different 
> > result! When I fetched the key 08B0A90B, here it didn't have 47 sigs, 
> > but only 15 sigs (see below output2). There was only a double self 
> > sig, which 'clean' removed later. How can this be, if the keyservers 
> > are synchronized?
> 
> Looks like they're not all that well synchronized :)

Well, keyserver.ubuntu.com is still not participating in email syncs
to non-SKS keyservers, but that's a different problem.

keyserver.kjsl.com is now stripping all GD sigs.  The extra variable
in kd_search.c and code for 'case 2:' of make_keys_elem(), respectively:

static unsigned char gdkeyid[8] = {0x97, 0x10, 0xB8, 0x9B,
				   0xCA, 0x57, 0xAD, 0x7C};


       if ((keyid.size == 8) && (keyid.offset == 0) &&
	   (memcmp (keyid.data, gdkeyid, 8) == 0)) {
	 break;
       }

-- 
Jason Harris           |  NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
jharris at widomaker.com _|_ web:  http://keyserver.kjsl.com/~jharris/
          Got photons?   (TM), (C) 2004
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 313 bytes
Desc: not available
Url : /pipermail/attachments/20050908/60327e3c/attachment.pgp