Help Solicited to implement a new pgp key server

[David Shaw]

On Apr 8, 2009, at 5:36 AM, rahul kaushik wrote:

>
> I have  been asked  to support PGP for a application. the most likely
> scenario would be to implement a key server that would allow  
> customers to
> manage their keys. This will of course come with some complications,  
> in
> terms of interface, provisioning and management.
>
> Could anybody please help me out in knowing how can i write a server  
> using
> unix c/C++.
>
> If there is any document available on internet which can be helpful.  
> It
> would be great if you could
> please let me know.

My advice is to not reinvent the wheel unless you need something  
substantially different from the two standard keyservers on the net:

1) SKS: http://www.nongnu.org/sks/

Main pro: Syncing with other keyservers
Main con: Client cannot manage keys beyond adding to them (i.e. no  
deletes or replacements - you can only add new signatures/subkeys).

2) LDAP: (any LDAP server you have handy)

Main pro: Allows client to completely manage keys (i.e. deletes,  
replacements work)
Main con: No syncing with other keyservers

David