GPG not retrieving keys when verifying

Peter Pentchev roam at ringlet.net
Mon Apr 18 11:07:51 CEST 2011


On Sun, Apr 17, 2011 at 05:20:37PM +0200, Martin Gollowitzer wrote:
> * Todd A. Jacobs <codegnome.consulting+gnupg.org at gmail.com> [110417 17:14, 
>   mID <BANLkTin=uaJDGvq_ayU6hM_iKrcvdrV7ng at mail.gmail.com>]:
> 
> > I'm not sure how I'm supposed to get GPG to automatically retrieve
> > keys for signatures when validating a key. I'm currently running:
> > 
> >     gpg --keyserver-options auto-key-retrieve -kvv FBB75451
> > 
> > which doesn't do what I expect. I get a whole bunch of [User ID not
> > found] messages, when what I expected was that keys matching those
> > signatures would be retrieved from the keyserver.
> > 
> > What am I doing wrong here?
> 
> The auto-key-retrieve options is for signatures made on content, not on
> keys. AFAIK there is no option for automatically retrieving all keys
> that signed a key.

...and you really, *really*, REALLY don't want to do this automatically
and recursively :) (okay, so you fetch the keys that signed this key, now
what about the signatures on them - do you fetch them too? and the sigs
on those again? when do you stop?)

G'luck,
PEter

-- 
Peter Pentchev	roam at ringlet.net roam at FreeBSD.org peter at packetscale.com
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
Nostalgia ain't what it used to be.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: </pipermail/attachments/20110418/86caf8fb/attachment.pgp>


More information about the Gnupg-users mailing list