Mainkey with many subkeys??

[Peter Lebbing]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/12/14 16:37, Kristian Fiskerstrand wrote:
> This key will always be capable of signing by definition

In what sense is that? It seems GnuPG is not letting me sign data with a
certify-only key:

$ gpg2 --edit-key de500b3e
[...]
pub  2048R/DE500B3E  created: 2009-11-12  expires: 2015-10-27  usage: C
                     trust: ultimate      validity: ultimate
sub  2048R/DE6CDCA1  created: 2009-11-12  expires: 2015-10-27  usage: S
sub  2048R/73A33BEE  created: 2009-11-12  expires: 2015-10-27  usage: E
sub  2048R/B65D8246  created: 2009-12-05  expires: 2015-10-27  usage: A
[...]

$ echo hoi | gpg2 -u 0xDE500B3E\! -o test_cert_sig.gpg -s
gpg: skipped "0xDE500B3E!": Unusable secret key
gpg: signing failed: Unusable secret key

Peter.

- -- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>