What causes this bad signature

[gnupgpacker]

Hi,

there is a German government service that signs PGP keys??

What's the way to get it signed? Which institution?

Thanks, Chris

> -----Original Message-----
> From: Gnupg-users [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of
> gnupg-users-request at gnupg.org
> Sent: Sunday, November 15, 2015 2:54 AM
> To: gnupg-users at gnupg.org
> Subject: Gnupg-users Digest, Vol 146, Issue 7
> 
> Today's Topics:
> 
>    1. What causes this bad signature (Sebastian Wiesinger)
>    2. Re: What causes this bad signature (david at gbenet.com)
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Sat, 14 Nov 2015 21:28:09 +0100
> From: Sebastian Wiesinger <sebastian at karotte.org>
> To: GnuPG Help and Discussion <gnupg-users at gnupg.org>
> Subject: What causes this bad signature
> Message-ID: <20151114202809.GA7962 at danton.fire-world.de>
> Content-Type: text/plain; charset="us-ascii"
> 
> Hello,
> 
> for fun I tried a German government (or public-private partnership)
> service that signs your PGP key if your name on a uid matches the
> electronic data on your ID card (Neuer Personalausweis, nPA). I tried
> this and got my signed key back. I tried to import it into my keyring
> and imagine my surprise when it didn't show up. Reason being: I have
> "import-options import-clean" set and the signature is somehow bad.
> 
> Is there a way to see why the signature is bad? If I decide to let
> them know that their service fails I would like to be able to tell
> them what they did wrong.
> 
> My key is 0x58A2D94A93A0B9CE and their signature comes from
> 0x5E5CCCB4A4BF43D7:
> 
> pub   2048R/0x58A2D94A93A0B9CE 2009-08-11
> uid                 [ultimate] Sebastian Wiesinger <sebastian at karotte.org>
> sig!3   P    0x58A2D94A93A0B9CE 2015-03-27 never       Sebastian Wiesinger
> <sebastian at karotte.org>
> sig-3      1 0x5E5CCCB4A4BF43D7 2015-11-14 never       Governikus OpenPGP
> Signaturservice (Neuer Personalausweis) <kontakt at governikus.com>
> 
> I attached the signed key for your interest.
> 
> Regards Sebastian
> 
> --
> GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
> 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE
> SCYTHE.
>             -- Terry Pratchett, The Fifth Elephant
> ------------------------------
> 
> Message: 2
> Date: Sun, 15 Nov 2015 02:03:06 +0000
> From: "david at gbenet.com" <david at gbenet.com>
> To: gnupg-users at gnupg.org
> Subject: Re: What causes this bad signature
> Message-ID: <5647E7DA.6020104 at gbenet.com>
> Content-Type: text/plain; charset="utf-8"
> 
> On 14/11/15 20:28, Sebastian Wiesinger wrote:
> > Hello,
> >
> > for fun I tried a German government (or public-private partnership)
> > service that signs your PGP key if your name on a uid matches the
> > electronic data on your ID card (Neuer Personalausweis, nPA). I tried
> > this and got my signed key back. I tried to import it into my keyring
> > and imagine my surprise when it didn't show up. Reason being: I have
> > "import-options import-clean" set and the signature is somehow bad.
> >
> > Is there a way to see why the signature is bad? If I decide to let
> > them know that their service fails I would like to be able to tell
> > them what they did wrong.
> >
> > My key is 0x58A2D94A93A0B9CE and their signature comes from
> > 0x5E5CCCB4A4BF43D7:
> >
> > pub   2048R/0x58A2D94A93A0B9CE 2009-08-11
> > uid                 [ultimate] Sebastian Wiesinger
> <sebastian at karotte.org>
> > sig!3   P    0x58A2D94A93A0B9CE 2015-03-27 never       Sebastian
> Wiesinger <sebastian at karotte.org>
> > sig-3      1 0x5E5CCCB4A4BF43D7 2015-11-14 never       Governikus
> OpenPGP Signaturservice (Neuer Personalausweis) <kontakt at governikus.com>
> >
> > I attached the signed key for your interest.
> >
> > Regards Sebastian